Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3230372e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e3230372e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          ykvhZ63mkKL+dXpVJZSc7VOee1O4YGNc7jmUaQ/oqls=
Subject key identifier:   BC:73:4B:E3:DD:1D:FB:BE:8C:01:5E:60:9D:54:80:34:90:91:7F:F1
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       3A77AA89C695D9E2129E689DFC82AD86694CEB39
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3230372e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:01:14 +0000
ROA not before:           Wed 29 Sep 2021 23:56:14 +0000
ROA not after:            Fri 30 Sep 2022 00:01:14 +0000
asID:                     17451
IP address blocks:        182.253.207.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:77:aa:89:c6:95:d9:e2:12:9e:68:9d:fc:82:ad:86:69:4c:eb:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:56:14 2021 GMT
            Not After : Sep 30 00:01:14 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:75:e4:8a:ae:72:06:b2:f4:02:d0:89:07:4d:
                    77:4c:40:18:98:1e:0f:18:a5:f2:7e:8f:82:ee:28:
                    d4:4c:cd:f2:9d:fa:b8:ea:1c:f6:b9:67:6d:59:72:
                    2a:92:de:bd:1d:a4:b5:4f:80:d0:5f:d0:1e:bf:43:
                    0a:36:b1:aa:a0:b2:03:82:ba:f0:2f:da:e3:d7:f0:
                    2c:b9:b9:74:b7:1e:f8:d9:05:23:78:6e:53:3d:18:
                    19:37:0a:16:d2:a0:51:99:7a:99:2b:52:37:b8:c9:
                    bb:ff:02:4d:cd:3c:e8:84:dd:17:e0:24:8f:06:ef:
                    b0:e0:86:ae:b2:51:0b:fd:e7:70:95:f3:5f:e0:fb:
                    5b:59:dc:23:f6:89:5e:58:55:21:85:6a:44:44:97:
                    2f:cb:35:b6:9d:a4:d5:b4:ce:73:2a:1a:67:4c:05:
                    d1:77:a0:86:cb:4b:95:e7:ef:b7:99:b9:03:ca:dc:
                    73:0e:ba:4b:53:5b:16:1e:17:4c:db:66:40:91:ce:
                    31:51:b0:6e:db:b6:97:89:67:c5:be:2b:28:bd:3e:
                    01:cc:42:17:9e:00:02:cb:4d:43:67:2f:6c:21:01:
                    42:21:d3:71:3b:35:be:62:30:19:96:2f:bd:03:fa:
                    d9:02:1f:cf:a9:16:06:53:a5:44:ec:26:9d:72:d6:
                    6a:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:73:4B:E3:DD:1D:FB:BE:8C:01:5E:60:9D:54:80:34:90:91:7F:F1
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3230372e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:88:90:dc:0b:0b:e3:ae:61:3c:93:4a:47:a2:89:b8:bc:ed:
         04:77:e6:e5:1f:d4:65:1a:3a:7e:65:0f:17:ea:15:a6:82:68:
         d1:a8:d7:24:5d:11:10:30:5b:2d:24:6f:d3:b5:df:dc:5b:69:
         2c:1d:53:16:29:b2:09:7f:16:76:59:be:0b:33:4c:c3:47:db:
         96:2f:43:3a:94:6e:e8:b0:47:d8:95:d3:a4:72:34:9d:d2:ae:
         c5:96:bc:0f:c4:32:1f:99:c3:5a:34:b0:4f:b5:cc:76:1d:74:
         ec:ee:42:bc:4e:e6:6c:ea:d9:61:0b:aa:d6:65:05:27:ef:77:
         83:be:b3:07:bf:14:7c:8e:8f:a0:8a:f1:7e:b6:74:4d:30:84:
         db:e1:de:95:01:3b:30:34:f3:5f:cd:29:3a:9c:cc:a5:3a:1c:
         76:48:0d:40:a7:42:8e:dd:e3:e2:5a:3c:0a:29:fc:5a:04:08:
         a2:a4:70:71:3f:f0:60:ff:3d:65:37:af:ff:e9:e0:da:fc:a2:
         7e:87:d2:30:d5:ac:36:2e:49:51:93:28:7c:b5:03:0d:6b:26:
         d9:7f:04:87:18:8e:40:5a:ee:4f:55:c5:4b:72:73:72:35:c0:
         57:b1:21:3f:9c:b6:4a:c4:01:53:06:90:ba:72:20:16:12:ed:
         5b:64:ef:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----