Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131322e37382e3136392e302f32342d3234203d3e203137343531.roa
File:                     3131322e37382e3136392e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          ZDc2tDjL0cwvQbon3cbHgzR5J8Xvp0VHKwvW+ae472o=
Subject key identifier:   4C:53:3D:8F:DB:7D:82:79:AC:02:D2:34:09:25:3D:DE:36:6F:39:EC
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       57BC9B41C8A1E7013C121CBE8ED7FCA93B3A1D68
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131322e37382e3136392e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:36 +0000
ROA not before:           Wed 29 Sep 2021 23:55:36 +0000
ROA not after:            Fri 30 Sep 2022 00:00:36 +0000
asID:                     17451
IP address blocks:        112.78.169.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:bc:9b:41:c8:a1:e7:01:3c:12:1c:be:8e:d7:fc:a9:3b:3a:1d:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:36 2021 GMT
            Not After : Sep 30 00:00:36 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:d5:74:6c:86:ed:9f:b7:68:4f:85:bb:32:72:
                    b5:ab:4b:27:1e:fb:79:f4:44:cb:f2:7c:cc:74:0b:
                    5e:7f:44:c1:34:69:23:7f:f6:18:b2:f6:7c:b8:38:
                    c5:d1:f1:71:53:31:ae:b7:4a:81:06:a1:22:7b:d3:
                    d1:09:f3:31:94:0c:c0:ca:b8:a8:cc:3c:6c:46:7e:
                    37:07:c8:21:5c:1b:2b:fe:18:f3:a6:12:b2:d4:94:
                    0d:69:23:7a:c1:16:c1:91:3e:72:68:49:0a:0c:72:
                    71:cb:4f:8c:a5:9b:b8:43:ec:d9:6e:68:5b:e5:ec:
                    1c:68:c2:7d:c8:e2:f5:04:53:92:5a:27:f0:5b:d9:
                    2e:ac:21:cb:ac:a9:91:c2:d2:1e:7f:69:84:bc:3b:
                    42:54:0e:9c:00:88:10:90:aa:2e:08:92:90:0e:6a:
                    28:61:a4:f5:d9:53:36:a3:37:55:7c:78:45:69:56:
                    a3:46:ba:14:6d:e9:d0:ca:f1:85:49:69:21:0e:72:
                    2c:da:8b:cc:7e:5c:43:ad:65:79:dd:6c:ac:b8:85:
                    4f:81:0f:13:7f:ce:09:66:76:0c:90:e3:f3:cc:c3:
                    98:39:4a:d0:79:58:99:e4:c8:06:bb:e5:5d:d3:8b:
                    e5:8a:c6:09:55:05:2b:90:7e:a7:31:ab:68:3a:39:
                    46:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:53:3D:8F:DB:7D:82:79:AC:02:D2:34:09:25:3D:DE:36:6F:39:EC
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131322e37382e3136392e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.78.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:4e:95:26:c7:21:cc:e4:19:0e:e9:0d:e1:fc:99:a7:d8:4c:
         11:bd:1b:03:fc:9f:70:24:30:f5:16:77:f2:e3:dd:d1:fb:94:
         e8:c4:3a:a2:de:1e:c7:fa:5d:a0:01:24:b0:d2:92:0f:71:cf:
         37:86:83:d0:db:82:c3:0c:d0:80:a4:98:91:56:b0:bb:a7:28:
         28:d0:3d:c6:36:38:15:23:4b:5e:ae:bc:cc:e3:a1:6f:b9:a4:
         2d:bf:48:f9:81:8d:96:15:a9:0b:c6:a9:b0:a4:31:51:c9:e0:
         f4:60:fd:97:21:ce:78:f9:2a:7b:ce:62:5c:1f:35:14:9c:84:
         b9:84:a4:c4:1e:3c:21:db:d8:56:e8:f3:c7:c2:0e:6c:d7:b3:
         0a:36:c6:59:19:f6:c4:86:76:c3:ad:a3:e7:30:36:06:25:37:
         11:7f:a4:d4:8d:c6:ba:a9:9b:f8:f9:c6:44:3a:70:11:3b:c8:
         6f:62:1f:91:c9:9f:e1:b4:c1:67:95:3c:b9:5f:c4:32:c3:60:
         5a:57:f2:e3:46:ec:25:c0:bc:d2:11:54:ca:da:23:2f:12:49:
         86:3f:5e:dc:40:85:43:5e:86:b8:db:8a:25:9d:80:55:ff:14:
         bc:e1:e2:59:44:32:2a:ff:8e:b0:d8:7f:bf:8c:20:67:fb:58:
         7f:c6:3b:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:44 2023 by rpki-client on console-fra.rpki-client.org