Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131322e37382e3137332e302f32342d3234203d3e203137343531.roa
File:                     3131322e37382e3137332e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          BrnnRA2q/PYQ2Qof471/Yvf8AGpnJ/PJwpfdrDT+Fzk=
Subject key identifier:   65:01:54:28:5A:53:F2:FE:C1:E2:22:1F:B3:75:FF:A6:C6:93:B0:11
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       1C1764ACC1AB9D806270743F0866F1462328F464
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131322e37382e3137332e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:29 +0000
ROA not before:           Wed 29 Sep 2021 23:55:29 +0000
ROA not after:            Fri 30 Sep 2022 00:00:29 +0000
asID:                     17451
IP address blocks:        112.78.173.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:17:64:ac:c1:ab:9d:80:62:70:74:3f:08:66:f1:46:23:28:f4:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:29 2021 GMT
            Not After : Sep 30 00:00:29 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:75:41:41:18:91:43:d5:55:f8:2d:8f:26:13:
                    a8:5b:a3:95:54:20:41:07:d2:3d:d2:95:a6:89:6a:
                    61:2c:9a:4d:fc:14:40:a5:dc:48:e2:9e:3d:a9:4e:
                    33:ab:f8:a3:d4:8d:3b:fe:68:89:7b:fa:fa:ef:5c:
                    e5:8b:ef:d7:f0:51:cd:6d:db:30:d6:b7:1b:c1:4b:
                    79:c9:d5:fb:34:ae:c4:e5:70:f4:6d:fe:6d:ff:16:
                    92:17:19:16:93:df:4f:fb:7c:77:3c:2a:e4:d4:13:
                    8e:10:94:a6:94:a7:03:89:07:ac:b2:ff:57:a8:d0:
                    3a:25:7c:f3:96:71:1d:b8:da:1d:a8:5b:cf:e2:8e:
                    0d:65:3f:ba:66:20:3f:8d:57:ee:d7:1e:f7:17:73:
                    4f:3c:27:66:d9:d6:15:39:3c:f6:a4:d2:09:07:db:
                    b1:13:1a:42:d8:b5:0e:2e:c2:19:a7:f1:51:90:b7:
                    6e:59:be:52:df:26:98:54:49:21:ca:2b:ee:c6:d2:
                    27:4e:96:fa:87:d6:17:42:14:d9:5a:74:40:42:d6:
                    2c:8e:12:2c:bb:d5:23:22:0b:4a:65:6e:4d:76:1a:
                    30:df:f4:b2:5f:61:d7:05:b2:77:54:68:57:04:60:
                    50:1c:f2:04:d2:90:81:af:2f:e8:79:95:09:68:31:
                    aa:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:01:54:28:5A:53:F2:FE:C1:E2:22:1F:B3:75:FF:A6:C6:93:B0:11
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131322e37382e3137332e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.78.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:18:20:a3:ba:36:af:07:4e:c7:0d:d8:32:17:ae:e4:93:a1:
         49:d8:3b:20:b1:f7:9e:0b:2f:02:f0:4c:e9:6f:74:36:db:99:
         f4:2e:61:1b:46:08:d9:b6:3e:28:8f:f3:33:84:fb:ca:29:f2:
         ac:be:2c:6d:9b:9b:92:e9:2a:f4:44:56:9b:67:53:d3:a5:5b:
         8d:19:ec:6f:12:7e:1a:43:c2:e2:ae:49:2b:5e:fe:0f:1c:55:
         36:b2:a7:4a:86:91:e8:d9:2f:3d:8d:a0:e0:08:a3:04:c6:bc:
         f8:97:2a:3a:e5:65:fd:19:17:0c:f3:6e:70:81:85:04:17:57:
         fd:fd:85:2a:1d:65:a8:3c:01:b1:04:c2:0a:b7:4a:51:cc:23:
         2d:65:84:e9:de:9b:45:f6:d4:92:fe:62:7a:d1:c1:3f:df:1e:
         c0:88:c6:55:1b:0d:ab:aa:8c:e0:30:3b:cc:c3:03:18:c5:21:
         c2:b0:2b:53:3e:58:63:83:4a:c8:a2:f3:2e:53:55:a5:fc:96:
         43:19:be:b2:03:a2:60:8b:18:c4:3e:68:f4:e0:f9:67:8c:87:
         a9:e1:09:4c:23:25:6e:aa:35:9f:3a:eb:4b:d2:3c:6d:91:d7:
         a8:af:d3:d4:a0:e3:68:d4:c1:33:0b:48:92:46:65:9a:6d:ed:
         01:d6:97:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:44 2023 by rpki-client on console-fra.rpki-client.org