Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3132372e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e3132372e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          U92aV8Y2FNBfs+A2sf7QqdlTUyvd06Tdv9nL96NtfN4=
Subject key identifier:   0B:4E:D7:AA:90:A3:DB:5A:DF:85:5F:F4:73:B9:F4:3C:E2:B9:2C:B8
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       26F05395B472F6A68CDE2BF9B6F07878FB6CF359
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3132372e302f32342d3234203d3e203137343531.roa
Signing time:             Mon 28 Jun 2021 07:54:27 +0000
ROA not before:           Mon 28 Jun 2021 07:49:27 +0000
ROA not after:            Tue 28 Jun 2022 07:54:27 +0000
asID:                     17451
IP address blocks:        182.253.127.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:f0:53:95:b4:72:f6:a6:8c:de:2b:f9:b6:f0:78:78:fb:6c:f3:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Jun 28 07:49:27 2021 GMT
            Not After : Jun 28 07:54:27 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ff:e5:b0:9b:e6:ef:82:19:20:42:11:49:84:
                    06:a6:3f:cf:07:ca:41:79:7e:f2:72:20:29:c0:b3:
                    2c:96:8b:5c:94:d2:de:e6:a4:55:fb:3c:62:7f:a2:
                    66:60:b8:6b:bb:01:c3:f3:e8:5c:8e:3f:4f:bd:b0:
                    20:f8:3a:9b:0a:a8:47:11:4d:7f:85:77:fc:14:ae:
                    91:1f:cb:79:60:6d:fe:d4:f0:d8:94:31:2e:5c:f7:
                    7f:3b:e8:ba:57:f9:a2:a4:59:4b:90:24:b3:0d:09:
                    88:76:9f:04:04:cd:39:c1:a1:11:c7:75:c3:11:d5:
                    23:65:fc:9c:03:9f:12:e8:c8:7c:e0:ce:b5:6d:35:
                    66:7e:95:d9:8d:43:f2:a4:47:cd:9f:2e:c9:eb:da:
                    8b:e7:07:d2:28:7f:17:4a:b1:aa:0b:3f:1a:85:dd:
                    b9:35:89:d2:ef:1d:7d:fd:75:ec:86:d6:9e:d8:69:
                    31:62:7d:e0:a2:e2:3b:d5:41:76:6e:99:51:76:da:
                    10:5d:f2:05:58:b8:51:73:be:4d:82:ba:37:c5:f5:
                    9c:fd:3f:dd:d7:36:39:fc:c0:fe:8d:4d:31:ab:a2:
                    5e:6f:af:59:f6:37:aa:c3:9c:07:cc:61:63:dc:85:
                    fa:7d:f9:cf:fd:a1:da:1a:a5:12:74:cf:63:b6:cc:
                    80:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:4E:D7:AA:90:A3:DB:5A:DF:85:5F:F4:73:B9:F4:3C:E2:B9:2C:B8
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3132372e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.127.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:0a:8c:68:18:7c:11:ac:fd:a2:3b:67:24:fa:87:d6:68:1e:
         a2:88:ab:c0:d4:a9:d4:88:45:21:75:f8:f6:93:bf:ee:5b:1e:
         e0:d8:3e:e3:11:9f:39:d3:6e:f1:31:d7:29:86:a1:6d:2f:49:
         d8:9d:c0:da:e0:46:f5:2d:62:7d:c8:46:da:b5:45:65:21:6d:
         09:ce:c8:7e:eb:01:dd:2a:b6:c0:e1:79:b0:5a:2c:72:7f:21:
         ef:71:0c:5c:7c:2f:d1:e8:e2:13:5a:56:e7:3c:01:60:7f:d7:
         03:76:9c:94:41:0f:b2:ad:d8:9f:67:4d:ec:aa:4c:d3:5e:71:
         18:05:1f:b3:f8:d9:bd:cf:5a:30:b1:b3:bc:f9:50:40:3f:1e:
         87:b3:2c:2f:20:3d:41:97:bc:68:1c:b9:58:dd:d1:0b:e1:73:
         0d:53:fe:d6:bd:7c:fe:fb:79:88:4e:0f:51:64:d8:92:61:a6:
         e9:90:51:25:f7:36:4d:7f:13:86:8f:02:0a:4e:c6:7f:22:c2:
         53:3d:ed:e9:2c:46:0a:fc:14:58:ae:1d:eb:b3:34:17:52:30:
         52:33:26:59:10:4c:a3:c3:46:76:3a:9c:ea:b4:7e:c1:77:89:
         20:46:18:8f:88:27:36:e6:8c:12:89:51:bc:75:a6:2b:be:a0:
         21:61:11:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----