Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e39352e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e39352e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          pdOLwXdvSVQ6MyYHWcGZwIsRMHOoEdto2T5QXtFRHYA=
Subject key identifier:   45:D0:5F:00:28:1C:30:85:18:8B:96:23:E6:19:5D:34:E0:02:7E:97
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       0B68BD68F1D168A0FF08AAD13062B04F560FF365
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e39352e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:01:09 +0000
ROA not before:           Wed 29 Sep 2021 23:56:09 +0000
ROA not after:            Fri 30 Sep 2022 00:01:09 +0000
asID:                     17451
IP address blocks:        182.253.95.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:68:bd:68:f1:d1:68:a0:ff:08:aa:d1:30:62:b0:4f:56:0f:f3:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:56:09 2021 GMT
            Not After : Sep 30 00:01:09 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:37:93:88:c7:d7:42:c9:d9:65:7d:e4:51:7a:
                    fb:f0:73:a9:65:c4:c5:15:8d:45:ee:f6:18:92:27:
                    8b:ad:ea:63:d9:38:40:7c:7c:56:a0:8c:2c:b4:69:
                    f9:91:7b:0d:c4:14:7f:d1:33:5d:20:e2:15:76:84:
                    d2:28:89:0b:3f:2a:59:83:5f:49:d5:3c:82:bf:3c:
                    ee:38:39:1d:68:55:7d:43:cb:ee:05:f1:d9:93:9c:
                    d9:58:b8:bb:07:9a:3e:f1:3a:f6:bb:b7:b7:ad:0b:
                    15:0d:52:a3:19:0f:08:c7:63:c1:c1:87:7a:e3:2a:
                    53:d5:77:f8:d0:1a:7f:4c:61:65:50:f0:09:82:06:
                    1d:49:8c:c2:2e:33:36:65:1c:80:ef:fc:5b:00:8b:
                    b4:f5:9a:2e:20:f5:dc:2f:dc:8a:de:8a:6c:9f:8c:
                    3b:77:c1:5b:5d:4a:b8:2e:1f:37:32:d8:ad:5b:8b:
                    2a:f0:4b:00:dd:0a:ac:e5:75:d1:07:30:02:fa:63:
                    ce:28:38:7b:e4:c3:41:3d:94:a0:42:10:3a:c2:82:
                    79:47:43:b4:ce:66:de:7b:8d:98:84:87:0d:2f:51:
                    2d:cb:cf:67:85:a9:2c:42:6f:e6:a9:50:42:91:52:
                    f6:0e:25:9d:58:c4:98:ed:81:81:01:3f:28:ee:4e:
                    52:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:D0:5F:00:28:1C:30:85:18:8B:96:23:E6:19:5D:34:E0:02:7E:97
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e39352e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:6d:1c:e5:4e:bf:5c:3d:7a:ff:94:4f:51:dc:a6:a3:28:50:
         28:80:2e:28:f7:8a:d1:6c:72:5d:71:a3:88:23:3f:48:84:4c:
         7b:65:c3:95:2a:54:6b:68:51:01:ed:83:e4:b8:e6:88:f5:bb:
         4d:86:bc:29:db:a5:25:d1:8c:6b:31:7f:62:6f:bc:3c:0a:24:
         10:f2:ba:51:01:01:a5:f5:b4:d6:17:b6:36:f2:8d:2e:dd:5e:
         38:c4:34:b4:e2:a7:44:dd:32:44:87:57:02:68:54:62:aa:7d:
         f3:34:98:71:dc:75:48:fe:d4:89:95:f3:6a:86:25:c4:40:f3:
         52:ea:d6:36:f0:90:95:fe:52:56:fc:82:1b:15:cf:4c:8b:cc:
         3a:c2:06:b1:39:57:56:f3:93:dd:cf:25:09:6d:95:cf:4d:cf:
         d2:8f:3b:25:b0:cc:6b:e3:d4:e2:4b:d7:64:67:76:ea:f9:55:
         f2:b2:f3:0e:5a:08:cc:1d:12:f5:12:e5:cd:10:17:66:3b:a9:
         d7:4b:39:5c:a3:5c:1c:b8:f4:de:19:18:f3:5e:cf:23:87:77:
         d1:69:93:59:4b:53:09:1f:d0:54:ba:7c:d2:3e:d8:ae:b1:82:
         9a:82:cd:b5:8c:d9:a8:d5:36:61:31:bc:af:51:d9:d7:91:d0:
         ba:7e:27:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----