Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3131392e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e3131392e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          IvEmQSv5wiikYU/DnurFtJZfO8A4RWxwEwh3PfEIwrE=
Subject key identifier:   25:B4:18:22:0B:4F:AA:DD:79:AC:3D:47:31:E6:61:06:92:ED:2E:89
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       5B7045AAE9B554C80B240EDCFC8CC6A18C08287F
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3131392e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:01:19 +0000
ROA not before:           Wed 29 Sep 2021 23:56:19 +0000
ROA not after:            Fri 30 Sep 2022 00:01:19 +0000
asID:                     17451
IP address blocks:        182.253.119.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:70:45:aa:e9:b5:54:c8:0b:24:0e:dc:fc:8c:c6:a1:8c:08:28:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:56:19 2021 GMT
            Not After : Sep 30 00:01:19 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:72:03:59:af:7a:58:27:c5:32:94:9f:c8:48:
                    5a:3a:1c:a8:77:24:5b:df:05:d5:9c:5f:80:e5:cd:
                    2e:0a:c5:1b:d6:c5:61:8c:c2:7c:10:54:ee:08:06:
                    58:d3:43:17:bd:11:0e:44:49:df:68:d9:03:cb:76:
                    79:da:f4:9c:e6:fd:b1:a7:4b:90:14:09:60:e3:87:
                    7b:d2:0f:2e:ec:4c:9e:b1:a6:3e:7f:ca:59:7d:97:
                    50:95:54:e4:20:1c:8f:c8:01:09:47:0f:ad:1c:84:
                    c6:bb:ea:57:b6:77:9c:ba:c3:36:ef:3b:74:a0:35:
                    30:20:3d:6e:f0:da:b4:44:70:f9:75:a1:84:46:09:
                    c8:dc:27:11:c5:f2:99:27:52:85:f6:dc:22:19:d7:
                    23:e6:40:0e:be:93:98:c2:c0:07:6b:f7:44:ae:d5:
                    e2:57:9b:1e:97:92:65:30:d1:fc:88:77:4b:04:48:
                    f7:51:b5:ca:9b:c8:21:9b:d4:ea:18:56:08:37:db:
                    5f:44:1e:8c:c7:4a:d2:59:35:6d:97:8b:65:d2:70:
                    e3:3d:3f:20:78:1d:cc:59:a4:93:e9:b8:1f:83:e9:
                    84:ce:7a:fc:ff:d3:9d:de:18:42:65:88:b2:fd:96:
                    fe:ca:13:2d:ea:fe:5f:13:34:75:eb:f6:b6:fe:4f:
                    b5:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:B4:18:22:0B:4F:AA:DD:79:AC:3D:47:31:E6:61:06:92:ED:2E:89
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3131392e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:d2:15:07:be:1c:48:1a:42:c6:bb:ce:36:1f:44:8a:7a:47:
         94:b7:44:ca:58:f7:b1:c1:23:5b:fa:19:a0:c3:49:47:ab:b6:
         23:98:44:8f:e5:b6:20:00:18:9c:16:50:b0:bd:12:7e:79:0d:
         91:69:6f:d3:55:bb:1c:d8:5c:b3:36:4d:b2:6a:42:a7:fe:8a:
         6d:08:2e:83:6a:1c:2e:d2:7a:ce:82:1d:83:24:61:01:21:44:
         e8:ec:bf:f5:a5:06:52:90:f4:bf:75:d7:54:96:86:68:21:3f:
         6a:f2:dc:88:34:2b:eb:81:c5:d3:ab:43:8d:4c:a9:56:25:50:
         0d:3f:ec:66:1a:9c:cd:fa:df:fd:40:22:98:d7:0a:81:bc:20:
         6a:7e:d0:aa:40:35:e8:93:dc:bb:8b:43:71:c1:e0:de:88:6c:
         1e:f9:1e:3a:d7:54:ce:e0:73:4a:6a:ce:6c:03:c9:e8:26:77:
         c5:c2:d5:59:57:9a:2b:75:3f:e2:5b:37:47:ad:82:af:46:c9:
         e1:e9:3b:b1:5a:ca:63:a3:95:83:c5:d7:32:e9:28:f0:22:a4:
         56:d9:5b:37:c2:54:19:6b:4c:dd:3b:31:d1:3c:b7:40:05:92:
         37:8f:02:0d:d7:9e:92:f2:95:aa:aa:b0:61:ab:a7:c3:19:25:
         8f:b5:0e:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----