Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e362e302f32342d3234203d3e203137383835.roa
File:                     3131322e3231352e362e302f32342d3234203d3e203137383835.roa (raw, json)
Hash identifier:          H0CmNkN4DupEJKoPnj5D1F/MgXjSfMfHqAoUI3Uogds=
Subject key identifier:   75:D2:43:94:50:3C:83:C9:20:C5:9A:17:1B:E0:31:41:E3:18:7E:23
Certificate issuer:       /CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
Certificate serial:       271F952C91CB1D2A9F6915BA1C07DCC1C231964D
Authority key identifier: B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e362e302f32342d3234203d3e203137383835.roa
Signing time:             Thu 24 Mar 2022 13:00:00 +0000
ROA not before:           Thu 24 Mar 2022 12:55:00 +0000
ROA not after:            Thu 23 Mar 2023 13:00:00 +0000
asID:                     17885
IP address blocks:        112.215.6.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:1f:95:2c:91:cb:1d:2a:9f:69:15:ba:1c:07:dc:c1:c2:31:96:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B493A5CEBF09E10BC35D9AC2211DAFD2095687DA
        Validity
            Not Before: Mar 24 12:55:00 2022 GMT
            Not After : Mar 23 13:00:00 2023 GMT
        Subject: CN=75D24394503C83C920C59A171BE03141E3187E23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:3f:18:6f:20:88:0b:1e:dc:2c:a7:ee:8c:96:
                    52:b9:83:6e:fa:de:56:7f:8d:c9:da:3c:55:b5:cf:
                    f1:9d:d9:a9:a0:6a:3a:a3:5d:f8:dc:b8:74:2c:01:
                    13:d7:da:1c:25:50:2d:17:23:92:df:36:e4:3a:08:
                    52:ac:13:87:46:0e:11:77:ac:74:fe:31:a4:d3:d5:
                    d1:12:f2:16:a6:ba:ad:3a:bf:f2:ed:ac:5a:13:c1:
                    c4:22:aa:2d:e5:a8:5c:3e:ff:11:54:74:98:70:fc:
                    3f:b0:6f:df:3a:74:15:e9:e4:db:8a:7b:64:ac:0e:
                    8f:0e:25:19:36:b4:4b:d9:eb:e8:9d:f5:74:a2:3c:
                    5b:6a:41:fb:71:44:f7:17:b9:b3:7a:98:eb:e5:83:
                    87:45:3d:0f:9b:29:c6:85:7a:89:b3:df:a0:c8:c7:
                    6d:1d:2c:b7:b6:9b:a7:2b:41:e7:ef:0b:75:91:98:
                    02:9b:14:86:bf:53:29:bd:11:35:fe:10:a2:ec:ac:
                    28:bd:c1:f1:ec:a6:0f:61:b6:4a:11:c9:02:a9:90:
                    66:a6:46:3a:0a:27:89:77:67:91:2e:b9:60:3c:71:
                    25:a2:45:5c:87:d6:04:c8:37:3a:a6:bd:4b:86:db:
                    0e:c2:5f:56:e6:cb:77:a7:68:8d:05:3b:bf:ef:6b:
                    11:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:D2:43:94:50:3C:83:C9:20:C5:9A:17:1B:E0:31:41:E3:18:7E:23
            X509v3 Authority Key Identifier:
                keyid:B4:93:A5:CE:BF:09:E1:0B:C3:5D:9A:C2:21:1D:AF:D2:09:56:87:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B493A5CEBF09E10BC35D9AC2211DAFD2095687DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/0/3131322e3231352e362e302f32342d3234203d3e203137383835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.215.6.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:35:e9:57:0b:9d:b0:f6:5d:66:e0:7f:8e:5b:fe:59:c4:86:
         e1:ce:c3:57:85:8f:d6:33:c2:ac:77:36:8a:e5:a0:49:a7:41:
         0b:a6:f3:89:d2:d4:00:55:60:f7:b3:a5:84:67:ae:3c:22:37:
         32:f5:5c:05:37:08:5e:bc:fc:3a:15:bf:14:95:d5:4e:5e:98:
         43:2f:ed:e8:ed:0a:c0:6f:1a:b1:d7:d6:3f:dd:49:16:89:58:
         f8:e8:93:ea:35:ab:01:49:6c:70:55:7b:ba:03:27:3d:33:72:
         b8:41:87:48:87:5f:70:8c:96:b1:37:b7:56:0b:0a:c0:7f:fc:
         15:ea:bc:9d:b5:68:8a:46:c7:7d:98:30:d6:82:7b:73:b2:c7:
         95:f6:75:c8:b7:85:73:f3:6f:79:ed:5f:4f:88:9a:f1:09:fe:
         8c:44:d3:35:18:1a:3d:74:73:7d:d8:23:5e:11:79:c9:f0:a6:
         64:38:ac:a5:ee:22:10:ee:04:d2:67:6f:be:2a:cb:0d:0d:b5:
         55:10:ba:4d:66:70:8c:23:6e:71:66:5c:70:5b:08:f1:9e:5d:
         a3:76:6b:72:72:3d:17:dc:a4:6b:3e:f0:90:5a:0c:44:ef:c0:
         0e:fd:f6:04:60:d5:ca:7e:10:b4:b7:98:7f:5c:0a:e9:22:4b:
         45:f1:9d:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----