Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e38362e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e38362e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          mR3wqlfk6K+bHS66oN3daBc1Cv3+k3dM8wD4iumjdKI=
Subject key identifier:   6A:5C:B1:0B:11:00:B2:73:C2:2C:C5:A2:58:15:FD:EE:AA:AE:A5:56
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       5A2467291441324810B98EE5FDFFB137DB6FEAF0
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e38362e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:55 +0000
ROA not before:           Wed 29 Sep 2021 23:55:55 +0000
ROA not after:            Fri 30 Sep 2022 00:00:55 +0000
asID:                     17451
IP address blocks:        182.253.86.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:24:67:29:14:41:32:48:10:b9:8e:e5:fd:ff:b1:37:db:6f:ea:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:55 2021 GMT
            Not After : Sep 30 00:00:55 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a0:f4:95:80:77:30:66:31:2f:c4:96:ca:0a:
                    03:ba:6e:b6:74:fa:c6:50:07:ab:d1:bb:8a:1f:8e:
                    46:52:ab:5f:87:28:53:6a:ea:12:97:ea:da:cb:e6:
                    df:72:4c:41:05:2b:a6:8d:69:bb:bf:a3:db:28:69:
                    20:a1:ac:34:0f:d1:7c:5f:37:6e:72:8d:f0:c0:45:
                    ed:46:48:56:a7:9e:e4:ee:8d:c9:52:5b:20:ac:87:
                    41:41:a9:78:00:a3:76:fd:fe:31:3f:c3:c8:44:ee:
                    09:79:7e:b7:50:c7:29:03:32:ca:48:0f:5f:29:79:
                    98:7e:62:10:97:e9:76:9a:3d:17:93:34:91:98:ba:
                    be:bd:cc:c3:f5:86:86:e2:7e:ac:b9:a0:91:3e:68:
                    89:83:5a:be:a5:1b:9b:9f:de:27:e3:dd:ae:ee:0e:
                    5f:db:00:ff:a0:95:20:f9:b4:b0:a6:f5:76:6b:10:
                    f4:53:4b:33:c6:39:c7:0f:e2:55:e6:63:13:b8:ae:
                    86:bc:80:03:48:c1:aa:ca:c3:ec:6a:a9:6e:33:38:
                    7a:5a:c8:5a:87:c9:ca:be:9a:be:ae:31:9a:fe:1e:
                    2d:28:36:aa:00:6e:d0:a5:e6:74:31:c0:98:23:50:
                    4a:72:c4:b5:00:9d:45:99:e7:60:fc:15:7a:2b:91:
                    da:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:5C:B1:0B:11:00:B2:73:C2:2C:C5:A2:58:15:FD:EE:AA:AE:A5:56
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e38362e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         09:c5:25:16:2f:74:1b:5e:93:d2:69:46:25:4c:fa:99:ba:4b:
         e2:8a:77:ba:91:6b:e9:3f:9a:81:65:1f:11:62:54:7a:bf:b4:
         7c:1a:2e:4d:ee:db:34:1b:71:72:af:17:c4:5c:1c:9d:d6:ec:
         ea:ba:f6:be:eb:a3:8f:e8:45:f3:b5:03:0d:90:4b:44:3f:7a:
         e2:79:63:e5:2b:44:de:95:28:fe:a4:b6:c6:29:04:19:0b:4f:
         51:cb:ef:30:69:ed:7b:19:3c:40:fd:e0:30:d0:8c:8e:16:f0:
         a4:db:99:3b:39:be:c7:b7:57:20:98:d4:9b:ae:3b:ed:b2:5d:
         5e:96:30:be:57:ec:89:ae:2e:3d:00:06:87:75:6b:67:19:e2:
         99:3d:79:91:f1:24:36:bd:3b:7d:09:f8:aa:b8:fd:45:d3:93:
         98:74:f4:c7:ba:2c:ae:70:38:48:a1:5c:a0:20:04:d8:64:7a:
         47:41:0d:52:f1:78:e1:cb:5e:7b:19:f6:57:fc:47:fe:04:aa:
         1c:fd:69:a9:74:b7:a1:91:d0:4e:c7:95:55:64:70:d5:c8:01:
         f8:e9:a7:f8:bc:83:e1:bd:a5:0f:df:2b:77:0e:f1:cc:2a:40:
         62:89:14:db:8f:a5:2e:15:85:8e:48:9a:ed:7c:e4:38:7c:16:
         21:e9:c9:37
-----BEGIN CERTIFICATE-----
MIIHJDCCBgygAwIBAgIUWiRnKRRBMkgQuY7l/f+xN9tv6vAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJBNDE3
RjcyOERCRjAeFw0yMTA5MjkyMzU1NTVaFw0yMjA5MzAwMDAwNTVaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjdBMEY0OTU4MDc3MzA2NjMx
MkZDNDk2Q0EwQTAzQkE2RUI2NzRGQUM2NTAwN0FCRDFCQjhBMUY4RTQ2NTJBQjVG
ODcyODUzNkFFQTEyOTdFQURBQ0JFNkRGNzI0QzQxMDUyQkE2OEQ2OUJCQkZBM0RC
Mjg2OTIwQTFBQzM0MEZEMTdDNUYzNzZFNzI4REYwQzA0NUVENDY0ODU2QTc5RUU0
RUU4REM5NTI1QjIwQUM4NzQxNDFBOTc4MDBBMzc2RkRGRTMxM0ZDM0M4NDRFRTA5
Nzk3RUI3NTBDNzI5MDMzMkNBNDgwRjVGMjk3OTk4N0U2MjEwOTdFOTc2OUEzRDE3
OTMzNDkxOThCQUJFQkRDQ0MzRjU4Njg2RTI3RUFDQjlBMDkxM0U2ODg5ODM1QUJF
QTUxQjlCOUZERTI3RTNEREFFRUUwRTVGREIwMEZGQTA5NTIwRjlCNEIwQTZGNTc2
NkIxMEY0NTM0QjMzQzYzOUM3MEZFMjU1RTY2MzEzQjhBRTg2QkM4MDAzNDhDMUFB
Q0FDM0VDNkFBOTZFMzMzODdBNUFDODVBODdDOUNBQkU5QUJFQUUzMTlBRkUxRTJE
MjgzNkFBMDA2RUQwQTVFNjc0MzFDMDk4MjM1MDRBNzJDNEI1MDA5RDQ1OTlFNzYw
RkMxNTdBMkI5MURBQjUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAt6D0lYB3MGYxL8SWygoDum62dPrGUAer0buKH45GUqtfhyhTauoS
l+ray+bfckxBBSumjWm7v6PbKGkgoaw0D9F8Xzduco3wwEXtRkhWp57k7o3JUlsg
rIdBQal4AKN2/f4xP8PIRO4JeX63UMcpAzLKSA9fKXmYfmIQl+l2mj0XkzSRmLq+
vczD9YaG4n6suaCRPmiJg1q+pRubn94n492u7g5f2wD/oJUg+bSwpvV2axD0U0sz
xjnHD+JV5mMTuK6GvIADSMGqysPsaqluMzh6Wshah8nKvpq+rjGa/h4tKDaqAG7Q
peZ0McCYI1BKcsS1AJ1Fmedg/BV6K5HatQIDAQABo4ICMjCCAi4wHQYDVR0OBBYE
FGpcsQsRALJzwizFolgV/e6qrqVWMB8GA1UdIwQYMBaAFKxVVEe6YsORB/Fr9XL4
KkF/co2/MA4GA1UdDwEB/wQEAwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzk5M2YzNTAtYjc1Ni00OTE2LThk
ODQtNDg0ZjAyNWRmZmNjLzAvQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJB
NDE3RjcyOERCRi5jcmwwdAYIKwYBBQUHAQEEaDBmMGQGCCsGAQUFBzAChlhyc3lu
YzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8yL0FDNTU1NDQ3
QkE2MkMzOTEwN0YxNkJGNTcyRjgyQTQxN0Y3MjhEQkYuY2VyMIGiBggrBgEFBQcB
CwSBlTCBkjCBjwYIKwYBBQUHMAuGgYJyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby8zOTkzZjM1MC1iNzU2LTQ5MTYtOGQ4NC00ODRmMDI1ZGZmY2MvMC8z
MTM4MzIyZTMyMzUzMzJlMzgzNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzcz
NDM1MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBAC2/VYwDQYJKoZIhvcNAQELBQADggEBAAnFJRYvdBte
k9JpRiVM+pm6S+KKd7qRa+k/moFlHxFiVHq/tHwaLk3u2zQbcXKvF8RcHJ3W7Oq6
9r7ro4/oRfO1Aw2QS0Q/euJ5Y+UrRN6VKP6ktsYpBBkLT1HL7zBp7XsZPED94DDQ
jI4W8KTbmTs5vse3VyCY1JuuO+2yXV6WML5X7ImuLj0ABod1a2cZ4pk9eZHxJDa9
O30J+Kq4/UXTk5h09Me6LK5wOEihXKAgBNhkekdBDVLxeOHLXnsZ9lf8R/4Eqhz9
aal0t6GR0E7HlVVkcNXIAfjpp/i8g+G9pQ/fK3cO8cwqQGKJFNuPpS4VhY5Imu18
5Dh8FiHpyTc=
-----END CERTIFICATE-----