Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e35302e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e35302e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          Z5GGYk1nUaTOfSLqlemY0O/OpaPeGYYvCnIFm8cu4nA=
Subject key identifier:   E7:D2:D1:79:82:35:3A:C7:77:1B:30:F8:B3:38:59:FF:0A:2F:A2:C9
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       292D73FCF0B01AA79DB29E4C88B5AB807E8BB049
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e35302e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:32 +0000
ROA not before:           Wed 29 Sep 2021 23:55:32 +0000
ROA not after:            Fri 30 Sep 2022 00:00:32 +0000
asID:                     17451
IP address blocks:        182.253.50.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:2d:73:fc:f0:b0:1a:a7:9d:b2:9e:4c:88:b5:ab:80:7e:8b:b0:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:32 2021 GMT
            Not After : Sep 30 00:00:32 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:4d:60:68:b4:eb:11:53:8c:cf:38:44:c8:0c:
                    f7:5d:63:4a:c3:60:d0:f7:7a:9d:a2:ae:cf:9d:e3:
                    a7:b7:8b:e1:41:0c:f2:a3:6a:3d:7d:92:be:f0:59:
                    6d:fa:ab:81:c3:4d:dc:b3:8e:c3:ed:8b:75:a7:9e:
                    59:68:bb:fc:3c:47:67:f4:53:40:3b:46:03:01:84:
                    27:7d:02:29:2d:0c:0b:01:bf:5e:20:75:85:5d:f1:
                    f0:57:79:d0:d1:1f:d5:3b:ee:12:a2:b3:f5:40:ee:
                    3b:a1:d4:71:68:81:f0:36:15:e4:87:ba:c6:6c:37:
                    4c:61:9d:32:e9:0f:fe:36:cf:6a:a9:15:b9:e7:fd:
                    9d:0c:6f:e4:77:86:5e:85:e0:79:f9:cf:ea:f7:03:
                    b6:af:fa:70:ac:a8:99:ab:0d:7d:6c:ed:88:95:9d:
                    71:6d:f6:c6:1b:56:e4:77:e5:df:99:88:f0:42:5e:
                    4a:1f:1b:57:1f:10:98:4e:00:ae:3c:9e:2c:75:a5:
                    e1:66:f3:59:33:bb:b0:aa:58:71:67:15:59:b7:25:
                    ed:65:c2:31:30:05:29:c6:30:1a:48:3a:ff:c2:d9:
                    28:e3:53:9d:a5:66:52:41:8d:0d:3f:d6:5c:b0:6a:
                    1c:6e:60:e4:e0:3f:ca:8f:68:4f:73:79:80:e3:50:
                    26:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:D2:D1:79:82:35:3A:C7:77:1B:30:F8:B3:38:59:FF:0A:2F:A2:C9
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e35302e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a3:8a:8a:63:e2:6c:2e:f4:53:2a:3a:14:ca:2c:e5:53:c4:d2:
         19:c3:6f:ea:92:36:f8:43:e8:de:4e:cd:99:f7:3a:55:32:f0:
         e3:28:b4:b5:d3:e9:a4:5d:68:6f:bd:57:26:62:c6:a2:90:d5:
         ce:e7:63:42:19:b5:c1:1f:2c:96:04:4b:5d:80:55:9f:a0:30:
         64:85:ea:80:2b:7a:eb:8b:b6:ed:e9:c3:93:57:24:66:f4:cb:
         3f:8e:86:ac:82:7a:aa:8a:98:c9:0e:1a:cb:7c:42:d0:fe:d7:
         53:1f:b7:28:33:f3:bf:31:ce:3e:64:74:64:6d:87:50:65:6c:
         a9:a7:22:d6:71:8e:bf:d8:23:d6:a5:77:da:d9:84:b0:c7:b8:
         c0:0d:85:30:a2:45:de:97:8e:5d:6d:95:76:3d:25:8c:d7:80:
         2b:41:3f:d0:1b:bb:b5:90:5f:88:be:7a:c8:50:da:77:dc:80:
         5d:e6:98:27:6c:eb:dc:3f:fd:12:0d:40:aa:74:9a:21:a0:9c:
         e8:62:53:ff:54:98:ff:49:32:4f:49:e0:8b:14:24:61:11:41:
         5f:f7:82:f2:b8:f4:14:a9:7b:5e:c3:36:2f:85:66:c4:26:b0:
         59:21:c1:5d:f3:1d:73:7e:b8:55:50:70:da:e6:b5:72:fd:ec:
         34:99:b8:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----