Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3130332e3233332e3135352e302f32342d3234203d3e203137343531.roa
File:                     3130332e3233332e3135352e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          VDK9VF/Nn1oxURqewM6kyR/BlGfPt7LUZ2GHXuHCIT8=
Subject key identifier:   B2:29:42:03:53:8C:28:51:5E:31:01:ED:F3:B4:74:A3:8A:1E:28:3D
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       10810959542B06FF1FDD52346B9E037FD1E5ADDB
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3130332e3233332e3135352e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:01:07 +0000
ROA not before:           Wed 29 Sep 2021 23:56:07 +0000
ROA not after:            Fri 30 Sep 2022 00:01:07 +0000
asID:                     17451
IP address blocks:        103.233.155.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:81:09:59:54:2b:06:ff:1f:dd:52:34:6b:9e:03:7f:d1:e5:ad:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:56:07 2021 GMT
            Not After : Sep 30 00:01:07 2022 GMT
        Subject: CN=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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:84:bd:77:2b:0f:34:b5:f3:5c:d2:d9:03:75:
                    cf:88:ed:ae:0b:bb:4a:13:fe:52:0b:40:58:91:9e:
                    b6:d1:f5:08:24:ad:e3:ec:ed:1e:00:5a:74:51:de:
                    06:a9:4e:e7:b7:38:82:05:03:4e:67:27:06:40:43:
                    36:62:9d:ee:5b:8d:30:60:99:e1:31:4c:fe:8f:7b:
                    d9:11:2c:7b:49:9f:f2:b8:ab:54:52:4d:5e:3e:61:
                    ad:32:df:e0:26:62:3b:92:8e:cf:0b:f8:08:f1:56:
                    17:0c:10:4c:3b:6d:1e:c9:12:f2:9f:24:01:52:d1:
                    80:13:a6:64:f2:6e:35:e3:d7:b1:c1:44:35:25:40:
                    e9:d9:38:68:19:c5:fa:d4:07:b8:16:b0:4c:b7:94:
                    67:6a:f8:c6:94:d1:d5:e6:34:f8:a7:f1:a6:27:0c:
                    ce:86:44:59:75:a7:b0:a2:cd:e1:fb:ec:02:29:64:
                    30:f0:56:23:a6:46:dc:55:7c:78:21:28:2a:2a:cc:
                    0e:71:75:7f:8e:4a:5b:bb:e5:04:4a:d5:a0:ae:cb:
                    64:b5:41:02:01:b1:02:ed:9e:97:fe:00:ab:95:2c:
                    55:e2:c4:51:96:b1:79:1e:ad:68:7f:35:2b:1b:66:
                    a1:6d:f9:87:5a:0e:51:88:2a:08:01:61:ef:a3:94:
                    67:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:29:42:03:53:8C:28:51:5E:31:01:ED:F3:B4:74:A3:8A:1E:28:3D
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3130332e3233332e3135352e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.233.155.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:17:22:7d:67:f4:ce:7f:11:9f:45:78:f5:5e:96:21:ce:38:
         3e:a6:37:39:03:39:af:b4:6a:e8:28:d9:f5:d6:18:ba:dd:c3:
         04:59:cf:4f:f3:0b:fe:06:88:66:7c:2c:c8:0e:bc:1f:7a:c5:
         a2:fc:36:5a:43:15:aa:e1:80:b1:69:63:02:a0:7e:34:9e:6a:
         ea:99:3a:06:90:d5:cc:6b:ca:42:eb:ce:5c:c3:58:06:e2:94:
         2b:ae:de:6c:96:ae:66:ca:3d:f9:90:34:53:37:67:34:f8:00:
         ce:16:fd:92:95:fd:69:ef:fa:b5:01:7f:58:98:65:3c:ac:46:
         f4:f1:49:7f:18:78:c8:59:32:d4:f0:e2:90:53:2e:5c:f5:8c:
         3a:16:d0:7a:b7:59:3c:9b:a8:60:d8:1a:14:80:4e:3a:c2:91:
         db:4e:ca:ab:0d:9a:0c:32:a6:dc:80:5d:e3:9f:fd:7a:f3:d1:
         82:d3:bb:88:ff:22:a7:3a:58:41:16:d9:12:23:0a:7b:d5:8c:
         e1:31:67:18:da:2b:22:e8:bd:3b:8f:6e:ee:ae:9e:58:d0:ec:
         00:93:aa:09:11:ff:76:26:95:e9:b5:87:4c:2c:f4:31:df:b5:
         fa:36:27:78:8e:58:c2:40:82:19:a1:04:b1:88:09:b8:07:08:
         33:cd:58:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:44 2023 by rpki-client on console-fra.rpki-client.org