Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3130392e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e3130392e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          SO7aupK99I9ADeb1WpneYxMhn36QYrkAfIEWm7KdODc=
Subject key identifier:   D1:DE:13:24:5D:26:39:09:29:4A:E5:3D:F6:D5:F4:DB:6F:A7:69:5A
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       2EB34B10ADDC004CCB1D727985FC5A6494F9064B
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3130392e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:01:22 +0000
ROA not before:           Wed 29 Sep 2021 23:56:22 +0000
ROA not after:            Fri 30 Sep 2022 00:01:22 +0000
asID:                     17451
IP address blocks:        182.253.109.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:b3:4b:10:ad:dc:00:4c:cb:1d:72:79:85:fc:5a:64:94:f9:06:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:56:22 2021 GMT
            Not After : Sep 30 00:01:22 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:43:06:58:c0:76:6a:b2:95:38:60:62:2c:db:
                    f0:6a:a8:48:f5:34:61:8f:96:6a:e9:fe:42:4d:1c:
                    94:8f:e4:fc:6d:b7:6e:cd:f3:37:0c:1a:89:98:c3:
                    c6:65:9b:99:67:74:ad:1e:62:d2:e6:65:02:36:e8:
                    37:da:39:12:69:85:a1:04:eb:67:fa:a4:39:e4:71:
                    b2:94:a0:1b:4e:3c:70:28:2b:8e:7f:b1:50:53:55:
                    66:3a:e8:3b:6b:94:e3:54:e7:07:ac:6b:4b:68:89:
                    38:34:a6:f3:4a:07:46:4c:59:16:4f:d7:45:d6:02:
                    72:2d:e4:dd:51:7c:80:50:7e:e5:ce:c8:2f:0a:32:
                    d0:7a:ec:be:c8:d8:a2:79:cd:c7:e3:c5:88:94:ad:
                    79:2f:a2:4e:ab:ab:5c:d6:8f:8d:4e:37:f8:18:3b:
                    61:6f:93:82:50:4c:43:c8:44:ac:be:6e:0c:50:4b:
                    df:73:65:8d:86:bb:77:8e:9b:10:f8:b8:e6:8b:b3:
                    36:8a:8e:c5:4e:7a:9b:ac:c1:fe:74:81:c6:14:74:
                    f2:e2:cc:d6:5a:f0:19:1f:9a:ba:3d:90:55:c1:3c:
                    c6:ff:c3:04:4b:d5:a1:9b:de:6a:55:0f:20:94:01:
                    24:d6:74:37:b2:6c:0f:2b:c3:89:7b:f1:0c:83:2b:
                    c3:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:DE:13:24:5D:26:39:09:29:4A:E5:3D:F6:D5:F4:DB:6F:A7:69:5A
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3130392e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.109.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:80:87:f3:e9:e1:d7:e5:54:7c:0d:39:a5:2d:67:c8:c6:fa:
         f5:b3:00:1b:57:a2:ee:1a:43:f9:57:ee:9f:4f:83:3f:bd:85:
         42:6f:c6:be:1f:ad:e3:76:d8:88:4a:56:5a:cf:e4:98:6d:7f:
         d0:dc:38:ce:7c:b3:7e:9b:b0:dd:f0:8f:8f:35:d8:dc:0e:40:
         d6:d9:c8:79:fb:5b:5d:40:d4:ab:96:30:df:c4:21:e6:96:fe:
         11:92:4b:5d:be:f3:67:97:1b:8a:b4:bf:95:63:60:d9:63:77:
         34:5f:53:23:06:cc:5f:97:e0:20:27:94:17:13:85:20:02:6e:
         d2:46:c1:b8:b0:21:9c:72:84:ab:2a:1b:87:c7:7f:6b:68:ea:
         ca:1e:50:a0:da:f3:ae:84:a0:7a:39:4a:35:cc:b4:e3:6c:7d:
         cb:30:01:fd:af:92:b1:b9:95:de:48:b0:a2:46:82:13:02:dc:
         ae:51:5c:20:5c:3c:9a:0d:9f:6c:6d:0d:87:13:f7:91:27:6d:
         5e:85:40:6b:91:04:36:61:9d:52:b6:01:d6:b3:b1:b7:40:f7:
         e8:ce:7a:4f:54:3d:97:b0:af:71:cf:f8:c1:6a:42:c0:85:40:
         34:ab:23:72:b9:c2:d5:b9:16:1e:78:50:f7:32:23:74:af:6d:
         ad:d3:b9:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----