Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3130332e3233332e3135342e302f32342d3234203d3e203137343531.roa
File:                     3130332e3233332e3135342e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          bl0DeNs2PnHSP60Dot0vMi7QPbh50AuZHIKnupEPZPc=
Subject key identifier:   65:4E:0B:DD:EC:17:CC:99:0E:4A:AF:CB:CD:CE:6D:C2:CC:C9:67:57
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       780091F79C27F68CF5719B3EDE47BA1D0B907FF3
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3130332e3233332e3135342e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:01:21 +0000
ROA not before:           Wed 29 Sep 2021 23:56:21 +0000
ROA not after:            Fri 30 Sep 2022 00:01:21 +0000
asID:                     17451
IP address blocks:        103.233.154.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:00:91:f7:9c:27:f6:8c:f5:71:9b:3e:de:47:ba:1d:0b:90:7f:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:56:21 2021 GMT
            Not After : Sep 30 00:01:21 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:68:dd:73:67:a4:7d:62:73:62:21:35:15:f4:
                    13:06:99:8a:5b:cb:97:4c:2e:c5:60:29:c7:3f:5b:
                    34:67:a6:3f:b5:1b:2b:b7:62:44:de:08:23:64:2a:
                    68:f7:3d:62:60:9c:63:15:1e:c3:7c:7c:cf:ff:b9:
                    75:92:5c:ea:b2:e9:b9:a2:d5:ab:91:b2:c3:e3:96:
                    0b:f2:aa:79:33:90:68:f3:a8:6c:6b:c5:90:b3:cd:
                    11:75:1b:f0:bf:ec:ce:5d:78:58:4f:52:65:8d:b1:
                    2a:9a:06:19:84:92:24:2d:37:ba:55:0c:98:ef:85:
                    e8:90:ae:ce:a1:26:af:ca:17:a3:eb:7f:06:f2:2b:
                    57:7b:6b:59:34:23:d0:0d:99:ab:cd:38:33:8b:f7:
                    f9:08:25:41:18:3f:41:c3:c4:bd:9b:d6:25:9a:81:
                    a1:d9:71:81:3e:e6:1e:54:78:cc:1b:8e:46:60:23:
                    a8:13:4c:08:37:86:4e:43:42:4d:91:10:db:f9:b4:
                    85:20:a4:e2:63:47:e1:28:c7:35:b6:ad:60:04:45:
                    73:c2:61:be:80:cc:36:e2:10:24:75:58:58:d7:c0:
                    88:cd:a5:f5:c1:19:e8:38:0b:7f:04:f2:3e:d9:f3:
                    06:b0:4a:87:01:d1:3e:9a:42:9f:59:fd:92:31:32:
                    68:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:4E:0B:DD:EC:17:CC:99:0E:4A:AF:CB:CD:CE:6D:C2:CC:C9:67:57
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3130332e3233332e3135342e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.233.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:46:34:95:b0:c4:63:95:ed:fc:e4:9c:5e:18:52:f7:72:08:
         f3:b3:63:18:55:f9:7f:10:20:63:fb:d5:9f:d1:5f:fa:bb:57:
         aa:2c:69:fc:f4:19:e5:cb:84:a0:78:1a:81:c2:da:6b:c3:a5:
         b5:2b:6b:cd:64:d7:ae:3f:fa:58:9b:f1:88:6b:0e:56:06:27:
         d1:ae:b5:7a:05:d7:51:4a:f8:c9:f6:cf:15:c1:57:9f:88:dd:
         c9:3f:4b:16:7a:52:d4:fb:fb:5f:24:df:19:e5:d4:a3:73:d7:
         5c:b0:96:b0:5e:98:0d:d5:fc:f0:90:dc:de:de:e0:a9:4d:af:
         0b:af:03:cb:bf:86:56:bb:f8:db:f9:1a:0f:ba:13:1a:69:2c:
         d3:dd:c4:42:63:77:fe:4a:3a:e9:5a:9f:b1:98:9f:3d:22:9e:
         be:11:4d:74:d6:08:53:32:8e:b0:b7:c7:0a:43:bb:ab:5a:88:
         2f:e0:fb:92:e2:20:c3:03:3b:e9:0d:28:75:4c:fb:e7:56:27:
         da:f3:b1:47:1d:7a:5a:97:1b:32:2b:77:2d:05:84:57:cb:b7:
         08:53:03:ae:88:8a:12:a3:14:4d:6e:4e:55:21:34:4f:0a:4d:
         fb:b2:85:db:21:04:37:1e:ba:0b:21:f2:7c:8b:59:7b:ac:e9:
         b4:91:62:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:44 2023 by rpki-client on console-fra.rpki-client.org