Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e372e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e372e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          RVidV63YB4bpUew7huaLoushujB4JCj/QUs7OtaIlAo=
Subject key identifier:   66:52:CA:80:67:7A:01:9F:61:2B:70:76:C1:5E:25:F6:92:83:6C:3D
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       3EF4D08D620051F2A97B4D0CB3D00E80FBAF9BF7
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e372e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:16 +0000
ROA not before:           Wed 29 Sep 2021 23:55:16 +0000
ROA not after:            Fri 30 Sep 2022 00:00:16 +0000
asID:                     17451
IP address blocks:        182.253.7.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:f4:d0:8d:62:00:51:f2:a9:7b:4d:0c:b3:d0:0e:80:fb:af:9b:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:16 2021 GMT
            Not After : Sep 30 00:00:16 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:56:cb:b0:a0:be:86:d5:8d:68:0d:f4:f2:f4:
                    51:dc:3b:1d:1a:76:9f:d1:5c:ab:97:d8:74:c4:79:
                    e0:57:87:a0:81:58:b6:bf:04:81:bb:b4:2f:e6:91:
                    91:8b:00:27:c1:a1:1f:45:76:17:77:1f:97:cd:c5:
                    6f:a8:5d:df:b3:89:b3:e2:5d:1c:15:5d:32:66:dc:
                    8a:3f:0a:23:9b:4e:e8:ca:72:92:db:5c:5c:2f:20:
                    b8:9b:1b:2b:5f:0d:70:78:96:66:e7:ed:32:6c:53:
                    c6:67:5b:a1:58:a9:34:b8:da:19:39:29:3a:dc:66:
                    a2:cc:14:25:9a:cf:71:6f:eb:72:0d:08:a1:48:18:
                    9c:0b:72:64:98:8c:7e:db:1d:44:39:aa:25:da:50:
                    c1:ff:64:52:90:ae:81:db:6e:4c:44:33:ca:31:10:
                    43:80:76:9a:3d:94:9d:60:45:06:7b:aa:74:d2:c6:
                    cb:46:46:b1:2e:c5:ee:fd:85:41:cc:e1:60:49:29:
                    be:55:3e:4f:c2:0e:94:4a:66:cf:f2:ef:4c:c3:5e:
                    3a:2f:90:03:a5:f2:c5:b4:5a:f2:82:3b:c0:80:e2:
                    49:a2:7c:45:8a:c7:12:43:d9:a6:fe:ea:df:94:d9:
                    15:c6:95:21:54:3f:3e:fa:2d:ed:3b:8c:83:7a:ff:
                    12:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:52:CA:80:67:7A:01:9F:61:2B:70:76:C1:5E:25:F6:92:83:6C:3D
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e372e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.7.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:8e:d3:67:06:1a:9b:59:16:4d:e8:32:ff:62:d2:7d:f8:f1:
         37:b1:e7:c4:87:2e:1a:7b:02:d7:49:4f:5c:1c:e0:46:d4:85:
         9c:93:0f:d4:1b:9d:dc:9e:91:7f:f3:48:b1:12:92:14:80:57:
         54:27:42:0c:30:41:7b:50:cb:4a:5e:0f:56:43:41:8f:36:f2:
         31:10:61:67:db:63:68:c0:4e:71:6b:5f:f6:a9:c2:20:31:1a:
         cb:c1:05:fa:24:4d:a5:c2:46:b6:a6:05:dd:71:25:c9:c8:45:
         26:16:1c:af:a5:47:a7:f9:b9:ab:9c:b5:db:26:08:3c:8a:b5:
         a5:53:9d:64:62:26:fd:4c:9e:1e:a7:81:ea:4d:a2:d2:e7:a0:
         aa:70:c0:19:77:46:61:83:c3:62:80:1a:86:57:78:08:d1:13:
         24:ba:de:73:be:06:4d:d6:99:53:da:c4:96:e8:12:a5:3d:66:
         41:7f:18:6b:af:76:24:0e:3e:a8:09:64:14:2a:a9:9a:5c:7c:
         ea:4f:a9:e0:dc:3c:4a:94:b0:b4:ac:a7:c7:27:ab:da:42:61:
         54:bc:a1:65:e7:8b:4b:6e:70:b5:b1:2f:42:ad:ec:99:2f:0e:
         fb:a1:5b:ae:34:ac:5d:28:d8:f5:7b:63:ad:b1:ed:2e:83:0d:
         af:6f:bc:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----