Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3234362e302f32332d3233203d3e203137343531.roa
File:                     3138322e3235332e3234362e302f32332d3233203d3e203137343531.roa (raw, json)
Hash identifier:          7cPFDU6Ss7Dw+GPK8HCSlYWnRmKM4MyjneR7RzMlIhA=
Subject key identifier:   9C:7B:19:12:57:94:19:6D:2B:89:C8:26:D4:82:6A:EA:6E:5E:88:AA
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       69EBAB7DDFF327076C45629C6218B9843AD012E2
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3234362e302f32332d3233203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:01:14 +0000
ROA not before:           Wed 29 Sep 2021 23:56:14 +0000
ROA not after:            Fri 30 Sep 2022 00:01:14 +0000
asID:                     17451
IP address blocks:        182.253.246.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:eb:ab:7d:df:f3:27:07:6c:45:62:9c:62:18:b9:84:3a:d0:12:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:56:14 2021 GMT
            Not After : Sep 30 00:01:14 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:34:61:fe:b8:4e:96:be:ad:a4:41:9e:ba:ff:
                    bb:70:c2:6e:c7:5d:35:22:94:4f:e0:3c:e9:fb:f4:
                    00:45:a4:71:80:66:b5:e4:3f:b8:81:de:0b:4a:f3:
                    dd:41:d9:fc:43:20:7e:b2:df:23:fc:22:51:27:00:
                    15:a3:f1:42:c5:79:c6:14:2d:b8:f9:14:17:6e:7c:
                    71:67:5a:f3:57:45:b4:bd:79:54:fc:c7:fd:6f:d6:
                    87:c3:d9:26:dc:f9:55:63:ce:1a:9a:c3:7c:e4:21:
                    bf:df:af:66:c7:6e:f7:9a:ca:0f:e7:54:fa:c3:2b:
                    84:47:6f:3a:da:53:7e:d1:6e:5c:49:6a:1f:f1:87:
                    3f:3d:1b:1e:73:b2:b2:5c:5e:b3:f7:bd:8d:15:df:
                    08:aa:c9:27:a1:72:2f:5b:1d:98:34:9e:e1:8f:84:
                    20:85:fa:7b:a2:38:74:8c:e6:90:fb:7e:70:9e:74:
                    51:54:c5:a9:55:2e:3b:2e:0e:93:41:c5:99:c8:2d:
                    40:d8:d8:89:01:d5:21:92:78:f9:6b:8b:6f:09:c5:
                    01:5b:23:d2:7b:b5:80:8a:15:66:63:f9:f3:2a:8d:
                    51:3c:99:31:a3:42:2e:c6:92:1a:8f:eb:59:f5:6a:
                    9b:8e:16:26:35:e2:5b:12:d1:e8:94:0d:75:e3:72:
                    3d:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:7B:19:12:57:94:19:6D:2B:89:C8:26:D4:82:6A:EA:6E:5E:88:AA
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3234362e302f32332d3233203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.246.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9e:3e:42:ef:40:a1:a7:7d:a4:b5:37:d3:58:07:40:14:15:5f:
         79:4c:80:df:33:94:ab:c7:a0:a4:2f:be:c1:3f:94:1a:2b:e4:
         2c:a0:67:8c:5a:2d:e5:12:57:ff:18:b5:d6:b1:22:85:c3:fb:
         0a:2f:db:35:d0:c2:e1:14:e0:f4:ce:b7:32:b3:38:ed:0b:77:
         89:b3:72:dd:d7:80:56:bb:28:89:c9:61:01:67:20:b9:b4:b2:
         19:5e:1d:9f:69:16:8b:4f:87:61:81:d4:f5:84:3c:07:27:80:
         fa:f6:09:33:93:0e:2c:65:86:18:c4:d3:1e:ab:f1:a1:c6:97:
         57:6d:ba:78:d8:5d:a0:f1:33:ae:7b:66:1d:78:47:2e:70:b3:
         b2:e4:cd:cf:4d:41:88:34:5a:b0:fa:55:50:33:89:17:10:a6:
         26:ff:93:fa:ae:5c:30:be:4d:6f:6f:f8:a9:07:0f:6d:f8:57:
         09:54:f3:21:5c:2b:0b:66:a1:1c:45:b0:d1:24:e3:ed:91:4d:
         a1:b8:49:94:ae:b5:30:cc:78:40:6d:d9:b5:11:98:c0:bc:47:
         b7:07:57:f1:8b:11:f5:3e:b6:74:c8:54:9f:c6:72:3d:02:91:
         30:3f:9d:d5:8d:0f:83:37:3a:82:91:b7:a6:f2:03:71:05:15:
         de:dc:30:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----