Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e36332e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e36332e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          HNUB4ycNrlLQbJhE28MnJZKQLyefR88mwyJB0L2LcKo=
Subject key identifier:   16:70:F6:64:35:E4:A7:02:49:C9:39:9A:AD:16:04:CD:0C:04:1E:F2
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       58CF18DEF4070AC30519B1E04E0E6B0253783C53
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e36332e302f32342d3234203d3e203137343531.roa
Signing time:             Wed 20 Oct 2021 18:00:01 +0000
ROA not before:           Wed 20 Oct 2021 17:55:01 +0000
ROA not after:            Thu 20 Oct 2022 18:00:01 +0000
asID:                     17451
IP address blocks:        182.253.63.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:cf:18:de:f4:07:0a:c3:05:19:b1:e0:4e:0e:6b:02:53:78:3c:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Oct 20 17:55:01 2021 GMT
            Not After : Oct 20 18:00:01 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:70:c7:00:2a:5f:d6:c0:f1:ef:4f:7a:e1:33:
                    2b:7a:93:66:aa:d1:3a:b3:60:8b:7d:a8:f7:3f:b0:
                    70:c7:b8:6e:9d:fe:64:04:57:e8:e9:97:79:d3:55:
                    57:17:45:84:38:c6:d1:19:f7:33:53:04:ca:04:13:
                    45:f5:64:a3:9b:fa:09:9f:9f:8b:9e:4c:04:42:3b:
                    cc:98:40:49:7d:a3:e2:f8:db:e7:82:67:90:c8:94:
                    f3:57:1e:4b:15:b9:16:1c:19:a0:5a:80:40:43:af:
                    d6:2c:f8:7d:cb:0d:d6:8f:fa:1f:ea:84:3d:4c:c0:
                    ff:5e:34:49:c8:57:df:ff:d8:a4:60:f6:b2:dc:30:
                    d3:1e:21:83:3d:bc:8a:18:d8:6b:e6:d6:e2:87:53:
                    d3:77:1b:2e:51:3d:c2:47:4d:e9:0b:50:55:78:9d:
                    69:81:b4:49:73:05:42:8e:78:2f:83:48:c5:d2:d2:
                    c5:4c:b3:b5:0c:47:95:ad:ae:2f:ce:98:e4:57:24:
                    9f:ef:ef:84:85:48:47:88:fd:0c:28:d7:ab:0b:50:
                    25:3c:88:36:d9:50:59:db:23:87:ad:c3:17:05:9b:
                    10:83:b8:7d:ab:74:0c:8a:cc:dd:00:3b:2f:43:42:
                    3f:20:ea:4c:04:d8:af:5b:5e:20:b0:fb:5e:f6:5e:
                    f4:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:70:F6:64:35:E4:A7:02:49:C9:39:9A:AD:16:04:CD:0C:04:1E:F2
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e36332e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:d7:ce:32:2e:33:69:0d:20:c4:db:9d:d4:6c:51:0f:86:60:
         55:be:66:2e:73:53:b3:6c:b5:2f:56:b3:a8:73:c2:5d:c2:1c:
         b8:f8:35:eb:21:9f:05:56:da:7f:dc:34:57:ce:55:74:9a:09:
         91:79:48:28:46:02:0b:b8:ff:05:40:5a:59:9d:84:0f:c7:5c:
         b3:57:c3:21:5c:49:0e:d5:f3:6f:ef:05:7d:af:bf:38:7e:50:
         a4:7a:e8:64:28:fa:11:10:75:e3:3a:4e:18:53:24:4e:d3:84:
         cb:7a:33:09:08:7a:db:c6:e8:47:19:b0:74:9f:6e:d1:6c:6d:
         63:27:24:70:d4:6f:ae:95:42:ae:e4:d8:29:cb:ba:c9:47:e4:
         7b:1d:2e:dd:79:cc:61:31:c3:41:0b:b6:3d:bf:dd:21:45:ef:
         1d:34:8e:8b:92:75:6d:c5:f4:55:df:84:65:c1:9b:6f:65:51:
         c3:91:0c:4a:86:f1:1c:04:13:35:03:a2:c6:b4:6a:f2:49:57:
         3a:37:ae:37:db:24:f6:d1:69:40:54:6e:c3:71:f8:82:e1:eb:
         86:75:8c:2a:db:dd:af:09:c9:01:c6:7c:e2:96:50:c0:26:79:
         de:7a:c9:35:ae:1d:84:d8:1d:75:df:32:8d:86:70:60:d9:10:
         42:1c:36:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----