Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3134332e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e3134332e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          G/i/hKquIUAm8DB6dyL1V7kjRfL7DvXdH5sk8jDsbM8=
Subject key identifier:   8C:AA:57:69:D6:2A:56:47:31:6D:18:B1:FF:B8:28:85:BB:B1:5B:14
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       3363F8ECCAD191AF67CBCB7702E8022DD354AF32
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3134332e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:39 +0000
ROA not before:           Wed 29 Sep 2021 23:55:39 +0000
ROA not after:            Fri 30 Sep 2022 00:00:39 +0000
asID:                     17451
IP address blocks:        182.253.143.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:63:f8:ec:ca:d1:91:af:67:cb:cb:77:02:e8:02:2d:d3:54:af:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:39 2021 GMT
            Not After : Sep 30 00:00:39 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fe:49:15:8c:31:3c:3a:cb:d6:89:6f:3f:32:0f:
                    3e:24:62:0a:d1:99:4b:04:f9:c4:ec:93:74:35:a4:
                    bc:f0:df:e5:b2:f7:5c:aa:0b:ed:ba:61:2d:f6:43:
                    cd:28:c3:27:04:23:8e:d1:9f:bd:24:c1:5f:c0:e4:
                    36:30:f0:55:b1:1f:63:b8:9e:75:51:78:2c:42:c2:
                    9a:a8:e0:b0:88:b4:25:c4:18:71:69:7e:ca:c6:5d:
                    38:26:56:cd:29:66:07:de:48:d2:bb:74:3b:bb:33:
                    0e:d1:cc:c5:a3:a9:8b:07:4b:7b:d9:8e:45:0f:07:
                    2b:ad:38:fd:74:3a:f0:89:24:2c:6e:9f:40:a2:a0:
                    e1:59:3a:f1:96:fb:f0:f0:a8:b9:fd:f4:98:a5:80:
                    d9:69:7d:42:bd:6c:04:c0:c7:33:42:f0:55:d1:e1:
                    aa:d5:ec:b5:2b:f7:31:49:ea:88:35:cb:49:cf:c7:
                    00:24:43:e7:c7:29:da:24:c5:28:78:53:4e:1a:83:
                    e4:6d:a6:29:8a:8c:c2:bc:b9:ff:ce:57:60:2d:ed:
                    26:65:dc:a2:f4:4d:10:ec:3c:e7:c1:1c:42:8a:dc:
                    23:1b:1e:9b:32:7c:3c:4d:4b:ab:1b:8f:63:c5:50:
                    7b:6c:03:70:0c:22:68:4a:15:f0:8a:54:6b:17:b2:
                    54:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:AA:57:69:D6:2A:56:47:31:6D:18:B1:FF:B8:28:85:BB:B1:5B:14
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3134332e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.143.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:72:19:9d:2c:a9:bb:ce:ef:b1:6b:79:e8:fb:69:62:72:06:
         65:5c:32:5f:a8:74:7c:8d:34:28:fa:28:72:a9:2a:ee:58:8b:
         66:26:04:e9:4f:59:07:43:a9:f5:b6:64:04:d2:11:07:ca:a2:
         f6:56:5d:fb:d7:52:30:d3:57:66:9f:ee:95:e7:83:6f:a6:e0:
         e7:6a:4c:ae:e0:35:e8:b9:cc:d7:08:ee:0e:4a:fc:c4:3e:de:
         0d:b5:6c:0a:ff:c4:64:3e:14:49:a5:b0:84:35:77:71:e7:a6:
         37:af:26:23:02:7e:b8:ff:9b:d4:06:e0:2c:44:c2:5b:87:22:
         10:31:e3:31:11:98:ba:e6:47:e9:73:69:da:7e:fb:f1:44:6e:
         1c:fb:74:ca:e5:f6:6f:7b:8a:d4:3a:fb:6f:4a:5d:d7:1b:23:
         20:cc:cd:5a:4d:cb:17:f1:35:56:4f:15:5f:56:10:a3:96:62:
         9b:12:45:bd:ac:d2:40:69:9f:99:2c:78:be:30:14:bb:d9:5a:
         84:e0:c2:8b:6b:cd:02:6a:ea:2b:8c:78:bc:a5:80:7e:94:e3:
         09:9d:5d:c8:e0:63:54:9e:10:de:d8:a6:a3:79:5e:83:4e:64:
         f6:c9:0a:de:af:5b:ea:9a:54:eb:7c:6d:13:fa:cb:cd:e7:a2:
         35:2f:34:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----