Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3235302e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e3235302e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          m9seLtwyWxt6PNCaPrXO7Nb0z07m1x7SK6Zr/6uVd54=
Subject key identifier:   DC:56:CB:5D:C8:C1:3A:E0:25:72:0C:52:FE:C7:61:47:38:F3:9D:A6
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       61243FADA5D6C51F0E0C714A757386315C88D87A
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3235302e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:19 +0000
ROA not before:           Wed 29 Sep 2021 23:55:19 +0000
ROA not after:            Fri 30 Sep 2022 00:00:19 +0000
asID:                     17451
IP address blocks:        182.253.250.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:24:3f:ad:a5:d6:c5:1f:0e:0c:71:4a:75:73:86:31:5c:88:d8:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:19 2021 GMT
            Not After : Sep 30 00:00:19 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:28:2f:15:1d:b3:f0:b9:26:f1:53:fc:9e:79:
                    73:5e:cf:45:a6:e0:5a:ef:da:d5:d7:e5:0e:cf:f1:
                    ba:82:8d:7b:ff:c7:2b:9a:a6:77:71:af:62:42:e0:
                    45:27:eb:1f:d0:04:20:02:42:93:a6:c7:ba:ec:bc:
                    eb:74:dd:06:59:b7:72:ed:eb:07:99:aa:2d:4b:d1:
                    63:3a:49:23:1f:0e:78:41:84:76:2c:9d:d0:9a:f1:
                    8e:6f:2b:16:4b:0a:ad:b8:13:3e:bb:8e:ef:f5:0b:
                    e9:c5:68:1e:b9:69:3b:fa:fd:72:41:6c:7a:5f:3c:
                    d6:0b:d2:f0:49:8a:61:8b:13:b5:5c:1d:96:68:30:
                    91:ff:bd:ee:57:bf:14:6f:0a:30:75:4a:c0:25:9a:
                    70:9b:ba:e3:28:df:08:b8:bf:de:85:97:d9:19:45:
                    2b:ef:af:d5:c5:95:6f:83:a9:e7:02:b0:7e:cd:99:
                    16:da:df:1a:8e:93:cd:7e:c0:ea:ff:c1:61:1f:6f:
                    4a:0d:31:42:2b:d9:14:4d:7c:33:9e:58:79:83:81:
                    34:6e:41:5e:f8:8e:31:97:cf:70:b4:17:58:c8:06:
                    cf:00:92:10:75:e4:70:48:36:db:83:b5:06:11:21:
                    4f:d7:a3:4b:ed:57:f3:ce:66:f7:8f:11:b0:0e:45:
                    6c:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:56:CB:5D:C8:C1:3A:E0:25:72:0C:52:FE:C7:61:47:38:F3:9D:A6
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3235302e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.250.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:06:39:36:65:42:67:02:e7:a3:a4:14:b6:b8:05:d3:14:ba:
         03:31:b4:5c:8a:62:0b:0b:4f:d9:d9:25:b9:c9:b8:40:af:62:
         bc:65:3d:f5:fb:97:d8:07:6c:be:35:90:bc:1a:d7:55:a6:e3:
         09:3b:0d:56:c1:2b:c7:4b:43:7a:4a:fe:a9:12:89:b1:2c:58:
         b1:20:cc:00:cc:b6:7f:d1:e8:23:be:03:0c:5b:58:c6:b6:0b:
         a5:d0:c2:ec:eb:60:a4:0f:d5:58:36:90:74:2a:fd:fb:c4:b2:
         cc:aa:ea:01:3a:98:76:b9:71:68:06:d5:76:9c:74:38:6e:b0:
         f2:37:eb:f0:f1:19:e6:69:81:75:b5:ab:bc:53:e9:f1:49:85:
         e0:89:f3:44:0c:67:c9:cd:48:41:f0:18:fe:4b:a5:9b:e7:8c:
         73:4c:f9:9e:68:e1:32:65:9e:65:0e:96:a8:2b:af:74:3c:9c:
         22:f2:5b:f9:e4:4d:fb:e1:63:d9:3a:8f:ab:97:1a:00:8d:6d:
         1c:4b:87:af:4b:25:85:85:98:b9:42:88:ed:35:0d:03:b9:9d:
         fc:cc:e3:e2:a5:c9:27:2c:df:cd:25:12:f7:ca:ef:ff:b0:a7:
         35:48:d9:05:43:75:84:f2:6a:fa:22:f2:75:74:7d:03:da:9b:
         d1:1b:dd:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----