Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e3131362e302f32342d3234203d3e203137343531.roa
File:                     3131372e3130322e3131362e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          5J8+ZHbMT8IEGo4IedKB9LI0SlVD2YE2PSa/5yr/kpA=
Subject key identifier:   34:16:7C:72:CF:D4:58:EF:C7:4B:5B:07:5A:CB:F2:57:BE:1E:5E:F6
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       641B4A45BFE9B3F173503675DC29F14D6ADBF494
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e3131362e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:01:16 +0000
ROA not before:           Wed 29 Sep 2021 23:56:16 +0000
ROA not after:            Fri 30 Sep 2022 00:01:16 +0000
asID:                     17451
IP address blocks:        117.102.116.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:1b:4a:45:bf:e9:b3:f1:73:50:36:75:dc:29:f1:4d:6a:db:f4:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:56:16 2021 GMT
            Not After : Sep 30 00:01:16 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:d2:03:67:bc:a9:cb:1e:80:df:25:16:87:d2:
                    1f:49:ef:96:51:7f:78:10:ce:5d:0c:cb:4f:dd:53:
                    98:ab:82:3c:0a:3a:ed:b9:64:fb:76:5b:b3:0e:84:
                    e4:b8:75:dc:f3:70:f8:dd:23:fb:0a:12:41:2e:bd:
                    cb:2e:48:0a:ba:41:f8:53:99:47:ec:fa:9f:61:02:
                    c7:c3:33:d5:4a:8f:c2:2b:22:38:f9:84:17:88:de:
                    e7:93:c1:4d:61:be:94:2b:36:94:af:c2:48:86:9c:
                    f1:da:cd:53:86:f4:98:d9:f5:6d:e1:8b:97:44:c1:
                    36:60:f6:b7:eb:b6:6b:bc:18:8c:32:8a:c6:7c:6e:
                    11:ea:8a:41:4e:25:09:42:96:00:8c:43:fc:bb:25:
                    f3:69:a0:c1:19:f0:41:26:ca:d5:6e:82:70:81:05:
                    4a:e0:28:0c:51:fb:0b:60:7e:2f:88:19:92:84:a7:
                    00:ed:a6:61:ac:6e:e3:54:0b:8d:2d:12:c4:92:81:
                    c7:2c:b1:27:48:15:0e:24:3d:0f:11:69:8a:21:cb:
                    dc:e5:1b:ce:fa:4b:d8:ed:c5:58:75:7f:0b:1e:60:
                    48:26:d3:8d:1b:40:33:99:09:2e:8a:8c:00:93:5b:
                    6e:d7:9b:f3:f1:4e:aa:80:3b:de:9d:1f:38:ec:34:
                    00:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:16:7C:72:CF:D4:58:EF:C7:4B:5B:07:5A:CB:F2:57:BE:1E:5E:F6
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e3131362e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.102.116.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:99:76:c5:a0:50:20:48:6a:bc:73:77:af:3e:31:fd:72:20:
         3c:1e:0d:cd:98:4c:ea:15:e9:da:6d:62:02:f5:6c:c3:d9:0e:
         48:9d:d8:e5:47:0f:d4:7e:1d:f5:b4:70:0c:f0:8a:f1:84:d5:
         ae:aa:f7:ad:93:61:b4:28:a4:cd:62:e7:9e:03:4f:e4:b3:5f:
         bf:c6:80:b6:7e:09:f7:e6:08:d2:71:86:1b:a6:eb:64:c2:c9:
         24:a0:b4:a9:d3:36:4c:f5:2e:05:95:72:0c:f7:9f:dd:1f:48:
         0f:4c:d3:d6:14:2e:8d:30:97:7d:31:ce:86:0e:24:a6:71:8e:
         0b:a1:a0:c3:24:5b:00:ed:c5:2a:95:a9:cc:0f:73:38:a4:25:
         37:be:e4:b4:c0:b3:31:75:c9:66:48:e4:76:86:16:af:46:db:
         30:44:ee:2b:d0:c7:46:74:d7:2a:ac:92:be:07:8a:b3:bd:d2:
         cd:7b:54:c4:2a:6a:f3:33:07:08:45:c8:1f:d8:7e:b2:49:57:
         6d:b0:68:dd:91:00:17:62:0a:36:62:f2:67:cb:2d:c9:71:7b:
         ec:bc:65:f1:1b:00:ff:19:72:c9:7e:87:57:87:fc:2a:93:ce:
         3c:87:7d:9b:f0:be:9c:02:ff:ff:7c:a2:8f:20:20:f3:b6:e1:
         90:9f:c9:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:44 2023 by rpki-client on console-fra.rpki-client.org