Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3231342e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e3231342e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          vmEjxXZlDlO3D0VbsFiZ6VQHmxG0QVsyMXm7jioRsfQ=
Subject key identifier:   8D:A9:1F:E8:8D:44:90:C2:FA:0E:94:03:DF:F4:09:05:1C:D8:91:0C
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       1CB86E7315E802B346A6A88E7F1494757DFF4BFB
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3231342e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:01:10 +0000
ROA not before:           Wed 29 Sep 2021 23:56:10 +0000
ROA not after:            Fri 30 Sep 2022 00:01:10 +0000
asID:                     17451
IP address blocks:        182.253.214.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:b8:6e:73:15:e8:02:b3:46:a6:a8:8e:7f:14:94:75:7d:ff:4b:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:56:10 2021 GMT
            Not After : Sep 30 00:01:10 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:53:c4:b3:93:fc:21:10:f3:83:84:e1:1d:09:
                    fb:23:a0:b0:7d:09:70:d4:4b:36:1b:88:c8:83:ff:
                    19:18:0d:8c:cf:df:bf:0c:4e:4a:93:44:c8:b0:5b:
                    3e:ff:e8:55:41:21:cb:45:76:be:1b:32:15:78:0e:
                    06:0e:5d:b1:a5:a1:78:54:88:e3:80:27:e0:6b:43:
                    ec:82:c1:d7:d3:a8:1d:ea:c3:36:3b:15:01:87:8b:
                    e8:13:d6:3e:77:16:62:7f:c4:8d:c1:89:4d:81:e3:
                    84:80:9f:2e:e9:da:40:02:da:8a:7f:ef:c2:48:ec:
                    53:5c:2a:8a:aa:d1:c8:ef:f7:08:52:cc:fe:90:07:
                    fd:0a:c7:f1:bd:b6:3d:b8:9f:c2:a1:c7:fa:fe:33:
                    9e:cb:70:b5:cd:af:f3:8b:c9:98:f6:33:bd:70:a7:
                    09:c1:e7:74:e1:50:bb:e1:5c:c2:7c:99:4c:83:cd:
                    e4:30:ca:54:6b:ae:24:91:3e:08:0d:a4:09:d6:bb:
                    8f:f1:d0:ca:e5:db:c1:6c:3a:a7:00:28:3c:56:c4:
                    c9:ae:7d:a2:7c:e1:e8:77:5d:cc:86:b6:3e:f8:52:
                    f4:b1:e9:57:de:33:48:3d:0e:65:59:81:4d:e6:f1:
                    a5:13:30:f0:b0:bd:ea:3f:09:0f:ed:1b:b3:16:2a:
                    bf:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:A9:1F:E8:8D:44:90:C2:FA:0E:94:03:DF:F4:09:05:1C:D8:91:0C
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3231342e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         43:41:e6:71:20:ff:a9:de:df:ca:47:30:89:81:30:21:8d:8c:
         63:b7:c9:12:29:8c:c7:cc:6d:2a:9a:ee:df:0f:bb:71:4c:7a:
         a2:55:58:14:11:0e:d5:07:d2:01:88:be:48:23:be:2d:6a:cc:
         02:6f:ed:87:c5:04:a5:10:28:4b:12:f6:24:2d:e1:0e:58:14:
         48:4b:3f:fd:ef:70:85:f5:15:08:b0:a3:f4:33:e5:96:7d:5b:
         50:3c:64:49:c7:36:e6:d7:52:87:53:74:58:26:92:f6:cb:6b:
         3d:63:75:1f:6a:d0:ba:8c:c0:79:b3:fe:02:c7:2b:4b:3b:b7:
         d3:02:98:07:65:b9:6c:0d:18:f2:64:6e:c8:e4:2c:be:91:70:
         a6:36:b7:07:53:04:ef:62:52:c3:1b:37:e0:37:e4:40:e8:85:
         d3:d0:81:5d:7d:b1:85:b3:6b:6f:45:73:b7:66:7c:dc:86:95:
         90:69:c7:40:4e:30:47:d2:f9:e7:a0:be:b3:7c:d1:1c:82:76:
         a5:08:08:44:c8:91:f6:ac:94:d2:08:51:7d:e9:b7:3b:53:20:
         97:54:2a:3b:a1:dd:2f:2f:b8:53:46:2c:b4:8e:0d:71:86:3e:
         03:17:13:7c:c0:81:e8:9c:b9:57:49:b2:19:2d:30:a9:c4:82:
         4d:af:d9:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----