Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131322e37382e3132392e302f32342d3234203d3e203137343531.roa
File:                     3131322e37382e3132392e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          laporE/CtPs+koGcgtdMa6LnS8QY0JJ2QA9beDO5fOI=
Subject key identifier:   3F:81:2A:17:70:52:65:BC:3E:69:FA:31:9A:AD:FA:AA:80:24:7F:E0
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       377D9F1BCF4A67018174717D1381AD94159ADF5B
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131322e37382e3132392e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:01:19 +0000
ROA not before:           Wed 29 Sep 2021 23:56:19 +0000
ROA not after:            Fri 30 Sep 2022 00:01:19 +0000
asID:                     17451
IP address blocks:        112.78.129.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:7d:9f:1b:cf:4a:67:01:81:74:71:7d:13:81:ad:94:15:9a:df:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:56:19 2021 GMT
            Not After : Sep 30 00:01:19 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:4b:09:18:69:f0:76:c6:91:c5:2f:ab:af:ce:
                    15:3b:27:40:3b:22:32:07:b7:0f:b5:82:56:12:5e:
                    af:a4:a8:ac:35:0b:db:5e:a7:f6:bb:98:4f:8a:e3:
                    3f:f9:53:4d:38:bd:3d:eb:9f:8b:f7:f5:7c:38:37:
                    b5:e3:79:78:e6:4e:9f:78:91:5f:16:da:2a:e5:b5:
                    4c:fb:6b:db:7a:80:81:0a:9a:b3:35:44:a1:29:fa:
                    d9:d9:7d:a2:d0:60:dd:e8:ef:cb:cc:4b:7a:30:6e:
                    73:ba:1b:01:7e:56:82:87:81:e1:5b:da:a5:c5:a4:
                    fa:4c:4f:f7:4d:72:f2:93:82:fb:b7:8a:31:c8:79:
                    76:a4:13:a4:3b:5e:1b:dd:37:bd:1a:f6:a2:94:64:
                    08:06:66:34:1d:c4:cb:72:44:d2:29:19:f2:f3:62:
                    77:e2:10:17:f3:15:da:11:7b:48:cb:62:84:f8:4f:
                    aa:d1:ab:97:d5:3d:bc:b1:4d:0b:fe:ce:6f:17:ef:
                    10:32:a7:50:5a:b3:1e:75:fc:30:a9:40:e8:5a:22:
                    15:20:d2:55:44:10:a5:2c:67:99:c8:55:6c:52:4b:
                    82:13:9b:96:10:51:6f:c0:a2:13:7f:05:76:2b:ed:
                    b7:e8:c7:bf:25:9d:d4:91:f4:33:97:1e:cc:90:0b:
                    e7:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:81:2A:17:70:52:65:BC:3E:69:FA:31:9A:AD:FA:AA:80:24:7F:E0
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131322e37382e3132392e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.78.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:e6:55:6d:e6:eb:55:7c:b9:51:94:14:b0:b9:ce:e6:29:2f:
         eb:24:e9:be:de:e7:7f:45:51:f1:ed:e6:38:89:38:4f:3d:4b:
         7b:0e:2b:3e:a9:a2:7c:00:9f:8d:ba:7f:77:3d:24:f2:ba:2c:
         3f:e5:79:76:47:94:0d:d7:09:48:74:76:fa:4a:c0:5f:bc:e0:
         c8:85:52:f4:43:16:4c:96:3e:32:da:aa:c5:07:4e:10:17:cc:
         82:c5:01:2e:47:70:3b:92:9b:e0:9c:96:3a:da:56:bc:42:cd:
         e7:81:e0:89:ec:c6:2b:02:e4:e2:dd:08:a9:56:96:05:9c:f8:
         c7:4a:fa:c0:4b:5b:8e:89:61:0f:ef:cd:cc:bc:2b:ac:7e:31:
         1f:73:91:f3:a3:8e:79:e5:6c:df:a4:9b:83:d9:8e:39:72:0b:
         6c:f4:07:fe:32:26:b1:74:a5:40:c1:42:d7:e8:80:59:ac:6d:
         97:35:6b:40:7c:00:9c:26:8d:42:8b:07:8f:19:db:c2:08:6c:
         48:9d:f9:56:95:f8:a9:32:be:9b:78:ee:38:ef:30:83:e7:67:
         34:83:3d:59:0c:9f:79:2e:b4:f8:43:1d:60:4b:d9:a0:f8:b5:
         ce:84:ec:18:8a:f2:b6:fe:61:7a:f4:cd:82:20:e3:48:5e:91:
         2f:d3:01:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:59 2023 by rpki-client on console-ams.rpki-client.org