Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e37382e302f32342d3234203d3e203137343531.roa
File:                     3131372e3130322e37382e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          HXnRYG7ZBrzm796i2Pfg/Y9Y8htAWXkamGzQuVfno4Q=
Subject key identifier:   AB:99:E7:1F:84:3F:EC:2E:65:61:26:AB:DF:30:2A:7C:52:E8:A3:16
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       31F67B5C7F7D47126272DC872131A99099B54F69
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e37382e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:01:02 +0000
ROA not before:           Wed 29 Sep 2021 23:56:02 +0000
ROA not after:            Fri 30 Sep 2022 00:01:02 +0000
asID:                     17451
IP address blocks:        117.102.78.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:f6:7b:5c:7f:7d:47:12:62:72:dc:87:21:31:a9:90:99:b5:4f:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:56:02 2021 GMT
            Not After : Sep 30 00:01:02 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:4a:f8:e5:be:45:e8:63:f8:81:bb:d7:4f:14:
                    29:c6:7c:ad:4b:2f:d7:c6:83:f7:69:42:53:bd:50:
                    8d:c1:a5:30:d9:37:24:de:c6:3c:3f:34:76:47:ae:
                    27:84:9d:72:2f:b1:fa:fd:76:81:b1:03:00:14:29:
                    b0:fa:33:35:b0:e0:ce:d3:1e:6d:86:6b:0c:bd:84:
                    cc:b5:fc:c2:3c:b2:66:32:bb:1d:13:1a:24:c4:d3:
                    0d:33:0d:f5:54:ec:90:e3:0f:e4:d6:55:87:a5:74:
                    bc:07:86:22:fc:fa:77:d1:ac:fb:9c:ec:6c:5d:95:
                    dd:f3:8c:61:07:7a:dd:72:f8:39:71:f5:8e:d2:e0:
                    28:58:d9:8d:e9:9e:71:33:2c:ff:b8:56:bf:15:3f:
                    b1:01:87:d7:29:fa:a3:1f:2b:08:1b:6b:35:12:86:
                    7d:90:83:7b:c8:18:4f:e3:9e:7f:6d:50:8e:e0:ec:
                    c2:b7:bd:64:a0:74:fe:1f:6a:6e:e8:9f:b5:75:bc:
                    9a:3d:2b:a2:87:21:c5:75:7a:94:28:b1:93:b4:96:
                    aa:98:16:d1:94:21:d1:26:ad:f9:c7:9e:f9:b9:10:
                    da:c2:6a:37:32:95:8b:e7:2d:86:20:c7:32:6e:77:
                    95:f8:d4:31:8a:cc:8c:c5:66:97:ba:ce:3d:2b:60:
                    8c:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:99:E7:1F:84:3F:EC:2E:65:61:26:AB:DF:30:2A:7C:52:E8:A3:16
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e37382e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.102.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:d4:94:d2:54:39:d8:48:61:c2:62:4e:c1:20:10:b4:8f:ac:
         91:85:46:df:eb:6c:6f:f2:de:65:36:b5:29:ac:35:0e:c9:e9:
         0a:f2:ae:da:5f:6f:2d:57:d8:d2:41:f1:f1:78:bf:67:01:bb:
         63:d4:91:84:27:86:1b:09:6a:50:84:75:ce:d4:83:21:9e:2f:
         75:91:f7:7e:c2:bc:b1:f7:c6:19:28:42:97:a6:ea:03:11:a1:
         f7:5d:31:6f:05:b4:25:97:6b:fd:7a:31:3a:9c:0b:ef:95:1d:
         7e:1c:53:c7:30:3d:35:9a:34:78:6d:a1:4d:77:fc:f1:84:c6:
         7f:70:63:87:b0:64:7c:1b:ce:94:12:92:39:ba:c3:d0:40:2d:
         c1:d5:4d:a5:cc:90:81:2e:d5:2c:38:13:7d:40:d0:7b:b5:32:
         a1:97:14:5a:de:83:6f:e5:45:33:91:51:b3:7a:44:3c:6e:8a:
         88:ed:e5:01:32:67:f5:f6:20:b6:9a:a6:85:7b:6d:d1:e1:d5:
         e6:c1:98:e0:1d:df:84:dd:01:fe:be:98:51:ed:ea:62:9f:6e:
         c8:43:bc:ab:39:c2:01:4c:fb:cb:8d:2c:94:5a:67:3a:77:f8:
         7d:35:95:7a:86:31:ed:b1:d8:1f:51:9a:3d:2b:fc:5a:bb:db:
         f0:39:76:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:44 2023 by rpki-client on console-fra.rpki-client.org