Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3139312e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e3139312e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          /RcYlu6FuJMfTw4zdLsH5L6rWH8d2z11/OZCm7e019c=
Subject key identifier:   A9:59:51:3A:62:F8:C7:3D:0F:18:73:05:0C:C9:06:F5:A1:5A:3F:7A
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       5890997F783C4FDE0B48AF23C83F9024EB760050
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3139312e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:33 +0000
ROA not before:           Wed 29 Sep 2021 23:55:33 +0000
ROA not after:            Fri 30 Sep 2022 00:00:33 +0000
asID:                     17451
IP address blocks:        182.253.191.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:90:99:7f:78:3c:4f:de:0b:48:af:23:c8:3f:90:24:eb:76:00:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:33 2021 GMT
            Not After : Sep 30 00:00:33 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:72:82:6f:0a:db:b1:69:d4:32:9f:88:9f:f0:
                    ed:c0:12:4b:fe:dd:08:42:10:a6:39:d7:a2:d6:e9:
                    a1:11:ac:b6:c3:35:ba:1d:77:f3:8c:1c:72:99:16:
                    fc:89:eb:29:f2:86:b0:09:60:c9:1f:77:a7:78:ed:
                    6a:9d:a1:09:cf:8c:93:e0:ed:e7:2a:84:c0:6a:93:
                    09:7f:75:cb:04:ad:c6:ee:cb:e4:b4:0e:c4:8c:f6:
                    2b:c7:07:ae:60:00:11:fd:fb:3a:6a:4c:6b:0c:a2:
                    f6:49:47:53:db:65:c8:b4:88:8f:26:31:4f:0a:28:
                    fa:8e:38:97:e2:e0:95:3e:49:36:0f:c4:a6:93:a9:
                    7d:bb:2e:c6:ff:ff:3c:24:27:df:17:f7:5f:7b:57:
                    4f:fd:a5:7d:03:06:e7:4a:38:d8:8a:6c:cd:a0:ba:
                    53:d6:60:f0:66:cf:26:d3:62:5d:32:1b:d0:ed:67:
                    40:16:89:32:99:29:6e:f6:6d:53:63:90:f3:a5:99:
                    a8:ae:61:52:3b:12:73:ba:84:df:97:51:b4:2f:7a:
                    e9:e4:35:21:13:58:c5:6b:90:b7:40:d5:a6:bf:a8:
                    fd:1c:1a:8c:ff:01:fc:3b:c7:9e:7b:32:3f:13:b4:
                    ea:c4:d2:59:35:dd:ff:85:1d:07:71:aa:0d:4f:db:
                    aa:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:59:51:3A:62:F8:C7:3D:0F:18:73:05:0C:C9:06:F5:A1:5A:3F:7A
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3139312e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.191.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:84:7d:fd:82:3f:4e:66:67:dc:87:84:e2:f6:f4:ce:4d:d6:
         f1:76:fd:eb:93:91:9b:8f:52:49:63:0c:e7:73:35:54:a5:02:
         3b:78:8b:b2:35:d6:69:c3:e6:aa:3b:eb:f1:34:c2:18:13:2c:
         f8:9b:76:3e:98:d5:14:ac:87:c9:64:f7:9a:ef:04:c4:77:23:
         96:28:60:45:bf:41:55:03:89:6f:12:4c:65:f8:aa:22:51:37:
         9d:42:dc:9d:af:a6:11:68:f6:99:73:b3:49:9c:f1:4f:30:d3:
         46:50:04:c3:84:6b:f1:07:64:7c:c3:e4:a2:7b:7b:98:7b:11:
         2f:37:ca:81:b7:ca:b9:39:ae:10:52:52:0b:c9:fa:8f:4c:41:
         bc:a5:e5:f3:30:7b:0b:db:2a:b6:cc:3c:41:14:38:3a:47:7a:
         be:9a:f2:6e:b9:72:29:b4:88:3f:ea:ff:16:80:1d:bb:af:73:
         ba:ed:11:d9:04:64:8d:d5:f6:2b:11:c4:1a:2e:fc:07:be:ad:
         ad:ae:dc:df:40:f1:be:20:58:36:c3:00:7b:03:83:22:a6:32:
         ab:98:cf:e9:ea:91:af:b9:14:6d:b5:82:f0:14:94:d4:68:ca:
         2f:7d:0c:24:be:83:7d:9d:38:45:8e:8e:a7:fc:66:d6:49:b8:
         fa:9e:c4:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----