Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e36342e302f32342d3234203d3e203137343531.roa
File:                     3131372e3130322e36342e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          intodgvWyt+nbiMqO3HoPm22/xgGHUVi6wBO5+sK8HI=
Subject key identifier:   54:14:2D:D0:6B:9E:D5:23:BA:3C:E8:84:5D:25:0B:A8:74:09:F3:F1
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       646BEA82B970A1E6AD877AA3CD3E5B15D29DD8E2
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e36342e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:53 +0000
ROA not before:           Wed 29 Sep 2021 23:55:53 +0000
ROA not after:            Fri 30 Sep 2022 00:00:53 +0000
asID:                     17451
IP address blocks:        117.102.64.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:6b:ea:82:b9:70:a1:e6:ad:87:7a:a3:cd:3e:5b:15:d2:9d:d8:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:53 2021 GMT
            Not After : Sep 30 00:00:53 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:ef:22:cc:fb:79:e3:0e:2a:a3:51:35:12:b6:
                    f6:5c:67:f1:2d:1b:c7:12:d9:f0:82:be:82:58:b1:
                    ee:72:7f:ae:07:af:c6:8d:2b:6b:11:ff:c1:9a:aa:
                    40:e7:a0:a6:19:3a:74:74:c8:92:cc:b6:29:0c:ab:
                    74:6c:5c:c1:17:fd:ef:6b:cd:61:0e:e1:b6:5b:b5:
                    a5:17:a8:17:e2:2f:58:a4:c0:d5:e7:44:bd:12:83:
                    58:27:7b:a5:38:23:66:31:14:2e:38:eb:18:3a:14:
                    71:ab:e5:13:98:7e:50:9a:42:d0:eb:44:b1:10:73:
                    37:3b:4c:fb:e7:39:f9:63:21:ec:8d:40:d7:31:10:
                    72:ec:91:ad:1b:87:9a:17:3f:2f:7d:3f:fa:01:4d:
                    f8:68:07:c5:02:0b:a0:5f:ad:6e:2f:3b:2a:c3:b3:
                    6c:46:1a:93:58:9f:cb:84:08:79:ca:a1:8b:76:e3:
                    3d:cc:19:de:19:b3:be:b7:b7:ec:7a:7d:ff:3f:94:
                    ff:99:ec:cf:fc:26:58:9b:30:b2:68:6b:18:c4:37:
                    0b:53:24:99:e2:6e:f2:5c:b7:b2:06:33:1c:c3:0e:
                    d9:a3:5b:4c:18:a4:b9:f6:b5:04:39:c6:72:3e:6b:
                    32:e5:3a:96:e1:79:1a:71:e1:80:08:91:a8:e5:7a:
                    ca:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:14:2D:D0:6B:9E:D5:23:BA:3C:E8:84:5D:25:0B:A8:74:09:F3:F1
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e36342e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.102.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         62:27:18:df:ee:07:3b:57:e8:a3:6b:44:9b:80:9a:39:b8:76:
         af:11:a2:f4:c8:d6:5e:f8:03:48:5c:23:ba:4c:a1:64:f1:eb:
         bb:7b:5f:85:83:69:62:a0:d9:95:4a:87:be:e7:84:8c:16:1b:
         99:9d:2e:1d:af:1a:49:3c:8f:7a:c8:47:a9:d2:9f:b1:75:28:
         c3:7c:70:ad:d9:e8:2e:00:06:a0:ef:47:ed:42:1f:36:a8:3e:
         53:36:98:3b:3a:94:36:f9:a4:5a:97:72:7a:09:a2:16:ac:71:
         4d:a4:57:e8:72:ed:d8:c2:c6:cc:e3:90:de:f3:5c:80:b8:ac:
         20:ae:9c:32:dc:bf:b4:b4:07:19:bc:d4:d4:10:d9:04:f4:40:
         3b:8d:d1:60:21:90:85:42:86:e6:94:98:5d:79:b7:19:cd:09:
         f9:17:96:a0:a4:77:60:b4:21:c3:1a:90:27:46:f0:2f:77:bd:
         91:a1:7b:d9:98:49:50:0d:fb:ff:a3:cf:65:82:da:f2:54:af:
         85:69:ca:1f:17:ec:0d:a8:2a:ee:6c:81:15:7b:0b:b5:1b:e1:
         d1:84:9f:b4:b0:cf:68:08:74:d0:86:22:79:c6:55:10:ee:df:
         55:9b:e7:ad:c3:5e:49:c7:31:ab:33:34:d3:a6:4e:f2:09:5f:
         34:aa:9e:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:44 2023 by rpki-client on console-fra.rpki-client.org