Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e37342e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e37342e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          foCW9X9Xvi1iQckLu8wzKALKvAjBsViZXLi4LPsdIxc=
Subject key identifier:   25:11:D0:9E:EB:7B:82:09:D5:A0:04:F9:4B:6C:E6:74:EC:92:95:CE
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       483137BB828435C2DEF12B6DB55B5ED0A5241303
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e37342e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:01:01 +0000
ROA not before:           Wed 29 Sep 2021 23:56:01 +0000
ROA not after:            Fri 30 Sep 2022 00:01:01 +0000
asID:                     17451
IP address blocks:        182.253.74.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:31:37:bb:82:84:35:c2:de:f1:2b:6d:b5:5b:5e:d0:a5:24:13:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:56:01 2021 GMT
            Not After : Sep 30 00:01:01 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:b5:bf:ab:d1:fb:91:a8:f2:20:a7:ec:2d:1b:
                    55:2e:0c:b1:92:e5:38:74:93:ec:63:b1:e2:68:f4:
                    1f:6d:b3:4f:31:0e:e0:63:69:a3:a4:90:46:a5:88:
                    4d:2a:0f:3a:b3:09:c0:46:6f:43:1b:fe:0d:2c:a6:
                    51:0a:6c:bf:79:6c:df:f7:86:5f:68:5c:06:15:05:
                    49:ec:d4:84:5b:d0:ae:20:81:b9:0c:38:54:bd:45:
                    05:b4:bf:9c:9d:6f:90:72:01:d3:f9:00:1e:83:9d:
                    6a:9c:bd:77:7b:2d:b0:b5:74:e1:df:8f:3f:3c:f0:
                    6d:cf:02:1b:19:3c:ec:4b:77:e0:1c:06:fc:35:e0:
                    74:82:82:82:f4:2a:49:c9:e5:42:7f:f3:46:28:47:
                    28:13:ea:60:91:01:79:f0:e2:da:8c:df:04:e7:b5:
                    56:3f:02:4f:8a:04:9d:cc:2c:0e:18:c8:47:0b:d0:
                    0d:cc:b7:71:87:8a:c1:c3:46:9e:03:f5:70:01:41:
                    15:8f:53:04:e0:02:00:9c:56:cc:f8:57:d1:e5:20:
                    bb:09:da:e9:98:6e:4e:38:4e:05:1b:d0:da:28:94:
                    09:18:29:36:c5:c2:10:66:6b:38:5d:6e:db:80:02:
                    03:57:d6:99:49:15:77:5c:66:6f:0d:15:f0:68:30:
                    5d:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:11:D0:9E:EB:7B:82:09:D5:A0:04:F9:4B:6C:E6:74:EC:92:95:CE
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e37342e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:43:d7:11:49:6c:66:0a:9e:1e:07:fa:27:6b:e9:a6:3f:23:
         63:ac:84:2c:e2:25:da:b0:3d:11:44:b6:84:0a:9b:34:89:58:
         09:44:e4:68:5e:35:db:02:57:eb:3f:63:9b:bf:d4:02:fb:f9:
         e8:c5:04:e5:01:ed:4f:ae:f9:56:92:ee:fe:51:06:be:23:e3:
         68:59:87:0a:33:cc:3e:12:a8:14:51:75:6d:5f:18:b8:a1:40:
         de:4a:88:b4:bf:35:ec:3c:44:66:43:3c:d3:77:c8:b0:dd:1f:
         f1:66:65:3a:91:ff:9b:6f:1a:a0:a0:b7:2e:03:1e:92:2b:82:
         27:d0:3c:0c:df:fe:e5:6b:41:cd:75:d8:ff:8a:30:03:87:fa:
         fa:05:01:b3:e3:0e:c6:db:aa:f5:8d:c3:76:75:ce:ab:c1:7d:
         5e:a3:56:67:27:d6:7a:e8:42:f0:fe:d0:eb:79:f9:45:65:e5:
         f4:18:b6:7d:d5:09:82:84:26:52:42:46:be:eb:68:b7:25:52:
         80:6b:02:0c:e8:e9:d0:d6:e2:d4:e7:73:9c:6c:97:bd:82:8b:
         cf:2f:f0:9a:77:3c:b2:74:e4:be:5c:56:14:b4:18:c1:b2:89:
         50:74:90:86:f7:c5:1b:2c:c5:56:ee:e1:0a:17:2f:da:42:77:
         a4:d0:0c:d4
-----BEGIN CERTIFICATE-----
MIIHJDCCBgygAwIBAgIUSDE3u4KENcLe8StttVte0KUkEwMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJBNDE3
RjcyOERCRjAeFw0yMTA5MjkyMzU2MDFaFw0yMjA5MzAwMDAxMDFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkFCNUJGQUJEMUZCOTFBOEYy
MjBBN0VDMkQxQjU1MkUwQ0IxOTJFNTM4NzQ5M0VDNjNCMUUyNjhGNDFGNkRCMzRG
MzEwRUUwNjM2OUEzQTQ5MDQ2QTU4ODREMkEwRjNBQjMwOUMwNDY2RjQzMUJGRTBE
MkNBNjUxMEE2Q0JGNzk2Q0RGRjc4NjVGNjg1QzA2MTUwNTQ5RUNENDg0NUJEMEFF
MjA4MUI5MEMzODU0QkQ0NTA1QjRCRjlDOUQ2RjkwNzIwMUQzRjkwMDFFODM5RDZB
OUNCRDc3N0IyREIwQjU3NEUxREY4RjNGM0NGMDZEQ0YwMjFCMTkzQ0VDNEI3N0Uw
MUMwNkZDMzVFMDc0ODI4MjgyRjQyQTQ5QzlFNTQyN0ZGMzQ2Mjg0NzI4MTNFQTYw
OTEwMTc5RjBFMkRBOENERjA0RTdCNTU2M0YwMjRGOEEwNDlEQ0MyQzBFMThDODQ3
MEJEMDBEQ0NCNzcxODc4QUMxQzM0NjlFMDNGNTcwMDE0MTE1OEY1MzA0RTAwMjAw
OUM1NkNDRjg1N0QxRTUyMEJCMDlEQUU5OTg2RTRFMzg0RTA1MUJEMERBMjg5NDA5
MTgyOTM2QzVDMjEwNjY2QjM4NUQ2RURCODAwMjAzNTdENjk5NDkxNTc3NUM2NjZG
MEQxNUYwNjgzMDVEMTkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAurW/q9H7kajyIKfsLRtVLgyxkuU4dJPsY7HiaPQfbbNPMQ7gY2mj
pJBGpYhNKg86swnARm9DG/4NLKZRCmy/eWzf94ZfaFwGFQVJ7NSEW9CuIIG5DDhU
vUUFtL+cnW+QcgHT+QAeg51qnL13ey2wtXTh348/PPBtzwIbGTzsS3fgHAb8NeB0
goKC9CpJyeVCf/NGKEcoE+pgkQF58OLajN8E57VWPwJPigSdzCwOGMhHC9ANzLdx
h4rBw0aeA/VwAUEVj1ME4AIAnFbM+FfR5SC7CdrpmG5OOE4FG9DaKJQJGCk2xcIQ
Zms4XW7bgAIDV9aZSRV3XGZvDRXwaDBdGQIDAQABo4ICMjCCAi4wHQYDVR0OBBYE
FCUR0J7re4IJ1aAE+Uts5nTskpXOMB8GA1UdIwQYMBaAFKxVVEe6YsORB/Fr9XL4
KkF/co2/MA4GA1UdDwEB/wQEAwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzk5M2YzNTAtYjc1Ni00OTE2LThk
ODQtNDg0ZjAyNWRmZmNjLzAvQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJB
NDE3RjcyOERCRi5jcmwwdAYIKwYBBQUHAQEEaDBmMGQGCCsGAQUFBzAChlhyc3lu
YzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8yL0FDNTU1NDQ3
QkE2MkMzOTEwN0YxNkJGNTcyRjgyQTQxN0Y3MjhEQkYuY2VyMIGiBggrBgEFBQcB
CwSBlTCBkjCBjwYIKwYBBQUHMAuGgYJyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby8zOTkzZjM1MC1iNzU2LTQ5MTYtOGQ4NC00ODRmMDI1ZGZmY2MvMC8z
MTM4MzIyZTMyMzUzMzJlMzczNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzcz
NDM1MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBAC2/UowDQYJKoZIhvcNAQELBQADggEBAIFD1xFJbGYK
nh4H+idr6aY/I2OshCziJdqwPRFEtoQKmzSJWAlE5GheNdsCV+s/Y5u/1AL7+ejF
BOUB7U+u+VaS7v5RBr4j42hZhwozzD4SqBRRdW1fGLihQN5KiLS/New8RGZDPNN3
yLDdH/FmZTqR/5tvGqCgty4DHpIrgifQPAzf/uVrQc112P+KMAOH+voFAbPjDsbb
qvWNw3Z1zqvBfV6jVmcn1nroQvD+0Ot5+UVl5fQYtn3VCYKEJlJCRr7raLclUoBr
Agzo6dDW4tTnc5xsl72Ci88v8Jp3PLJ05L5cVhS0GMGyiVB0kIb3xRssxVbu4QoX
L9pCd6TQDNQ=
-----END CERTIFICATE-----