Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3139372e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e3139372e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          sXPcMgN5YLgQ9cJfGI4RPp5TgyNpoFUEbGoUz3o2ZxY=
Subject key identifier:   89:2E:30:A4:07:51:D4:C8:A6:61:04:5F:69:84:50:8C:DD:E4:D6:29
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       78DF559A1ACF143277E03C005E1560C69C52A330
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3139372e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:22 +0000
ROA not before:           Wed 29 Sep 2021 23:55:22 +0000
ROA not after:            Fri 30 Sep 2022 00:00:22 +0000
asID:                     17451
IP address blocks:        182.253.197.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:df:55:9a:1a:cf:14:32:77:e0:3c:00:5e:15:60:c6:9c:52:a3:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:22 2021 GMT
            Not After : Sep 30 00:00:22 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:f3:28:6a:08:fb:6d:1e:fa:c6:73:ab:f1:4f:
                    f5:56:fb:47:40:52:81:e8:a8:e0:e4:e3:f4:02:8e:
                    e3:28:9d:0e:c2:43:5a:dd:1d:e0:7d:b9:59:5d:bc:
                    1b:92:69:b6:64:8d:7e:c5:a5:d7:30:43:75:02:45:
                    65:0a:d6:f4:a3:76:56:c4:5e:2e:76:a5:e1:e3:92:
                    e1:4f:5b:c6:56:64:69:77:e0:1d:63:cf:59:1e:6f:
                    3a:76:ed:7a:ac:a5:5e:4b:0d:57:f0:1b:20:c2:f7:
                    4b:dc:56:32:45:a6:97:62:ea:bb:64:fc:35:01:30:
                    7d:15:25:61:2f:b9:54:fa:c7:61:62:e8:3a:57:56:
                    91:ef:da:a8:40:4f:06:29:2a:83:2f:33:38:4b:4c:
                    b0:89:89:71:b5:f0:28:d1:d8:6a:b3:a7:d6:80:88:
                    7d:8a:09:bb:b2:c1:f3:75:ce:6f:22:64:88:c1:b9:
                    4b:fb:a8:b4:81:da:9f:b1:83:81:b8:ff:90:7e:67:
                    17:19:a8:88:d5:ab:ac:03:a3:92:1d:a3:f5:5f:0c:
                    64:61:1b:7d:91:99:18:09:ee:78:4e:3b:98:91:dc:
                    d1:a0:8e:c5:fd:d0:20:4b:cf:02:c9:85:27:65:8b:
                    e5:7e:11:1c:0e:b7:9a:03:e6:82:9b:ea:5e:1a:02:
                    b0:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:2E:30:A4:07:51:D4:C8:A6:61:04:5F:69:84:50:8C:DD:E4:D6:29
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3139372e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:27:46:7c:23:66:77:68:40:6a:4b:a0:1f:94:94:97:ab:17:
         64:4a:7f:a4:76:f7:08:a2:50:f3:53:77:b2:53:c9:3b:65:31:
         b4:38:cf:27:ee:e2:32:31:b9:31:ca:8a:41:33:71:07:bc:a7:
         05:20:9a:27:d4:2a:50:f9:d7:2e:57:30:9b:bd:b3:00:d0:ca:
         13:af:6b:e1:27:1f:d4:8a:2d:9b:07:3d:f5:59:b9:79:f1:20:
         32:33:87:45:71:4b:10:3c:93:3c:4c:d6:6f:a0:b1:21:22:70:
         90:24:29:5c:55:96:18:1d:9e:c5:69:d1:68:19:fd:ea:7f:df:
         e5:70:ee:c5:58:26:d7:40:7e:75:ba:1b:64:ee:e7:2b:39:b5:
         25:2c:e1:73:28:d4:4e:ad:a6:b9:12:da:b0:ea:4c:1f:36:63:
         ba:bb:b1:6b:ec:df:2a:fa:83:4e:e0:1f:fa:b4:ef:b6:cf:3e:
         99:aa:8e:91:48:7d:04:4b:22:4d:61:fa:91:6f:ee:44:ef:46:
         ab:b4:42:f8:6b:ef:a0:06:27:73:bc:6b:7d:e2:c0:4a:a5:2a:
         3a:85:47:7f:79:2d:02:76:8f:85:25:8b:13:42:41:8b:ba:df:
         ab:0d:77:b6:9a:0b:7e:67:88:e1:ec:bd:9a:9f:78:de:08:ae:
         41:e3:bb:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----