Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131322e37382e3139302e302f32342d3234203d3e203137343531.roa
File:                     3131322e37382e3139302e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          B6kxFnSsFZc1p4y7ucfMAuTalgbHKDKmEDtPpPIy3Uw=
Subject key identifier:   42:47:14:E0:59:FC:53:01:67:E4:A1:63:66:4D:E6:CF:27:79:54:61
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       6E4BAA8F46677D1279975E1D23F0013546552572
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131322e37382e3139302e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:01:11 +0000
ROA not before:           Wed 29 Sep 2021 23:56:11 +0000
ROA not after:            Fri 30 Sep 2022 00:01:11 +0000
asID:                     17451
IP address blocks:        112.78.190.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:4b:aa:8f:46:67:7d:12:79:97:5e:1d:23:f0:01:35:46:55:25:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:56:11 2021 GMT
            Not After : Sep 30 00:01:11 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:09:d8:f4:a3:69:af:96:f4:8c:16:a3:c3:d0:
                    8e:e7:33:a2:fc:f7:31:dc:b4:00:af:4d:ca:df:84:
                    b9:e4:4b:a6:d7:8b:59:bc:b5:e4:9e:16:68:4c:6d:
                    53:ff:2e:6f:24:0c:91:b2:a5:db:c4:07:05:d8:a6:
                    62:67:b9:d3:63:ae:3d:81:e1:7a:c7:b7:16:25:eb:
                    90:7e:4d:de:16:3e:48:f1:1f:25:a5:d4:04:bc:45:
                    12:ae:1a:58:a5:3b:da:1c:31:dc:ff:26:01:6c:12:
                    a0:35:ec:46:77:05:dc:e2:1a:f2:92:54:b2:97:ed:
                    01:f6:5c:20:87:95:2c:65:d4:90:dd:33:22:30:0f:
                    c4:c9:ab:55:81:5a:2d:72:ce:7d:91:0e:4a:cb:10:
                    fe:af:3d:f0:9f:e4:f1:e1:0b:0d:1c:54:53:99:5f:
                    20:56:91:32:e9:6a:14:58:06:4d:a5:e2:fa:7f:65:
                    da:31:69:82:aa:c7:ed:11:00:f3:8e:3f:dc:92:e9:
                    b5:32:11:97:06:88:59:95:1a:57:32:14:01:dc:68:
                    c6:de:b7:1d:1b:bb:c5:80:e6:81:29:81:05:f0:4c:
                    63:0e:1d:9f:9d:51:6f:46:6a:86:5a:e7:6f:52:9a:
                    f6:ea:d3:f4:ea:26:27:bc:1f:cc:d1:f1:b9:ed:cb:
                    b2:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:47:14:E0:59:FC:53:01:67:E4:A1:63:66:4D:E6:CF:27:79:54:61
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131322e37382e3139302e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.78.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         38:71:5c:6a:a9:73:32:21:9f:39:e3:45:77:d4:23:64:a9:bd:
         e1:ad:60:9c:0b:64:90:9d:29:50:1e:ff:1f:5c:7d:9b:38:48:
         9e:75:dc:26:d0:73:27:0d:bb:e2:bc:56:ab:03:2b:a9:c5:73:
         b9:c9:2d:a0:60:7d:f6:56:ce:52:4a:7b:5a:0b:1c:7a:b9:c3:
         02:63:05:69:65:0d:61:d1:96:1d:26:7e:3b:96:25:33:74:54:
         a3:42:74:cf:fa:d9:d7:77:b9:2a:f3:6f:c0:4c:5b:9f:3d:a7:
         6a:36:c8:61:21:08:a1:c7:42:50:89:47:07:f7:72:fc:ed:48:
         ab:81:de:0d:ea:9c:5a:82:b3:13:7a:64:6c:1d:9c:7e:30:db:
         1b:49:02:c5:e4:00:ef:48:e7:75:db:d1:37:6a:0f:4e:f6:97:
         78:44:d6:10:72:b9:4c:69:1d:5f:e8:b9:01:82:40:cf:90:e0:
         ad:a6:73:fd:15:d7:1d:8b:12:85:eb:16:73:99:7a:f5:3b:c4:
         19:37:a0:bd:b0:c5:be:e9:d9:6a:d6:d5:18:aa:69:6f:ac:ae:
         8b:19:85:b5:e7:f7:de:28:b8:ea:10:d7:80:58:53:37:77:7a:
         d6:b3:07:a4:d0:5f:d0:bb:16:c9:29:f0:e6:75:57:42:fc:e9:
         3d:ce:c9:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:59 2023 by rpki-client on console-ams.rpki-client.org