Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e38302e302f32342d3234203d3e203137343531.roa
File:                     3131372e3130322e38302e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          UybNQOcopiVfMYhrkTnqcG3GLc27M1lkMkGDprgS1Vo=
Subject key identifier:   10:E2:7F:4A:B5:9C:90:93:27:A6:5B:5C:CB:18:73:7E:A3:50:86:E2
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       15E2B8E3C3332B42261404CE0BA3AC71A8344E4D
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e38302e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:45 +0000
ROA not before:           Wed 29 Sep 2021 23:55:45 +0000
ROA not after:            Fri 30 Sep 2022 00:00:45 +0000
asID:                     17451
IP address blocks:        117.102.80.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:e2:b8:e3:c3:33:2b:42:26:14:04:ce:0b:a3:ac:71:a8:34:4e:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:45 2021 GMT
            Not After : Sep 30 00:00:45 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:81:b2:e8:88:e9:99:06:57:fb:39:e8:a8:45:
                    dd:f4:fd:97:2d:d3:5c:6b:09:26:4c:d9:66:f4:14:
                    92:e2:d9:c0:99:2f:12:3a:f7:c2:80:c2:3d:7c:2a:
                    6e:0e:c3:98:2b:d9:9b:1e:2e:2b:9f:c0:d9:4d:b6:
                    ad:9d:ea:db:1c:ec:c4:f4:b8:82:a6:3f:9b:7e:c5:
                    56:f2:5a:54:ff:2a:06:a4:e8:38:6e:a1:c9:83:94:
                    96:61:78:9e:2c:d2:94:e9:b0:b5:5f:9a:a8:89:0f:
                    01:e6:31:43:a0:df:e7:8d:cc:18:86:ad:c8:cf:52:
                    d8:c7:8e:f4:2e:f3:6a:70:3f:7e:91:18:66:45:b2:
                    d7:16:99:6b:e5:68:63:4d:20:13:e9:33:2a:26:d0:
                    65:09:24:4d:c3:c1:74:0d:79:72:ac:7b:54:85:c9:
                    2c:12:f5:1f:70:52:ee:6b:2d:0e:04:b3:76:64:23:
                    a3:d4:d9:72:fe:95:a8:61:e0:6b:0f:01:71:bc:f1:
                    39:28:90:7b:3f:a3:c2:a4:c7:2f:7f:82:38:f7:d5:
                    c6:d6:91:81:82:73:c1:3b:ca:d1:ff:ef:01:e7:49:
                    c0:13:dc:93:90:95:b0:c1:54:d1:91:cc:f1:54:ef:
                    fb:47:c4:b3:46:ae:5b:aa:f8:d6:0b:f7:b9:d9:f5:
                    6a:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:E2:7F:4A:B5:9C:90:93:27:A6:5B:5C:CB:18:73:7E:A3:50:86:E2
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e38302e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.102.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:29:28:9c:df:cf:a4:cd:db:e8:51:2a:2e:c8:51:10:b7:b3:
         49:08:bc:25:f8:f7:54:2a:23:d4:63:c0:8a:9f:5b:95:70:e7:
         fd:cf:1b:5e:c0:75:6c:23:2d:de:8e:41:58:74:b2:85:5b:d4:
         eb:67:55:40:5d:96:c1:c5:ac:6f:97:4a:58:46:27:c8:14:2e:
         55:a6:5b:bc:d6:8c:ff:df:14:f3:7c:89:78:8f:54:9a:b0:62:
         40:c1:a1:19:f1:10:e7:0c:95:6a:7d:6e:c2:a1:c4:8b:7c:04:
         11:5e:b8:83:af:33:4e:4b:06:ca:3e:47:18:80:7b:e0:85:dc:
         eb:9e:3b:90:8f:e3:aa:59:ef:95:a5:57:43:a6:d0:e2:e1:ae:
         44:4b:a3:ce:9e:72:c2:68:f3:f8:81:04:27:e0:69:9f:ac:7a:
         80:f7:f0:d3:23:2c:b7:4a:aa:4e:0c:bb:69:f6:ca:83:ca:83:
         0f:3e:3e:f6:3a:3d:a4:40:27:84:c0:96:83:a1:a5:9b:5b:15:
         d1:0f:d3:b7:e6:78:9a:6e:71:46:bd:9b:cb:dd:53:1d:cd:8e:
         62:29:fc:73:19:c1:25:9a:13:79:27:18:6e:2e:4e:af:69:ca:
         f0:d8:54:fa:d9:96:db:72:d3:77:97:17:81:66:65:39:60:cb:
         26:dc:86:49
-----BEGIN CERTIFICATE-----
MIIHJDCCBgygAwIBAgIUFeK448MzK0ImFATOC6Oscag0Tk0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJBNDE3
RjcyOERCRjAeFw0yMTA5MjkyMzU1NDVaFw0yMjA5MzAwMDAwNDVaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkQ4MUIyRTg4OEU5OTkwNjU3
RkIzOUU4QTg0NURERjRGRDk3MkREMzVDNkIwOTI2NENEOTY2RjQxNDkyRTJEOUMw
OTkyRjEyM0FGN0MyODBDMjNEN0MyQTZFMEVDMzk4MkJEOTlCMUUyRTJCOUZDMEQ5
NERCNkFEOURFQURCMUNFQ0M0RjRCODgyQTYzRjlCN0VDNTU2RjI1QTU0RkYyQTA2
QTRFODM4NkVBMUM5ODM5NDk2NjE3ODlFMkNEMjk0RTlCMEI1NUY5QUE4ODkwRjAx
RTYzMTQzQTBERkU3OERDQzE4ODZBREM4Q0Y1MkQ4Qzc4RUY0MkVGMzZBNzAzRjdF
OTExODY2NDVCMkQ3MTY5OTZCRTU2ODYzNEQyMDEzRTkzMzJBMjZEMDY1MDkyNDRE
QzNDMTc0MEQ3OTcyQUM3QjU0ODVDOTJDMTJGNTFGNzA1MkVFNkIyRDBFMDRCMzc2
NjQyM0EzRDREOTcyRkU5NUE4NjFFMDZCMEYwMTcxQkNGMTM5Mjg5MDdCM0ZBM0My
QTRDNzJGN0Y4MjM4RjdENUM2RDY5MTgxODI3M0MxM0JDQUQxRkZFRjAxRTc0OUMw
MTNEQzkzOTA5NUIwQzE1NEQxOTFDQ0YxNTRFRkZCNDdDNEIzNDZBRTVCQUFGOEQ2
MEJGN0I5RDlGNTZBNDMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAvYGy6IjpmQZX+znoqEXd9P2XLdNcawkmTNlm9BSS4tnAmS8SOvfC
gMI9fCpuDsOYK9mbHi4rn8DZTbatnerbHOzE9LiCpj+bfsVW8lpU/yoGpOg4bqHJ
g5SWYXieLNKU6bC1X5qoiQ8B5jFDoN/njcwYhq3Iz1LYx470LvNqcD9+kRhmRbLX
Fplr5WhjTSAT6TMqJtBlCSRNw8F0DXlyrHtUhcksEvUfcFLuay0OBLN2ZCOj1Nly
/pWoYeBrDwFxvPE5KJB7P6PCpMcvf4I499XG1pGBgnPBO8rR/+8B50nAE9yTkJWw
wVTRkczxVO/7R8SzRq5bqvjWC/e52fVqQwIDAQABo4ICMjCCAi4wHQYDVR0OBBYE
FBDif0q1nJCTJ6ZbXMsYc36jUIbiMB8GA1UdIwQYMBaAFKxVVEe6YsORB/Fr9XL4
KkF/co2/MA4GA1UdDwEB/wQEAwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzk5M2YzNTAtYjc1Ni00OTE2LThk
ODQtNDg0ZjAyNWRmZmNjLzAvQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJB
NDE3RjcyOERCRi5jcmwwdAYIKwYBBQUHAQEEaDBmMGQGCCsGAQUFBzAChlhyc3lu
YzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8yL0FDNTU1NDQ3
QkE2MkMzOTEwN0YxNkJGNTcyRjgyQTQxN0Y3MjhEQkYuY2VyMIGiBggrBgEFBQcB
CwSBlTCBkjCBjwYIKwYBBQUHMAuGgYJyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby8zOTkzZjM1MC1iNzU2LTQ5MTYtOGQ4NC00ODRmMDI1ZGZmY2MvMC8z
MTMxMzcyZTMxMzAzMjJlMzgzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzcz
NDM1MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBAB1ZlAwDQYJKoZIhvcNAQELBQADggEBAFUpKJzfz6TN
2+hRKi7IURC3s0kIvCX491QqI9RjwIqfW5Vw5/3PG17AdWwjLd6OQVh0soVb1Otn
VUBdlsHFrG+XSlhGJ8gULlWmW7zWjP/fFPN8iXiPVJqwYkDBoRnxEOcMlWp9bsKh
xIt8BBFeuIOvM05LBso+RxiAe+CF3OueO5CP46pZ75WlV0Om0OLhrkRLo86ecsJo
8/iBBCfgaZ+seoD38NMjLLdKqk4Mu2n2yoPKgw8+PvY6PaRAJ4TAloOhpZtbFdEP
07fmeJpucUa9m8vdUx3NjmIp/HMZwSWaE3knGG4uTq9pyvDYVPrZltty03eXF4Fm
ZTlgyybchkk=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:44 2023 by rpki-client on console-fra.rpki-client.org