Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3232302e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e3232302e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          Nt2NYQRa5ru70im7p8YYCKC1OsAsCJHTbCGASgZOv8Y=
Subject key identifier:   73:34:C8:58:AE:27:91:F5:55:16:B1:F6:54:E8:39:CE:F2:7B:8C:D7
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       73BBFD699E297AE2ED258380A7AA1D01A36DA0CB
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3232302e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:47 +0000
ROA not before:           Wed 29 Sep 2021 23:55:47 +0000
ROA not after:            Fri 30 Sep 2022 00:00:47 +0000
asID:                     17451
IP address blocks:        182.253.220.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:bb:fd:69:9e:29:7a:e2:ed:25:83:80:a7:aa:1d:01:a3:6d:a0:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:47 2021 GMT
            Not After : Sep 30 00:00:47 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:55:24:c1:9f:e0:24:16:94:9b:0e:00:a2:fc:
                    29:b8:c1:f7:ed:54:99:e3:40:06:11:e1:6e:4b:fb:
                    2d:55:8c:eb:40:02:40:9f:d5:59:c3:ef:2d:0a:38:
                    7c:fc:a2:3a:45:f1:80:fa:41:ce:00:01:25:5f:eb:
                    d1:87:67:58:e3:b2:ef:53:94:72:ea:62:df:6c:e8:
                    31:15:8b:e6:fa:cb:57:9f:ca:ab:95:81:50:21:ec:
                    3e:54:44:37:7f:a1:53:e2:d0:75:c5:73:b7:d9:8f:
                    08:5c:12:aa:a2:35:c0:5b:ec:2c:f4:f0:d1:bf:e9:
                    29:d8:e2:69:3c:3f:1c:66:7c:7a:88:a0:b9:94:a4:
                    cf:77:87:27:36:94:4b:1e:a4:a4:a3:2d:83:f8:7b:
                    c3:1a:ec:de:14:40:e3:a4:3e:3b:72:d2:76:3a:10:
                    ae:a9:58:1d:a5:22:5e:71:43:37:5a:fb:4b:ca:9a:
                    59:7d:8f:21:62:f5:ba:90:d4:3a:91:65:62:7f:21:
                    1e:a4:26:2a:c6:9b:d4:d8:46:45:5c:7d:37:4e:88:
                    70:21:d6:88:1f:53:13:17:6c:f2:f1:7e:bf:d8:fa:
                    09:f5:cf:bf:92:b0:0f:04:91:33:02:be:af:ad:a4:
                    d5:f7:25:26:b9:d2:ac:80:60:7f:05:45:4c:d0:f9:
                    84:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:34:C8:58:AE:27:91:F5:55:16:B1:F6:54:E8:39:CE:F2:7B:8C:D7
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3232302e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.220.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:4b:ee:b8:39:f8:90:15:da:df:5b:cc:7b:1d:3a:71:2f:7a:
         b4:33:61:6e:cf:42:ea:e8:4e:6b:3c:0c:18:ba:b5:8f:7d:2e:
         a7:b9:11:4f:30:84:ca:a0:f2:f4:ed:50:86:f2:de:60:89:40:
         6d:a7:59:36:b3:c4:a1:26:8a:eb:6d:17:ea:dd:df:25:0c:68:
         81:5c:f8:0c:fb:dc:f0:6b:10:38:15:29:b6:b4:59:0c:9c:dc:
         15:57:1f:ec:fb:ba:5d:e0:26:d9:21:72:13:d6:ad:63:1e:b9:
         77:fa:9b:a8:63:68:08:ae:4a:83:27:bd:53:00:e9:28:28:d7:
         66:e4:68:23:9e:f9:e2:ba:ca:ad:08:c0:4e:c9:9b:d9:48:e2:
         be:13:70:fb:75:45:84:66:7a:7a:25:34:33:56:f0:77:a4:05:
         eb:c9:75:b0:0b:c4:9f:61:be:61:64:71:1a:de:26:2b:bb:09:
         1a:c6:1e:9d:61:05:4f:3e:68:bf:08:f6:bd:13:9b:5c:75:e1:
         77:c4:fe:79:11:42:ea:4d:b5:86:c6:6e:bb:e7:21:98:ca:49:
         51:94:58:7c:3b:2b:d0:ec:8a:f5:11:79:61:24:7e:b5:52:2f:
         eb:6c:80:dd:4d:6d:39:47:9c:05:89:c3:06:89:25:39:e7:37:
         30:fd:c8:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----