Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e37312e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e37312e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          cS5sSrF0CR/Ej1/kYtkg1ZOHAle4EiS03LkLP+8HFPQ=
Subject key identifier:   44:FC:F0:0B:07:E4:52:CB:D0:FE:0B:9B:13:DB:28:FE:DA:6D:38:6C
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       242867399D8DFA0C7F85DCD15BA1F64E1218A9A2
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e37312e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:01:15 +0000
ROA not before:           Wed 29 Sep 2021 23:56:15 +0000
ROA not after:            Fri 30 Sep 2022 00:01:15 +0000
asID:                     17451
IP address blocks:        182.253.71.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:28:67:39:9d:8d:fa:0c:7f:85:dc:d1:5b:a1:f6:4e:12:18:a9:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:56:15 2021 GMT
            Not After : Sep 30 00:01:15 2022 GMT
        Subject: CN=3082010A0282010100BD48CE97F935420F11739B4154FB6EC3C90F7DEBED801516B1255F8446E3C85EB7D1F9C16C1BBF34DD7BAF4E15C64BD50B0D15C64FD829556976EE761883793025D3E4AD894743ABF21CA9C71B18FC3E40B77E142A8DFE62C64530C72A2CE7ECA1DFBD29CAD1183DD7DFBC04F9DE4CBBD7FB565CE59D7744B68C5A45BF37C56D18B785C1FABA4378F1BA18056BFEFF5D4A1EE78E868B39C3F363AC6FC09561C213085C9C35D631DD18A7095CA684006D143EE8288613FFEB5AB8DE87D32C4C5BB7E135549BAEDBCD20537F81DAAD2072614034A20565FBF7A83950BB032F41DF1CC6B5B8D179615EF1B0D94044514E61DDF380EC82BBA475029D87C98A517A550203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:48:ce:97:f9:35:42:0f:11:73:9b:41:54:fb:
                    6e:c3:c9:0f:7d:eb:ed:80:15:16:b1:25:5f:84:46:
                    e3:c8:5e:b7:d1:f9:c1:6c:1b:bf:34:dd:7b:af:4e:
                    15:c6:4b:d5:0b:0d:15:c6:4f:d8:29:55:69:76:ee:
                    76:18:83:79:30:25:d3:e4:ad:89:47:43:ab:f2:1c:
                    a9:c7:1b:18:fc:3e:40:b7:7e:14:2a:8d:fe:62:c6:
                    45:30:c7:2a:2c:e7:ec:a1:df:bd:29:ca:d1:18:3d:
                    d7:df:bc:04:f9:de:4c:bb:d7:fb:56:5c:e5:9d:77:
                    44:b6:8c:5a:45:bf:37:c5:6d:18:b7:85:c1:fa:ba:
                    43:78:f1:ba:18:05:6b:fe:ff:5d:4a:1e:e7:8e:86:
                    8b:39:c3:f3:63:ac:6f:c0:95:61:c2:13:08:5c:9c:
                    35:d6:31:dd:18:a7:09:5c:a6:84:00:6d:14:3e:e8:
                    28:86:13:ff:eb:5a:b8:de:87:d3:2c:4c:5b:b7:e1:
                    35:54:9b:ae:db:cd:20:53:7f:81:da:ad:20:72:61:
                    40:34:a2:05:65:fb:f7:a8:39:50:bb:03:2f:41:df:
                    1c:c6:b5:b8:d1:79:61:5e:f1:b0:d9:40:44:51:4e:
                    61:dd:f3:80:ec:82:bb:a4:75:02:9d:87:c9:8a:51:
                    7a:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:FC:F0:0B:07:E4:52:CB:D0:FE:0B:9B:13:DB:28:FE:DA:6D:38:6C
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e37312e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         23:12:14:38:ec:3c:5c:b1:51:7f:13:34:88:91:84:8b:19:e9:
         30:1f:fb:4e:75:99:9e:99:b4:4e:f2:4b:12:ef:fe:d7:f7:2d:
         38:4a:44:78:7e:e2:93:d8:78:5d:6a:ea:e3:18:38:d5:72:4a:
         85:a5:e0:5d:69:9b:9e:3f:b7:b9:df:72:18:35:a5:d1:9f:32:
         c3:30:c4:c4:13:32:e3:af:7c:97:81:a7:2d:e3:d7:6c:8e:bb:
         a6:08:af:9c:3b:52:46:e9:b2:4c:13:73:d8:cb:c0:70:61:a2:
         75:a4:13:b1:33:84:d6:1e:9d:ad:cd:45:18:06:7c:72:9c:15:
         3a:d8:02:90:d1:b0:9b:f2:70:4f:66:ff:0b:3e:46:1f:e1:31:
         80:4d:1c:a9:27:69:15:5d:bc:a8:61:ed:15:fc:34:7b:45:09:
         25:07:c6:df:2b:d9:8d:3d:50:61:25:2c:92:a7:f3:bf:01:41:
         d7:d4:ec:a1:63:23:75:0e:9f:66:95:46:7a:8a:e8:a8:1b:4c:
         92:fe:04:cc:81:f0:ee:2b:49:77:9c:47:8f:66:17:e9:17:d5:
         34:b0:aa:3a:4a:04:80:0e:f2:7f:a0:28:2e:7b:2f:c1:29:0d:
         69:f0:53:87:c6:77:be:3e:c1:d2:91:5d:ef:31:5b:2d:25:bc:
         0b:aa:e3:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----