Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e3130372e302f32342d3234203d3e203137343531.roa
File:                     3131372e3130322e3130372e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          JqHHm0Mj2CqKG9li1wQlIRMkhySoXjLAmnW6vv0n4Qo=
Subject key identifier:   48:1E:D1:1A:C6:59:63:C2:BA:69:31:FD:BD:40:DB:31:13:23:2C:D2
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       69B998BC96A6D4287FD00EEBAD7B74441B510435
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e3130372e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:20 +0000
ROA not before:           Wed 29 Sep 2021 23:55:20 +0000
ROA not after:            Fri 30 Sep 2022 00:00:20 +0000
asID:                     17451
IP address blocks:        117.102.107.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:b9:98:bc:96:a6:d4:28:7f:d0:0e:eb:ad:7b:74:44:1b:51:04:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:20 2021 GMT
            Not After : Sep 30 00:00:20 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:c1:ab:14:86:ca:8f:42:2c:60:ad:56:e9:a0:
                    a2:d3:f3:25:47:57:5d:17:e3:36:25:b4:10:d8:93:
                    7a:1e:1a:9b:7b:45:9b:ff:b2:a4:87:77:a9:f4:57:
                    1a:be:d6:8a:ed:57:0b:73:1a:b7:39:db:08:f3:e4:
                    c4:91:a3:0d:0b:2a:fe:b8:bb:a6:35:13:a6:5f:eb:
                    7c:45:3d:2a:2e:97:2d:68:bd:62:bd:fd:99:f7:30:
                    03:39:97:e1:db:92:8c:f6:4f:9f:14:21:63:9d:75:
                    41:a5:15:17:86:d2:50:5c:5b:6d:73:fc:d0:6a:47:
                    75:4f:eb:9e:64:ff:59:33:36:b0:19:be:2a:11:ee:
                    18:be:2b:19:d6:b3:46:67:52:8b:49:d0:c7:c1:28:
                    ca:4b:36:27:6b:0b:9f:bc:6c:26:fd:f4:61:46:38:
                    c6:bc:0d:61:6d:af:c3:80:8d:4a:03:f6:6a:f8:a1:
                    0b:c1:25:04:07:db:3c:73:8a:92:c9:13:ea:62:6c:
                    2b:98:9e:c9:79:b8:3a:58:cb:5c:4c:d9:5b:68:06:
                    d9:ff:41:69:5b:59:9e:5f:6d:f6:f0:30:65:26:2a:
                    68:8f:e8:2a:56:8f:d1:6a:64:d0:f7:ef:ea:4b:b9:
                    f4:f0:62:80:d5:3c:49:b3:eb:7f:49:cc:e9:58:a2:
                    1b:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:1E:D1:1A:C6:59:63:C2:BA:69:31:FD:BD:40:DB:31:13:23:2C:D2
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e3130372e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.102.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:ad:08:78:fe:e8:0a:97:a1:9d:d6:42:56:66:b9:d8:a3:a1:
         9b:a4:24:3b:02:98:a1:89:ef:08:92:69:8d:d5:c3:f2:b8:54:
         18:50:28:d7:e0:30:9f:0e:5e:5d:a3:78:7b:22:95:9c:1f:9b:
         e2:9c:56:1d:5c:ea:bb:da:e1:5e:a4:b5:89:51:24:e8:f6:1f:
         a4:2f:cb:ff:d8:19:b7:92:3f:29:5e:50:8a:6c:e8:77:26:69:
         be:e9:97:9f:3d:9c:50:94:db:cf:99:4d:08:00:f9:b8:8c:a6:
         6c:3d:76:b6:60:5e:f7:a0:91:07:72:30:00:0c:3d:36:0b:2e:
         a0:56:3f:57:ff:f7:23:5a:53:ef:2e:b8:62:44:f1:aa:7d:24:
         75:44:7b:f9:7f:af:63:af:0b:ef:b7:1b:07:a6:78:7c:d2:84:
         d3:08:dd:91:de:2c:52:23:f4:ee:6f:03:a0:b6:8f:4b:9f:13:
         db:e7:ee:2d:04:14:f3:2e:8b:c0:f7:ba:97:44:97:a2:41:17:
         35:20:22:3e:23:bc:4e:97:d5:4f:56:4f:8e:96:54:15:2d:2e:
         ca:30:fb:e8:63:f1:78:ce:10:f7:0a:c6:10:d4:fb:0f:15:e6:
         26:35:2e:c9:d1:ba:cd:7e:79:50:04:61:05:a9:62:6c:9d:48:
         0b:f9:14:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:44 2023 by rpki-client on console-fra.rpki-client.org