Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e3132302e302f32342d3234203d3e203137343531.roa
File:                     3131372e3130322e3132302e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          nH5pk9OuCOEinq+ksO4UIKyfxGympoFlLnrjJHz4GCI=
Subject key identifier:   CC:96:96:C3:7B:85:83:E4:5B:BD:20:47:7B:ED:9C:D5:05:FE:CB:2B
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       1CC8ADCDFC0D82290DDBBAEF74D7BDE21C8F52AE
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e3132302e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:16 +0000
ROA not before:           Wed 29 Sep 2021 23:55:16 +0000
ROA not after:            Fri 30 Sep 2022 00:00:16 +0000
asID:                     17451
IP address blocks:        117.102.120.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:c8:ad:cd:fc:0d:82:29:0d:db:ba:ef:74:d7:bd:e2:1c:8f:52:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:16 2021 GMT
            Not After : Sep 30 00:00:16 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:5c:0f:75:e0:c9:e3:df:95:ec:4e:23:b5:3e:
                    d4:8e:8b:16:fb:d3:dc:c5:5f:38:ab:f7:30:13:49:
                    7c:a4:80:63:ad:d4:58:e2:a3:a6:0a:a2:2b:d9:22:
                    9d:f9:c8:18:8b:f4:23:13:9e:13:1a:28:7d:95:54:
                    46:d0:00:9a:1c:68:85:ff:84:04:8f:f9:53:7e:b8:
                    83:15:1b:82:91:f0:e3:93:b6:03:9b:c9:96:03:c4:
                    73:52:e8:bb:c5:0a:9e:71:27:82:0a:d5:af:21:4a:
                    9c:b9:ae:62:6c:66:c2:1a:c4:89:bb:17:c8:a6:a2:
                    0e:eb:97:cb:0a:2b:16:7d:52:5b:4e:c4:8e:56:10:
                    6c:6f:f8:b4:d6:25:18:32:4a:bc:dd:c7:5a:b2:a9:
                    a7:51:c3:9d:a6:6a:c6:ca:fd:3f:87:d1:63:8a:54:
                    d4:0b:86:72:31:32:e7:4e:12:57:0a:75:b3:77:04:
                    67:3a:d1:8f:13:05:8d:ed:70:3d:1a:db:20:0b:73:
                    d4:c2:01:3a:d1:7e:8c:ae:91:42:c9:0c:b2:eb:23:
                    8c:59:00:bc:35:72:3e:a3:2f:c5:ba:68:8f:4e:bf:
                    7a:4d:68:07:97:d4:ff:e8:e3:a3:85:bf:e8:4a:8c:
                    46:5a:72:47:42:d8:6e:6f:ad:3e:9c:8a:4d:a0:6b:
                    da:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:96:96:C3:7B:85:83:E4:5B:BD:20:47:7B:ED:9C:D5:05:FE:CB:2B
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e3132302e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.102.120.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8c:8c:b7:e7:65:4f:2c:48:c5:f4:db:6e:35:4a:bf:77:84:4f:
         65:d4:87:c6:b8:87:77:ed:d8:91:91:79:a4:3a:f9:6e:ce:8c:
         ec:30:8c:d2:bb:14:a2:3c:ac:2d:ad:84:25:c3:b9:c3:8a:06:
         81:2c:a4:be:8c:be:6c:a0:89:4b:75:31:d6:ff:c0:b2:a4:17:
         50:93:4d:c4:ba:00:31:de:90:b6:45:6e:21:5f:bc:23:b7:7b:
         e9:20:69:1e:5b:68:2b:84:38:6e:4b:94:2e:03:a7:a4:b2:cd:
         af:d8:76:2e:fc:16:19:46:d2:cd:b9:b0:2c:a4:5b:f0:aa:ff:
         1e:30:86:4f:c4:8f:cc:62:41:46:16:86:55:f9:76:80:1a:3e:
         e8:71:08:f1:a4:b7:6e:1f:f6:71:6d:d1:cf:78:e2:92:3f:03:
         0c:84:cc:15:24:a1:88:9c:cc:9e:b1:fa:46:d6:2d:76:fa:5e:
         2e:47:59:af:16:4c:47:c4:80:49:c2:ab:97:9f:8d:94:bc:49:
         8b:c9:28:bc:09:85:1f:fe:f8:85:c5:3d:2c:7b:88:72:06:74:
         20:f5:18:87:fc:a8:28:a1:19:6a:c0:e1:b9:6f:0a:c7:ef:28:
         f6:44:1c:3f:06:4f:1c:d5:c3:c3:9f:03:d6:57:dd:fd:69:a0:
         34:2c:a2:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:44 2023 by rpki-client on console-fra.rpki-client.org