Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131322e37382e3138312e302f32342d3234203d3e203137343531.roa
File:                     3131322e37382e3138312e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          vKUHK+LoIRopqYaDAhxFgDFvErZFzdeeZHGAuzNzpjk=
Subject key identifier:   21:F3:54:28:E8:70:75:1C:2F:B6:0B:35:11:53:7B:2A:F4:37:27:D2
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       0FD6B46A835873EECDDFA7D90C703233378943D5
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131322e37382e3138312e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:14 +0000
ROA not before:           Wed 29 Sep 2021 23:55:14 +0000
ROA not after:            Fri 30 Sep 2022 00:00:14 +0000
asID:                     17451
IP address blocks:        112.78.181.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:d6:b4:6a:83:58:73:ee:cd:df:a7:d9:0c:70:32:33:37:89:43:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:14 2021 GMT
            Not After : Sep 30 00:00:14 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e5:b0:c9:1d:34:3d:53:e6:4c:ed:a9:dd:94:
                    4d:36:74:9f:c6:b0:0e:50:ae:d4:53:2f:ca:36:81:
                    2c:07:73:2a:64:ac:40:ba:5c:fd:9e:a0:46:3f:d7:
                    c5:c2:a6:21:f9:17:fe:bf:4a:f4:4b:67:8b:ea:b7:
                    9e:a7:ce:a3:2a:c3:4f:37:d3:cb:3c:c8:5a:3e:3a:
                    f7:74:31:d7:be:f3:af:63:1f:fd:75:c8:76:a3:18:
                    1a:0f:62:a4:bd:2b:c3:4e:23:e6:ff:20:97:44:3c:
                    79:19:a3:98:bb:89:62:62:a5:0e:e5:58:3f:11:c9:
                    f3:d3:e4:31:ab:c7:c5:1d:3d:33:5f:72:02:31:b6:
                    64:5e:82:8e:2e:a7:98:bc:90:1e:57:e9:a5:47:26:
                    63:ae:98:7e:d7:8c:49:67:f6:4d:86:be:e3:84:d1:
                    cc:58:cb:a5:09:3b:0d:ae:cf:56:14:60:8d:aa:e1:
                    a5:0d:6d:b9:50:69:ad:40:ab:c9:dc:b6:5c:15:12:
                    a5:38:13:b2:36:d8:13:f2:ef:61:c9:2c:de:0a:98:
                    ea:ee:3c:71:c9:67:a7:39:ce:07:81:fd:67:92:70:
                    8f:58:4d:c1:d0:b8:55:c8:4f:b1:71:46:c1:3c:28:
                    80:5c:d5:7d:d7:b0:db:59:cd:1a:43:77:0c:fa:90:
                    05:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:F3:54:28:E8:70:75:1C:2F:B6:0B:35:11:53:7B:2A:F4:37:27:D2
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131322e37382e3138312e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.78.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:bb:25:78:05:d5:bb:cb:79:06:3f:14:56:fb:64:d5:95:6a:
         ce:05:9c:25:5a:d1:c3:09:0a:13:88:ec:cf:8e:d0:cb:d6:8a:
         79:44:7e:bd:b0:dc:52:c1:98:d2:7a:b6:d3:c0:2c:de:f3:d5:
         61:92:02:86:4d:23:20:fc:6f:8e:92:2c:c9:c7:e3:0d:3c:79:
         f4:8e:a6:62:96:92:05:5e:ef:03:2c:ce:5b:4e:c5:0e:90:88:
         07:27:a8:6d:c9:57:a4:6d:a2:62:e3:25:43:2d:e6:60:f0:8e:
         18:d1:22:bd:9c:6b:55:b0:2a:54:21:29:28:0e:cf:21:ab:93:
         6e:92:5a:a7:1a:9f:5b:c2:c3:de:a8:4d:72:f8:53:90:dc:33:
         17:67:aa:8a:a2:cf:84:4a:7d:92:52:7b:6e:94:5a:c9:c8:61:
         31:a1:68:73:30:2d:cd:62:d4:fe:bd:52:f8:b5:b6:bf:5a:92:
         4e:c6:85:f3:5e:b2:4b:9f:32:c9:e2:66:5b:b2:f3:f0:d6:16:
         a3:c6:c8:80:5a:2a:2a:0d:9b:33:f1:24:b4:3f:2f:a9:f7:bf:
         73:4b:6d:db:d9:b9:43:04:ce:73:0b:14:a3:6c:2f:e2:7c:03:
         92:d2:9a:ff:52:47:1a:0b:1d:62:62:71:48:36:4e:96:3c:02:
         22:e8:4e:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:44 2023 by rpki-client on console-fra.rpki-client.org