Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e3131392e302f32342d3234203d3e203137343531.roa
File:                     3131372e3130322e3131392e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          TC1Ih34GwEHi8MyC/M/2+tlrL18r/nTXCEFruLq8O0o=
Subject key identifier:   C1:A3:65:B4:9C:4E:9D:68:0A:2A:BC:9A:81:2E:44:37:B4:F3:A7:BB
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       29B6448BACAC2CE0F19C9766F36E111EBCC6971F
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e3131392e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:01:08 +0000
ROA not before:           Wed 29 Sep 2021 23:56:08 +0000
ROA not after:            Fri 30 Sep 2022 00:01:08 +0000
asID:                     17451
IP address blocks:        117.102.119.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:b6:44:8b:ac:ac:2c:e0:f1:9c:97:66:f3:6e:11:1e:bc:c6:97:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:56:08 2021 GMT
            Not After : Sep 30 00:01:08 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ea:92:35:32:5a:33:a0:52:a6:38:73:c9:c1:
                    03:f2:86:86:a6:2f:57:c8:ac:77:ff:1d:63:cc:00:
                    8a:6c:4a:f4:cc:45:46:b6:7d:65:3c:fa:23:7c:5d:
                    c8:80:f2:27:75:3f:fe:ee:78:53:ca:04:7b:e6:52:
                    21:3d:c2:71:ed:d0:77:81:ed:c9:e2:98:4f:7f:1f:
                    4c:cb:1a:98:2c:94:07:67:03:b3:d2:8c:2a:05:ec:
                    d6:e1:6d:0a:cd:ee:7a:09:c7:5c:61:e0:cf:c7:e0:
                    95:a2:a1:24:c4:6a:07:1d:79:1f:22:a3:da:d0:12:
                    eb:59:1e:19:bb:bf:12:da:a0:18:e3:f8:af:91:03:
                    d4:13:40:07:68:35:7f:d7:a8:98:14:60:6e:03:f4:
                    21:10:f6:7a:16:8d:2c:0c:5e:56:e2:e0:6a:09:40:
                    ef:cc:59:52:a1:a5:37:a8:56:d7:98:3a:be:fc:92:
                    87:c8:0d:4a:b5:14:c5:db:47:e8:b6:a3:e9:56:19:
                    56:d2:07:9a:a0:f0:f5:bc:54:ac:a1:b1:dc:8c:90:
                    fc:ac:43:e6:a8:dc:da:76:af:88:20:d0:89:77:9f:
                    63:73:43:67:eb:3c:d0:df:98:d8:b0:f8:c2:1b:43:
                    d3:0f:05:bb:c9:28:39:d7:04:6d:de:c7:fc:41:9d:
                    e1:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:A3:65:B4:9C:4E:9D:68:0A:2A:BC:9A:81:2E:44:37:B4:F3:A7:BB
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e3131392e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.102.119.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:89:53:fb:82:1f:ff:fa:41:50:e7:5b:9b:fc:b7:ce:d1:72:
         5b:98:48:4b:b1:fb:b2:a4:76:7a:52:df:57:25:b4:aa:98:e5:
         7f:b7:01:31:a8:6f:74:f1:a4:da:2c:ee:06:9e:90:c2:9a:10:
         c4:2c:31:9f:17:6c:2e:1b:e2:b1:2a:e8:c1:85:5c:d0:20:f5:
         71:b2:dd:71:df:dd:63:47:50:75:70:8a:54:02:50:0b:ef:8c:
         21:cd:3b:62:af:4b:7a:1c:59:bc:3b:11:3c:e7:6a:bd:31:93:
         85:60:84:ae:49:a1:1f:9b:be:b6:db:d9:c3:0c:3b:44:15:50:
         15:d0:fd:bc:20:e2:a6:ea:74:35:86:3f:43:72:b3:ec:85:7e:
         ac:19:3e:e9:d3:f7:83:7e:40:5a:57:c4:2c:f0:05:9e:48:99:
         e5:32:63:2a:47:89:cf:09:7f:ce:b8:56:73:f7:7e:ed:d8:fa:
         79:10:e0:fc:eb:51:51:e3:70:f0:f8:c2:ee:a1:72:e5:80:e4:
         16:0d:95:e8:1e:6b:a4:d1:b8:80:bf:12:7a:86:ba:e7:e8:88:
         98:bc:e2:7b:88:6b:df:f5:d3:c2:01:75:af:1c:d1:24:e9:d2:
         fe:06:7f:21:e3:08:1b:24:fe:50:8d:b4:fa:3d:6d:b4:84:37:
         01:dd:14:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:44 2023 by rpki-client on console-fra.rpki-client.org