Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131322e37382e3138322e302f32342d3234203d3e203137343531.roa
File:                     3131322e37382e3138322e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          RQt0+qC9WZo7LfoxLWvcXk6w6BkA9YpKR2YSP18n5Fw=
Subject key identifier:   05:3F:37:85:D7:6D:F6:F4:8E:B9:58:EF:A5:40:67:6F:C3:CA:E6:51
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       1428665D3573C8DDB32CAB771A21BC1FBC8DEAE3
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131322e37382e3138322e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:01:10 +0000
ROA not before:           Wed 29 Sep 2021 23:56:10 +0000
ROA not after:            Fri 30 Sep 2022 00:01:10 +0000
asID:                     17451
IP address blocks:        112.78.182.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:28:66:5d:35:73:c8:dd:b3:2c:ab:77:1a:21:bc:1f:bc:8d:ea:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:56:10 2021 GMT
            Not After : Sep 30 00:01:10 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:4b:cf:ff:69:35:73:10:b2:00:f7:db:b0:24:
                    5d:a5:47:80:0b:18:c3:0e:e9:d1:a1:f7:07:9d:78:
                    aa:fa:53:04:4b:af:75:05:93:4c:ee:30:f3:ad:23:
                    0b:09:cc:eb:8d:d5:61:b6:24:01:f9:39:49:44:87:
                    91:de:69:d1:38:31:0b:34:8d:e2:b3:c1:01:9e:14:
                    a7:2b:43:4e:db:e8:28:b6:37:8c:9e:5a:82:46:c9:
                    5b:2c:83:1c:94:af:17:63:33:20:b9:8c:49:9a:4b:
                    59:17:cd:70:06:52:f4:e9:e6:a9:72:19:7e:52:e8:
                    ca:6b:8f:7e:9e:7d:f9:85:55:38:a2:ed:71:74:de:
                    81:a6:ee:d1:65:d4:6f:48:dd:91:29:5c:e2:1b:41:
                    71:05:e1:5b:79:7c:3b:37:50:fb:0b:65:85:73:bc:
                    0a:42:f8:4c:c5:c2:b8:9f:4b:50:9b:d3:d2:10:0c:
                    52:c7:63:8a:ac:46:56:db:1f:f1:cf:9d:e1:87:c8:
                    86:ad:b5:8b:5f:8e:1d:6b:c4:62:09:b0:3c:ce:6a:
                    74:15:88:d3:28:cc:cd:f9:80:3b:bf:48:c8:f3:53:
                    c1:6f:48:05:da:4f:5e:00:48:30:c0:3b:20:f3:15:
                    aa:5f:89:8e:94:60:12:f0:2d:dd:51:e3:ef:db:a4:
                    b4:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:3F:37:85:D7:6D:F6:F4:8E:B9:58:EF:A5:40:67:6F:C3:CA:E6:51
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131322e37382e3138322e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.78.182.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:f2:8b:18:66:77:65:10:27:a4:fa:a6:a9:86:b0:b0:85:04:
         07:b1:40:8b:33:3e:95:a0:57:3f:d6:9f:dc:69:e3:70:7c:f1:
         3d:eb:be:6b:e9:74:e9:6d:ea:e4:4d:97:76:fb:dd:8a:02:d2:
         af:83:31:93:be:db:2a:a7:13:5e:41:24:8c:cd:7d:8f:fb:6e:
         70:6e:cf:7c:19:aa:b1:64:c5:c4:c6:a5:ae:51:12:11:73:1d:
         da:a1:b8:31:cb:71:65:c6:71:66:08:4b:c3:47:ea:dc:09:a3:
         10:f9:a1:d8:e1:44:45:e9:89:39:16:f7:9c:e0:37:4a:b1:da:
         f4:3a:c6:e7:57:6b:25:8f:b2:10:a2:79:c0:c9:24:d2:82:7e:
         b4:44:49:e3:85:ea:76:96:84:52:12:dd:c7:00:39:cb:d2:ec:
         9a:ea:ce:65:8d:8a:c5:e6:5a:86:1b:77:d1:7c:70:ed:89:47:
         56:ae:cd:fd:4b:f6:a6:01:24:ca:13:60:ef:4d:cf:3a:57:b7:
         fb:3f:79:e9:a3:53:03:82:5d:01:88:c6:7d:4a:8a:3d:d6:d6:
         4b:33:8d:9c:96:7b:5a:71:74:b2:fa:7a:13:a7:5c:90:a9:03:
         79:ec:a2:2a:a2:21:e9:d3:82:c2:34:2a:0b:dd:43:f7:32:5b:
         e4:5f:27:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:44 2023 by rpki-client on console-fra.rpki-client.org