Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e37372e302f32342d3234203d3e203137343531.roa
File:                     3131372e3130322e37372e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          whHcxuHZwgb297iUhbOswQlgVs3qT8o3onipNpuyv50=
Subject key identifier:   53:7A:8B:54:14:3F:E6:09:7A:55:55:69:76:EE:54:6D:E4:42:ED:2D
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       78FDAB04BDA08B7D2268FDC7349A130B821AA661
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e37372e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:47 +0000
ROA not before:           Wed 29 Sep 2021 23:55:47 +0000
ROA not after:            Fri 30 Sep 2022 00:00:47 +0000
asID:                     17451
IP address blocks:        117.102.77.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:fd:ab:04:bd:a0:8b:7d:22:68:fd:c7:34:9a:13:0b:82:1a:a6:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:47 2021 GMT
            Not After : Sep 30 00:00:47 2022 GMT
        Subject: CN=3082010A0282010100BBDEE4A1A2AAED24745087D090A68C106EEF9C71116F07E42B27228BB66D52CF5B0DA7C281E727B102A8C65583D24A09F09D5B2ABE4F21444A76F668D2D24758DDEB67232815DD699510F6F87BFA8548609D9B1564E898B33C4D4AC86763D44A5E063C45316B2FAB48C5A6703C1B043F929A98B6A45CD415012ACAD64418ED7C3C2C31C78467C7C9367E04252B80201A817C2E94589A254545F2E556C810792BA2A9E8E3E9F4FC8F248F76EBED05FE0E91AF733E446449501A9A45C4809981FF521081E2C24E3A87378198AA09D916B2E8FFDC769D0A5626589A4C55EE35CAAAEF2C518639EAB3223083DC352A0768BD21FA93C8C30B3A36DCF59F0759E538790203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:de:e4:a1:a2:aa:ed:24:74:50:87:d0:90:a6:
                    8c:10:6e:ef:9c:71:11:6f:07:e4:2b:27:22:8b:b6:
                    6d:52:cf:5b:0d:a7:c2:81:e7:27:b1:02:a8:c6:55:
                    83:d2:4a:09:f0:9d:5b:2a:be:4f:21:44:4a:76:f6:
                    68:d2:d2:47:58:dd:eb:67:23:28:15:dd:69:95:10:
                    f6:f8:7b:fa:85:48:60:9d:9b:15:64:e8:98:b3:3c:
                    4d:4a:c8:67:63:d4:4a:5e:06:3c:45:31:6b:2f:ab:
                    48:c5:a6:70:3c:1b:04:3f:92:9a:98:b6:a4:5c:d4:
                    15:01:2a:ca:d6:44:18:ed:7c:3c:2c:31:c7:84:67:
                    c7:c9:36:7e:04:25:2b:80:20:1a:81:7c:2e:94:58:
                    9a:25:45:45:f2:e5:56:c8:10:79:2b:a2:a9:e8:e3:
                    e9:f4:fc:8f:24:8f:76:eb:ed:05:fe:0e:91:af:73:
                    3e:44:64:49:50:1a:9a:45:c4:80:99:81:ff:52:10:
                    81:e2:c2:4e:3a:87:37:81:98:aa:09:d9:16:b2:e8:
                    ff:dc:76:9d:0a:56:26:58:9a:4c:55:ee:35:ca:aa:
                    ef:2c:51:86:39:ea:b3:22:30:83:dc:35:2a:07:68:
                    bd:21:fa:93:c8:c3:0b:3a:36:dc:f5:9f:07:59:e5:
                    38:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:7A:8B:54:14:3F:E6:09:7A:55:55:69:76:EE:54:6D:E4:42:ED:2D
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e37372e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.102.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:61:02:44:21:77:5d:53:3e:50:15:1b:8e:c3:21:ca:8e:83:
         a7:4a:9f:57:07:af:54:3d:ab:dd:36:f2:79:d6:1f:9e:df:4b:
         8b:0d:89:0c:57:dd:86:31:8c:ca:a0:4d:3b:9c:78:98:18:7d:
         d2:82:34:72:70:a3:51:71:ee:48:b8:02:0f:f9:27:86:c1:43:
         1d:42:7f:98:26:bf:03:d1:2d:10:3e:85:12:9b:16:c7:d2:1b:
         82:7b:9e:d8:c7:58:de:89:f2:c4:f4:cc:f2:48:2e:bb:10:ed:
         bc:10:1c:7b:21:05:61:c5:d1:5d:c0:a6:41:5e:f9:ad:87:25:
         4d:1b:f8:cf:7c:5e:bf:92:f2:f1:9f:74:29:5b:df:d8:ea:ce:
         e6:61:0d:d6:83:16:85:ec:2b:f1:4c:88:41:fd:16:a5:bc:88:
         a8:94:9c:f5:e4:5e:d1:3c:49:15:14:95:92:61:93:aa:6d:ce:
         55:2b:f9:b3:e9:53:fa:4c:c8:14:5c:96:f4:13:c2:ed:e0:de:
         bb:00:ac:79:07:e7:b2:08:2c:8b:51:dd:f6:20:74:49:8a:1c:
         46:3a:c8:ef:68:c9:6e:a9:dc:74:36:6b:fa:fc:18:ca:2b:da:
         a2:bf:10:62:fa:dd:a2:47:61:52:78:35:28:ea:12:bb:64:f5:
         e3:e2:37:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:44 2023 by rpki-client on console-fra.rpki-client.org