Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131322e37382e3137342e302f32342d3234203d3e203137343531.roa
File:                     3131322e37382e3137342e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          roDr0j+FY/4Mq/xVn8G8+LLSaySAfOmWm5dcgGonRVM=
Subject key identifier:   7F:78:33:49:1E:64:BA:E6:F5:61:14:F6:B8:E6:8C:E6:13:1C:4E:0E
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       6DAAE60C9A15D912FF310EAC012EC6A30E3D3D6B
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131322e37382e3137342e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:46 +0000
ROA not before:           Wed 29 Sep 2021 23:55:46 +0000
ROA not after:            Fri 30 Sep 2022 00:00:46 +0000
asID:                     17451
IP address blocks:        112.78.174.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:aa:e6:0c:9a:15:d9:12:ff:31:0e:ac:01:2e:c6:a3:0e:3d:3d:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:46 2021 GMT
            Not After : Sep 30 00:00:46 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:37:aa:e3:c4:28:ba:f1:ac:08:0e:76:b4:fd:
                    2f:ce:e9:a5:a9:50:03:17:82:d2:77:aa:14:66:06:
                    d8:db:07:a5:46:e1:19:f6:ef:c3:d5:6f:7d:32:1c:
                    92:59:bb:54:fc:3f:9b:13:c6:78:b3:0d:69:c5:ec:
                    dd:26:23:a9:1d:a0:da:95:fc:a0:9a:a3:86:31:96:
                    3e:f6:fd:df:08:b0:8b:2a:27:b9:98:13:4e:b5:8e:
                    52:da:82:cc:07:5a:b3:a1:2c:9a:ed:43:05:19:f4:
                    7c:9d:a2:00:b4:20:82:ce:ad:c3:b4:00:15:ca:59:
                    81:88:e7:ae:ab:1d:7e:45:59:47:7e:3d:47:93:0a:
                    83:0e:4a:38:31:47:c6:96:26:f0:c4:e0:bc:83:1c:
                    3f:08:05:d5:c3:9e:f2:22:68:b9:88:0a:47:e3:4e:
                    b2:d8:80:d1:8f:0c:98:b3:8e:80:ae:e5:e1:85:fe:
                    5b:26:20:e6:a5:52:8c:1d:fb:f1:46:23:78:fd:8f:
                    a7:3d:3d:7c:ef:dc:a5:45:1c:31:24:a0:38:7f:27:
                    92:a7:a0:a8:b7:58:e8:07:02:30:40:3f:55:a3:84:
                    d2:3b:b2:a4:24:4a:ac:97:85:fc:18:64:9a:ef:64:
                    09:56:8e:a4:1d:15:f2:36:42:2d:db:ca:09:97:9d:
                    1a:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:78:33:49:1E:64:BA:E6:F5:61:14:F6:B8:E6:8C:E6:13:1C:4E:0E
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131322e37382e3137342e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.78.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:89:45:d2:8d:4d:58:fd:fe:6b:85:77:42:bb:f1:b1:ab:21:
         e4:97:4f:4e:34:64:29:0d:d0:c2:11:2a:2f:e4:81:93:97:e7:
         2a:0b:e9:1b:e6:50:15:a1:bf:50:4d:40:00:4f:24:6d:ce:5b:
         4a:5e:ac:98:20:9c:44:e6:5a:d2:d6:5d:95:97:e6:73:a7:b5:
         e1:85:fe:55:f5:1f:12:d8:04:c0:7c:66:16:c0:2c:a3:ab:7f:
         9d:55:e1:7f:a8:80:72:27:33:c4:fb:12:0d:d6:cd:26:1e:dd:
         74:00:19:62:12:bc:e9:c5:ed:f0:82:18:3a:b1:31:49:03:0d:
         32:dc:0e:39:fa:80:30:b5:35:b2:95:65:34:21:2b:6a:b1:46:
         21:37:ef:d6:09:89:64:01:f6:b7:28:d1:8c:d1:7a:92:6c:c0:
         92:44:c5:c9:d8:03:42:05:77:0c:ec:f3:c9:f0:64:ad:2d:70:
         9d:37:3c:84:f4:53:6a:1d:04:9a:b8:43:cb:64:e2:50:8c:d4:
         24:66:1a:01:e9:04:a0:0e:e1:54:05:cc:cd:54:1f:93:d4:6f:
         8a:88:74:66:43:18:f9:3b:3d:08:4f:bb:cb:b2:9d:87:12:ee:
         cc:65:a1:0a:c5:6e:b8:25:56:f9:e4:5d:01:e6:1e:7c:a2:91:
         54:f9:c9:90
-----BEGIN CERTIFICATE-----
MIIHJDCCBgygAwIBAgIUbarmDJoV2RL/MQ6sAS7Gow49PWswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJBNDE3
RjcyOERCRjAeFw0yMTA5MjkyMzU1NDZaFw0yMjA5MzAwMDAwNDZaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRjIzN0FBRTNDNDI4QkFGMUFD
MDgwRTc2QjRGRDJGQ0VFOUE1QTk1MDAzMTc4MkQyNzdBQTE0NjYwNkQ4REIwN0E1
NDZFMTE5RjZFRkMzRDU2RjdEMzIxQzkyNTlCQjU0RkMzRjlCMTNDNjc4QjMwRDY5
QzVFQ0REMjYyM0E5MURBMERBOTVGQ0EwOUFBMzg2MzE5NjNFRjZGRERGMDhCMDhC
MkEyN0I5OTgxMzRFQjU4RTUyREE4MkNDMDc1QUIzQTEyQzlBRUQ0MzA1MTlGNDdD
OURBMjAwQjQyMDgyQ0VBREMzQjQwMDE1Q0E1OTgxODhFN0FFQUIxRDdFNDU1OTQ3
N0UzRDQ3OTMwQTgzMEU0QTM4MzE0N0M2OTYyNkYwQzRFMEJDODMxQzNGMDgwNUQ1
QzM5RUYyMjI2OEI5ODgwQTQ3RTM0RUIyRDg4MEQxOEYwQzk4QjM4RTgwQUVFNUUx
ODVGRTVCMjYyMEU2QTU1MjhDMURGQkYxNDYyMzc4RkQ4RkE3M0QzRDdDRUZEQ0E1
NDUxQzMxMjRBMDM4N0YyNzkyQTdBMEE4Qjc1OEU4MDcwMjMwNDAzRjU1QTM4NEQy
M0JCMkE0MjQ0QUFDOTc4NUZDMTg2NDlBRUY2NDA5NTY4RUE0MUQxNUYyMzY0MjJE
REJDQTA5OTc5RDFBREIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA8jeq48QouvGsCA52tP0vzumlqVADF4LSd6oUZgbY2welRuEZ9u/D
1W99MhySWbtU/D+bE8Z4sw1pxezdJiOpHaDalfygmqOGMZY+9v3fCLCLKie5mBNO
tY5S2oLMB1qzoSya7UMFGfR8naIAtCCCzq3DtAAVylmBiOeuqx1+RVlHfj1HkwqD
Dko4MUfGlibwxOC8gxw/CAXVw57yImi5iApH406y2IDRjwyYs46AruXhhf5bJiDm
pVKMHfvxRiN4/Y+nPT1879ylRRwxJKA4fyeSp6Cot1joBwIwQD9Vo4TSO7KkJEqs
l4X8GGSa72QJVo6kHRXyNkIt28oJl50a2wIDAQABo4ICMjCCAi4wHQYDVR0OBBYE
FH94M0keZLrm9WEU9rjmjOYTHE4OMB8GA1UdIwQYMBaAFKxVVEe6YsORB/Fr9XL4
KkF/co2/MA4GA1UdDwEB/wQEAwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzk5M2YzNTAtYjc1Ni00OTE2LThk
ODQtNDg0ZjAyNWRmZmNjLzAvQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJB
NDE3RjcyOERCRi5jcmwwdAYIKwYBBQUHAQEEaDBmMGQGCCsGAQUFBzAChlhyc3lu
YzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8yL0FDNTU1NDQ3
QkE2MkMzOTEwN0YxNkJGNTcyRjgyQTQxN0Y3MjhEQkYuY2VyMIGiBggrBgEFBQcB
CwSBlTCBkjCBjwYIKwYBBQUHMAuGgYJyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby8zOTkzZjM1MC1iNzU2LTQ5MTYtOGQ4NC00ODRmMDI1ZGZmY2MvMC8z
MTMxMzIyZTM3MzgyZTMxMzczNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzcz
NDM1MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBABwTq4wDQYJKoZIhvcNAQELBQADggEBAIaJRdKNTVj9
/muFd0K78bGrIeSXT040ZCkN0MIRKi/kgZOX5yoL6RvmUBWhv1BNQABPJG3OW0pe
rJggnETmWtLWXZWX5nOnteGF/lX1HxLYBMB8ZhbALKOrf51V4X+ogHInM8T7Eg3W
zSYe3XQAGWISvOnF7fCCGDqxMUkDDTLcDjn6gDC1NbKVZTQhK2qxRiE379YJiWQB
9rco0YzRepJswJJExcnYA0IFdwzs88nwZK0tcJ03PIT0U2odBJq4Q8tk4lCM1CRm
GgHpBKAO4VQFzM1UH5PUb4qIdGZDGPk7PQhPu8uynYcS7sxloQrFbrglVvnkXQHm
HnyikVT5yZA=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:44 2023 by rpki-client on console-fra.rpki-client.org