Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3134382e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e3134382e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          VuRudyOc8liLgglhta41VEqQGQ4VXW4nhqPfcib2yKI=
Subject key identifier:   35:20:79:78:D5:A4:02:E5:43:7C:85:05:68:8C:B3:D2:22:44:3D:70
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       2FCE6E5830AAAB8107B8CCE0AF2E163B55A56D9C
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3134382e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:19 +0000
ROA not before:           Wed 29 Sep 2021 23:55:19 +0000
ROA not after:            Fri 30 Sep 2022 00:00:19 +0000
asID:                     17451
IP address blocks:        182.253.148.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:ce:6e:58:30:aa:ab:81:07:b8:cc:e0:af:2e:16:3b:55:a5:6d:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:19 2021 GMT
            Not After : Sep 30 00:00:19 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:8b:00:7f:61:f1:aa:58:e2:5a:70:78:7d:b5:
                    2a:e9:c2:32:b3:ec:33:3d:64:ca:9d:fa:3f:3e:dd:
                    60:88:59:f5:11:d9:30:c2:e4:0f:71:dd:51:12:dc:
                    5a:c9:02:2a:f8:72:79:ae:c0:0a:74:6e:53:31:b2:
                    48:32:be:95:73:3d:95:0b:84:0c:da:01:80:79:9f:
                    85:1b:5b:40:ae:cb:9b:36:59:71:3c:ab:58:c1:2b:
                    fb:36:a7:e2:3a:36:21:8f:33:c4:3b:31:4e:6e:37:
                    4c:7f:c2:f3:da:9e:6e:1d:da:82:b7:9c:31:b3:af:
                    c1:e3:2c:67:41:7b:1b:19:18:e3:c8:31:3b:07:a4:
                    0d:78:85:67:e0:e9:88:fe:9e:32:4a:ad:85:a5:91:
                    f1:11:b6:4a:29:da:3d:ab:f6:33:85:28:a1:40:2c:
                    13:ce:57:3d:e4:ee:e6:35:74:84:f2:23:e0:83:73:
                    00:6b:3f:25:08:f9:cf:0b:8d:41:fb:a7:12:9f:b7:
                    a6:e2:d7:46:5e:42:fc:62:00:c2:f4:c3:19:3e:ad:
                    a9:b0:78:a9:83:f1:6e:8d:1f:b5:c3:c1:c7:c5:73:
                    6f:11:aa:f0:6a:12:b4:da:df:d1:51:de:93:5a:f7:
                    b2:02:39:ae:e9:64:bc:11:da:56:3e:a4:e3:49:8c:
                    04:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:20:79:78:D5:A4:02:E5:43:7C:85:05:68:8C:B3:D2:22:44:3D:70
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3134382e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.148.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:75:2d:65:90:e4:cc:62:cc:99:2f:b6:f8:fd:3c:54:49:56:
         4c:5a:79:4d:05:20:c3:69:44:ff:56:62:39:83:13:8d:7a:b1:
         78:0c:f4:e7:4a:39:1e:19:6f:e7:eb:df:cb:1e:25:58:ec:18:
         96:f3:c4:43:bc:43:d5:2b:03:b5:3d:8e:8c:60:6a:02:89:66:
         09:f1:88:4b:d2:fd:d9:27:d8:65:4d:50:8a:27:0f:05:af:18:
         d3:bc:11:56:fc:ce:93:2a:62:cd:77:4d:f6:4a:f7:a8:ae:b7:
         d6:a0:0d:7d:1d:68:0f:c9:e0:40:b0:89:44:95:5e:4a:b0:e7:
         7b:e6:9d:3e:fe:54:bf:48:73:7e:fe:da:3b:25:6d:41:4f:e2:
         66:d9:3a:c6:5d:8d:d3:84:e3:3e:0e:26:e8:63:f2:b0:a0:8f:
         00:b9:89:de:44:3c:2a:33:fc:c3:d6:19:69:1d:6b:35:be:26:
         08:aa:aa:30:30:f6:b2:8f:1f:07:1e:dc:9b:35:a9:ba:fd:2f:
         e1:50:99:8f:30:a5:bc:95:51:16:49:28:26:33:fc:18:78:cb:
         66:83:0b:35:ad:36:fe:74:a7:53:44:3e:c6:40:d2:b5:0c:b3:
         dc:e9:b4:1c:9c:c1:89:2a:f7:01:97:70:77:97:1d:06:c8:d2:
         d0:1d:35:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----