Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e36352e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e36352e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          LhlxRV1IkcCoGuIBpw0FTti+RG7TWALf2EfbH08FI0o=
Subject key identifier:   FA:F1:B9:16:D6:92:B1:3C:F4:7B:C8:C9:6A:32:98:51:B5:88:7F:AC
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       3D95A7ABCB162B75BAC010B043DCC6E7DEC14F32
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e36352e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:21 +0000
ROA not before:           Wed 29 Sep 2021 23:55:21 +0000
ROA not after:            Fri 30 Sep 2022 00:00:21 +0000
asID:                     17451
IP address blocks:        182.253.65.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:95:a7:ab:cb:16:2b:75:ba:c0:10:b0:43:dc:c6:e7:de:c1:4f:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:21 2021 GMT
            Not After : Sep 30 00:00:21 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:27:5c:4a:da:9e:91:bd:cf:21:02:73:97:5d:
                    87:1b:1c:53:85:52:b4:25:5c:ac:05:b4:9c:f5:0b:
                    40:87:8b:06:60:22:c3:0c:9d:34:4f:d1:1d:5f:93:
                    4e:62:0b:eb:b4:d1:21:2a:36:15:99:69:f6:a4:99:
                    99:8e:cb:f1:a1:06:50:d9:7a:60:13:8c:b6:f8:0e:
                    0c:d2:c9:72:90:c0:c8:42:85:7f:90:03:fc:be:16:
                    a0:aa:6a:7f:e2:ed:1c:ce:95:5a:0e:e2:5b:13:76:
                    28:e2:ab:13:6b:1d:25:a4:2a:dc:ea:1b:11:0a:36:
                    a8:cd:05:74:c3:52:1d:98:38:dd:04:32:9d:39:5a:
                    01:fa:d0:c5:eb:4a:d6:1a:ae:83:dd:7a:22:69:3c:
                    a6:7c:13:a7:fc:80:6a:f4:28:9b:a6:fe:b7:e7:20:
                    ff:2c:f6:53:30:9f:56:ba:7b:8d:ab:6e:72:de:bd:
                    8e:f6:9e:d8:39:e5:b4:eb:ef:1f:6a:a2:f8:b5:d1:
                    c9:be:e6:bb:50:a9:b3:a1:e0:ba:07:b1:98:02:6e:
                    cd:43:6f:ed:24:6a:22:a0:d2:f8:13:b8:a4:ae:79:
                    77:41:a8:07:ca:43:8a:23:89:0f:3c:e5:1c:58:02:
                    4d:e0:0f:22:a8:0f:a0:f3:7d:e5:49:29:86:de:a3:
                    f9:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:F1:B9:16:D6:92:B1:3C:F4:7B:C8:C9:6A:32:98:51:B5:88:7F:AC
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e36352e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:3f:a4:6b:94:e7:ec:e1:2d:6e:7c:4a:e6:a0:60:55:0f:58:
         5f:20:34:53:33:50:30:7c:da:a8:3c:ad:d2:92:2e:4a:98:8a:
         a1:bc:bd:a3:6e:d6:74:05:54:7f:e1:3f:1a:9d:65:66:eb:52:
         db:36:63:f9:2b:82:b4:16:11:a2:0f:6a:a1:78:2b:b1:7e:1d:
         32:60:d3:21:eb:f2:03:98:fd:2f:93:93:e7:51:62:f0:cb:d0:
         d7:38:99:b0:7c:3d:8a:1b:64:68:18:bc:03:54:e4:0d:a4:86:
         2e:dd:c4:08:e5:11:a0:3d:0e:54:25:a0:16:2b:08:4a:d6:7c:
         c4:b5:80:2b:cc:e9:8c:14:5a:40:ed:17:aa:1a:f9:b3:cc:20:
         a6:59:a7:5b:f7:e0:df:f9:7a:36:a1:a8:57:a1:5b:4e:73:88:
         78:52:8c:05:3c:9b:1e:51:21:96:fe:c3:1e:0c:3a:c4:62:59:
         e4:39:00:2b:2d:71:56:a9:76:7e:96:01:c5:83:23:8e:ca:fc:
         ce:c1:3b:55:4c:ed:06:fd:0b:a5:76:cd:28:97:97:02:47:be:
         ee:e7:d8:ae:9a:f1:ea:c0:94:75:15:3f:5a:3a:05:1c:71:97:
         b8:47:58:fc:5d:6a:72:30:69:92:1d:15:09:7c:33:71:26:b3:
         db:19:5d:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----