Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3135322e302f32322d3232203d3e203137343531.roa
File:                     3138322e3235332e3135322e302f32322d3232203d3e203137343531.roa (raw, json)
Hash identifier:          rqNRKO6F3WJr1f8ATFW0Jt9X7LEmYu46fE9BOxwMHz8=
Subject key identifier:   C8:8C:D0:59:22:8B:7D:8E:68:9E:4D:CA:AA:91:7F:38:F2:54:A7:CC
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       231374E77202C1C09B673BDEAC747300536B3F37
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3135322e302f32322d3232203d3e203137343531.roa
Signing time:             Tue 30 Nov 2021 03:00:00 +0000
ROA not before:           Tue 30 Nov 2021 02:55:00 +0000
ROA not after:            Wed 30 Nov 2022 03:00:00 +0000
asID:                     17451
IP address blocks:        182.253.152.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:13:74:e7:72:02:c1:c0:9b:67:3b:de:ac:74:73:00:53:6b:3f:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Nov 30 02:55:00 2021 GMT
            Not After : Nov 30 03:00:00 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:0d:c8:06:bc:d0:90:86:d2:0b:f7:3c:b1:75:
                    79:e7:c0:b7:3c:3e:3e:9b:e3:8c:21:22:c9:22:10:
                    b2:e2:30:c9:ee:0a:2b:7d:0c:6a:31:9f:60:e9:69:
                    d9:ef:e5:d6:04:ee:d3:bf:f7:57:70:08:62:53:d7:
                    b1:d3:d4:28:7e:ae:26:d7:7c:7a:ba:c6:ef:f8:a1:
                    b6:32:aa:64:a3:87:a1:bd:d7:c6:cb:3c:a5:c0:14:
                    5d:a9:3c:73:79:22:fb:7e:76:88:bc:ee:67:78:2f:
                    7c:50:b4:db:4f:d2:f9:8d:c1:0c:a0:94:94:ae:dc:
                    25:e7:06:3e:d3:91:bf:f4:c0:e4:e8:8b:9a:80:16:
                    4f:5c:86:7f:d3:d3:29:39:6e:c3:fe:e7:cc:05:61:
                    d2:72:73:48:9f:72:c9:79:ae:c3:28:c2:89:da:75:
                    93:2f:c2:52:b7:e7:08:89:9b:93:33:fa:5c:89:ba:
                    4a:dc:84:46:9a:80:bb:21:42:1d:67:87:58:27:fa:
                    65:2d:26:aa:a9:12:1a:16:fa:12:2d:0f:09:7e:aa:
                    1c:0c:ba:c5:50:4e:5d:ba:72:49:dc:87:f0:79:3e:
                    f6:da:64:05:a5:23:dd:f0:75:ee:58:53:66:20:3a:
                    de:dc:bf:a6:43:ab:1b:69:1d:16:7b:ea:84:df:e6:
                    ef:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:8C:D0:59:22:8B:7D:8E:68:9E:4D:CA:AA:91:7F:38:F2:54:A7:CC
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3135322e302f32322d3232203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         38:47:a6:91:45:b7:e6:69:93:40:3b:33:7a:df:f8:66:ba:68:
         ef:d4:c9:b7:f9:c8:dd:a1:51:86:a6:58:2f:61:2c:aa:06:db:
         f4:ec:07:3e:b6:01:d5:42:93:46:c2:c5:0b:30:44:b5:6e:35:
         1e:4d:85:bb:10:b2:60:6c:fe:7e:24:66:51:5b:d4:72:35:23:
         45:f3:84:a1:d8:27:db:4b:7d:ff:1e:e9:97:bd:f7:79:33:96:
         47:49:42:a0:50:e3:47:e2:8b:25:8e:e5:c4:bf:aa:0b:df:b1:
         d5:0a:cf:28:0c:ab:4c:65:61:9a:be:0e:63:80:df:aa:e0:a8:
         db:b7:52:34:f8:be:40:b2:7b:6f:af:48:48:38:5b:8f:0c:28:
         ca:5a:1f:28:41:92:91:96:99:19:59:e7:60:82:c3:08:0d:7f:
         31:b7:f1:4f:6e:aa:43:a4:fd:05:7a:a7:98:4e:ba:cd:b7:6b:
         3d:24:c6:08:4a:95:d2:08:3e:db:26:72:06:2a:89:c3:65:a8:
         47:86:2f:5a:8e:be:d0:9c:d0:e7:3f:22:0e:eb:fe:75:98:08:
         97:5f:e8:72:54:fa:5b:d3:cb:29:86:2f:9e:5e:f3:e5:a1:16:
         ca:9a:b9:77:46:35:69:f0:46:ba:92:f3:1e:4e:27:b7:c6:08:
         5e:d2:a4:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----