Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3136362e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e3136362e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          +E+AXQtnmjT4yG7ZBPYVga3RoN7hI55UsqyMCQ7+fsA=
Subject key identifier:   AA:6E:4A:9B:7B:D6:D6:98:E6:48:ED:AA:C6:65:10:48:92:9C:C9:7C
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       4304F8BFAECA6D58756FA168665569D207D7E020
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3136362e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:01:07 +0000
ROA not before:           Wed 29 Sep 2021 23:56:07 +0000
ROA not after:            Fri 30 Sep 2022 00:01:07 +0000
asID:                     17451
IP address blocks:        182.253.166.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:04:f8:bf:ae:ca:6d:58:75:6f:a1:68:66:55:69:d2:07:d7:e0:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:56:07 2021 GMT
            Not After : Sep 30 00:01:07 2022 GMT
        Subject: CN=3082010A0282010100F55B5ADADD528608388438FD398F6A4C16416B615B91B97E523EDCCEB8EBDC1436F97695FAFDA28EBCA6BB46BC9BDADA46002525EB88682075CD8E81E784441C5584BB813B29F1601A2221C5E21965CA086F509E3D8E0F23E6BADCD623FE4A7767557AB6412005CF7EAD0DE8F3C442B20582B6F38938F32040DD9022A875546278F163A452E2E6999149D3A651644660E1C41F5A566C0A9EEB0B1537E707DF74202AEDFF753C7A3C65ED1F50DCE6B502031B046EBC70C59C0329AB3519B5D705770DD4902536226075683C8EDB30044C09C149EF87461A7EE9058ECC6AE805AB869F096C87A2FCC58A1FF7313F2A54F168ACAA7EBAB89A995DD46A78AC6E4FA10203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:5b:5a:da:dd:52:86:08:38:84:38:fd:39:8f:
                    6a:4c:16:41:6b:61:5b:91:b9:7e:52:3e:dc:ce:b8:
                    eb:dc:14:36:f9:76:95:fa:fd:a2:8e:bc:a6:bb:46:
                    bc:9b:da:da:46:00:25:25:eb:88:68:20:75:cd:8e:
                    81:e7:84:44:1c:55:84:bb:81:3b:29:f1:60:1a:22:
                    21:c5:e2:19:65:ca:08:6f:50:9e:3d:8e:0f:23:e6:
                    ba:dc:d6:23:fe:4a:77:67:55:7a:b6:41:20:05:cf:
                    7e:ad:0d:e8:f3:c4:42:b2:05:82:b6:f3:89:38:f3:
                    20:40:dd:90:22:a8:75:54:62:78:f1:63:a4:52:e2:
                    e6:99:91:49:d3:a6:51:64:46:60:e1:c4:1f:5a:56:
                    6c:0a:9e:eb:0b:15:37:e7:07:df:74:20:2a:ed:ff:
                    75:3c:7a:3c:65:ed:1f:50:dc:e6:b5:02:03:1b:04:
                    6e:bc:70:c5:9c:03:29:ab:35:19:b5:d7:05:77:0d:
                    d4:90:25:36:22:60:75:68:3c:8e:db:30:04:4c:09:
                    c1:49:ef:87:46:1a:7e:e9:05:8e:cc:6a:e8:05:ab:
                    86:9f:09:6c:87:a2:fc:c5:8a:1f:f7:31:3f:2a:54:
                    f1:68:ac:aa:7e:ba:b8:9a:99:5d:d4:6a:78:ac:6e:
                    4f:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:6E:4A:9B:7B:D6:D6:98:E6:48:ED:AA:C6:65:10:48:92:9C:C9:7C
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3136362e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.166.0/24

    Signature Algorithm: sha256WithRSAEncryption
         85:65:bc:54:a4:84:02:8b:9d:63:ad:13:0a:22:35:56:4b:8f:
         a0:2b:80:a3:26:fa:b3:6d:a1:90:a7:dc:9d:08:d2:1f:ec:35:
         bf:ff:09:b4:3c:d3:8c:1a:83:7e:4c:92:72:1d:0e:43:c1:19:
         e6:94:81:ad:6e:61:50:c4:76:8b:3d:d0:a2:70:d5:26:27:e9:
         3c:6c:21:f3:ab:74:23:26:b8:34:5a:66:99:91:f0:2c:27:8e:
         5f:a4:05:98:5a:12:bb:da:3a:ab:56:1f:44:7a:01:a1:aa:d3:
         da:94:a0:18:0a:5b:d8:e3:57:ca:2c:34:3a:bc:2a:f5:45:6a:
         0a:08:4d:c9:87:85:3c:1a:ac:17:32:f6:19:04:a2:b9:5c:d4:
         79:e5:83:bc:7c:97:9b:96:69:8e:f4:f9:c1:ce:41:0c:a9:c0:
         7b:66:a5:d0:8c:0f:11:e8:d9:76:08:5b:58:1a:64:0f:8e:74:
         ba:12:4a:18:91:05:44:70:a9:4a:7a:c7:46:96:e0:12:e0:50:
         ac:76:f3:54:b7:46:5b:23:3e:51:a1:b1:ff:83:70:da:05:ab:
         18:22:52:d2:20:ed:53:b1:d5:4c:fc:d1:46:bf:1d:a7:75:f7:
         d4:21:b4:b6:11:7c:1d:29:4d:43:78:c7:73:00:2b:c3:48:16:
         7a:1e:d6:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----