Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3130372e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e3130372e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          VsV0dHFBR2vjWUrq/VsxtblhzcTP5hZ1NLAOu5X9C9E=
Subject key identifier:   B9:A5:77:59:B1:31:74:51:A1:61:86:D4:7A:DC:87:B3:9C:B0:6C:18
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       60DA81EA9AF48019768020D1275A08CC4E4C2FAE
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3130372e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:01:02 +0000
ROA not before:           Wed 29 Sep 2021 23:56:02 +0000
ROA not after:            Fri 30 Sep 2022 00:01:02 +0000
asID:                     17451
IP address blocks:        182.253.107.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:da:81:ea:9a:f4:80:19:76:80:20:d1:27:5a:08:cc:4e:4c:2f:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:56:02 2021 GMT
            Not After : Sep 30 00:01:02 2022 GMT
        Subject: CN=3082010A0282010100B676E095E2880E2C0C2DB9DB153DB6862BF408C39095D85551C21AA00ACD36D4DC761CF9DBE202532F2CE2CA88275B53645267950F86748DF4652D9F7F235A279C76E9ABFF587367C4E8B830B81EA73F75BE3B6F873C8DAEE16407AEF69A165C6943019B2DE057E6683A1F4C444DF34E2BD60019F1AB1BEA64BDACB92F8FDA3318261C4BFE8B95309E782307C36979D5199626A6D2D1C34241A1FA82F09009629913B2ADA92644A63B4E3FAF55DF898D7ADE66E1F8C1D6B12E7736EA91B54E44815E18F4D850CBF54DD912A7CB1ED9F9610D05AB370B0538CCC141839BD3EE8F8863A0F8FAD3BA0DB3DA80DC98C2AE24439FFAFDE78EB2060ED465019856770F0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:76:e0:95:e2:88:0e:2c:0c:2d:b9:db:15:3d:
                    b6:86:2b:f4:08:c3:90:95:d8:55:51:c2:1a:a0:0a:
                    cd:36:d4:dc:76:1c:f9:db:e2:02:53:2f:2c:e2:ca:
                    88:27:5b:53:64:52:67:95:0f:86:74:8d:f4:65:2d:
                    9f:7f:23:5a:27:9c:76:e9:ab:ff:58:73:67:c4:e8:
                    b8:30:b8:1e:a7:3f:75:be:3b:6f:87:3c:8d:ae:e1:
                    64:07:ae:f6:9a:16:5c:69:43:01:9b:2d:e0:57:e6:
                    68:3a:1f:4c:44:4d:f3:4e:2b:d6:00:19:f1:ab:1b:
                    ea:64:bd:ac:b9:2f:8f:da:33:18:26:1c:4b:fe:8b:
                    95:30:9e:78:23:07:c3:69:79:d5:19:96:26:a6:d2:
                    d1:c3:42:41:a1:fa:82:f0:90:09:62:99:13:b2:ad:
                    a9:26:44:a6:3b:4e:3f:af:55:df:89:8d:7a:de:66:
                    e1:f8:c1:d6:b1:2e:77:36:ea:91:b5:4e:44:81:5e:
                    18:f4:d8:50:cb:f5:4d:d9:12:a7:cb:1e:d9:f9:61:
                    0d:05:ab:37:0b:05:38:cc:c1:41:83:9b:d3:ee:8f:
                    88:63:a0:f8:fa:d3:ba:0d:b3:da:80:dc:98:c2:ae:
                    24:43:9f:fa:fd:e7:8e:b2:06:0e:d4:65:01:98:56:
                    77:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:A5:77:59:B1:31:74:51:A1:61:86:D4:7A:DC:87:B3:9C:B0:6C:18
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3130372e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         35:4f:7c:8a:47:ed:6a:02:ad:f8:78:5c:4d:29:19:13:ad:f1:
         5f:00:3b:a1:5b:d3:17:7e:22:7c:ad:74:7a:0f:c2:96:d0:fe:
         68:c6:65:fb:7b:8f:ab:fa:31:26:75:67:42:ec:0f:4b:27:6c:
         e8:08:e7:82:8a:07:e6:e0:6e:a9:97:ef:4d:99:c4:cf:27:ed:
         32:d2:7e:55:22:c7:d5:54:f9:9e:26:af:a9:d1:58:27:74:df:
         6f:dc:32:2c:01:c8:2e:0f:2d:86:28:26:14:9d:99:b9:ef:6c:
         91:40:5c:4d:1f:5a:0c:ae:63:85:77:5d:bc:ce:da:54:72:2d:
         88:ee:31:3f:f1:55:aa:58:4f:bc:49:de:cb:ce:d0:d6:7d:94:
         05:57:7d:cd:9b:da:e7:15:bb:ed:83:e0:3a:df:30:7e:04:ff:
         46:e2:f0:6b:94:f4:5f:38:c1:40:6d:83:95:1d:6c:d0:be:54:
         97:5a:1f:a3:40:8c:48:4a:a9:87:2c:1a:8c:b1:d6:de:29:a3:
         e6:8d:53:ff:7a:3f:72:6b:38:27:a5:ea:f6:11:3c:7b:c8:7a:
         0f:04:29:31:fd:31:28:91:2e:44:30:7d:c6:8c:2b:f3:aa:54:
         b2:93:ec:4e:46:0e:03:96:7b:fd:a1:f0:c9:60:1a:74:ba:f0:
         55:b4:36:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----