Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e3130342e302f32342d3234203d3e203137343531.roa
File:                     3131372e3130322e3130342e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          vdrfguqpmpVrLFr2zjJjJVUyhY5xFemC9QGyHgrwOkI=
Subject key identifier:   74:D1:8A:28:F5:27:EA:E2:07:9E:8E:BF:61:86:E7:5B:2A:F0:8A:62
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       44D4491C4BAB13A5639BCDA8BC7203709CCE74F7
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e3130342e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:36 +0000
ROA not before:           Wed 29 Sep 2021 23:55:36 +0000
ROA not after:            Fri 30 Sep 2022 00:00:36 +0000
asID:                     17451
IP address blocks:        117.102.104.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:d4:49:1c:4b:ab:13:a5:63:9b:cd:a8:bc:72:03:70:9c:ce:74:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:36 2021 GMT
            Not After : Sep 30 00:00:36 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:eb:47:dc:a9:7b:2c:84:37:85:55:b1:09:2a:
                    26:da:8f:65:e4:94:3b:6d:49:6c:23:59:2d:7e:8d:
                    37:48:86:06:7b:08:49:47:2f:09:54:f5:77:d2:2f:
                    da:91:2c:81:56:8c:81:cd:49:dc:4d:87:f5:5a:b7:
                    ff:66:8a:67:2d:0f:53:a5:13:5f:41:58:6c:44:9a:
                    36:be:f6:38:15:6f:51:1a:ae:5a:da:92:c2:ee:0f:
                    f8:95:8f:49:18:6e:26:1f:36:0d:a9:d2:bf:50:8a:
                    15:59:42:b0:fe:d4:5a:93:b5:df:b1:d9:78:97:d0:
                    40:45:dd:d3:92:cc:3d:11:60:74:da:34:ba:30:53:
                    20:36:ae:7b:56:46:75:68:cd:21:30:36:5d:fa:7c:
                    0a:8d:ec:25:91:4e:eb:ea:2f:4c:aa:27:55:ce:91:
                    cb:2c:47:86:a9:f8:f4:34:ee:f1:bc:56:83:ed:c6:
                    48:57:30:ab:7b:a7:3e:51:e2:f2:4a:9e:14:ad:42:
                    90:c8:f4:24:e2:c7:fe:38:a8:f4:17:23:67:36:dd:
                    55:12:4b:0b:13:b3:96:7b:ba:fd:d1:09:ab:71:11:
                    79:0d:24:27:14:e7:23:01:a4:6a:46:1a:34:05:ab:
                    26:21:87:ca:f9:1c:d5:bd:b0:5f:d4:1a:91:62:d3:
                    9a:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:D1:8A:28:F5:27:EA:E2:07:9E:8E:BF:61:86:E7:5B:2A:F0:8A:62
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e3130342e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.102.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:fe:b5:97:e7:6e:ea:87:02:d4:96:9f:9c:d3:5d:8d:64:4c:
         7e:a7:74:05:38:5e:81:f9:8d:f4:c2:ac:6d:05:f5:f8:c5:4f:
         65:49:09:d1:03:13:1d:96:1d:29:dc:c8:c0:ae:0b:b1:e3:24:
         f4:84:a5:04:de:41:c8:f1:12:19:b9:3c:5b:29:4f:49:12:7e:
         54:08:c4:27:6d:bd:7e:d5:af:56:d8:0b:b1:63:1b:a8:12:92:
         13:3e:16:df:0c:d9:2a:b2:df:c2:72:74:7e:6a:1a:33:71:a6:
         fd:a8:6c:6b:82:f0:9d:91:bf:12:c5:ea:80:0a:f4:63:f5:8d:
         07:c9:01:69:37:a4:bd:ab:34:d0:a5:ce:68:f4:cc:2a:8b:cc:
         46:fb:c8:09:76:de:19:7e:ea:6c:89:1d:f2:36:a3:a3:9b:81:
         7a:05:2c:53:49:dd:e2:86:5b:de:bf:88:c4:a1:1b:22:e5:c6:
         6b:ba:94:b3:c1:2d:b2:bc:0c:7c:5a:b7:b3:ea:93:d3:69:86:
         36:7a:ff:07:f9:38:3c:4c:35:6b:b0:76:5f:b2:bb:2e:3a:ba:
         33:be:fb:82:13:a5:e9:a4:e2:94:cd:76:09:d9:07:10:4f:86:
         bb:e4:f6:85:bc:6f:f7:ee:b7:9e:c5:8f:b5:5e:3a:0d:55:59:
         b8:8c:f8:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:44 2023 by rpki-client on console-fra.rpki-client.org