Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e39362e302f32342d3234203d3e203137343531.roa
File:                     3131372e3130322e39362e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          dmyofCCQZTmcHUm1HewL6/NWycWxvWYI4IEfsQnmb/I=
Subject key identifier:   E5:AD:37:EA:C4:8A:A6:EB:31:C5:3D:82:71:AF:5E:A8:49:1F:A5:80
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       64762BDF6425762CE574C1F5598AC388FA387B80
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e39362e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:01:14 +0000
ROA not before:           Wed 29 Sep 2021 23:56:14 +0000
ROA not after:            Fri 30 Sep 2022 00:01:14 +0000
asID:                     17451
IP address blocks:        117.102.96.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:76:2b:df:64:25:76:2c:e5:74:c1:f5:59:8a:c3:88:fa:38:7b:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:56:14 2021 GMT
            Not After : Sep 30 00:01:14 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:e5:73:01:9b:88:c5:17:34:04:c8:c4:20:dd:
                    f2:bc:e8:82:ae:86:8f:0b:66:a0:d5:c7:63:b8:f3:
                    61:20:26:94:95:18:f4:27:50:86:67:86:5e:05:11:
                    7a:d6:8e:2c:8c:c4:83:7f:db:65:7e:00:79:f2:b5:
                    d2:8e:37:ec:70:9d:5b:fe:0d:d6:4b:42:db:91:60:
                    bf:5a:26:bb:88:c9:5c:44:c9:74:37:ee:ea:f1:95:
                    38:2e:4e:5c:f2:b6:50:a5:f4:99:af:71:29:2c:ea:
                    19:33:d1:c4:69:4c:46:93:b9:e0:2a:3b:09:11:dc:
                    2c:16:04:36:1c:fc:84:f8:e0:0e:bc:b2:d3:9e:28:
                    97:a6:56:d0:5e:c5:51:ac:66:3e:94:eb:1f:81:ee:
                    bd:3b:57:1f:f4:c0:db:56:8c:98:1c:b2:40:fc:7b:
                    99:ab:e0:76:a4:24:49:a2:60:ce:bf:b9:20:3a:78:
                    bd:b2:08:64:3e:6f:38:d6:41:7b:b4:ea:b3:99:cc:
                    68:a0:b6:aa:d2:e9:0a:d0:dd:5f:d6:d6:da:dd:73:
                    ae:d9:aa:f1:e1:de:36:9b:d5:77:ac:95:32:b4:86:
                    fd:33:ca:70:46:2e:a2:51:22:3a:82:37:a5:2f:62:
                    8c:f5:3b:e7:ee:b2:26:0f:dc:63:bb:99:a3:66:ed:
                    b8:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:AD:37:EA:C4:8A:A6:EB:31:C5:3D:82:71:AF:5E:A8:49:1F:A5:80
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e39362e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.102.96.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:66:7e:54:42:8c:77:d3:55:fe:78:8f:10:24:56:c8:f9:e5:
         f2:8b:f0:19:99:9c:96:39:9d:e3:00:a6:de:97:f7:44:fe:a7:
         b9:06:3a:24:26:a7:71:3a:49:60:bc:99:61:8a:c8:55:1c:33:
         77:ef:2b:41:94:4b:bf:70:ff:17:4d:e5:2d:31:fd:35:8e:c2:
         80:01:b6:4f:2f:80:84:b8:2a:b6:91:d2:48:e9:05:fb:3f:17:
         fe:c5:ff:a3:28:a2:5d:cd:67:2a:ca:ce:af:ef:77:89:e4:ba:
         27:ec:2f:b6:a1:72:81:2c:bb:2f:d5:92:e2:9a:18:0b:78:19:
         b3:e1:23:65:1a:12:ab:bd:db:91:b7:a2:73:1e:85:92:a6:e8:
         e8:f7:a1:55:8c:83:0e:00:04:4c:3d:55:e2:b4:9a:21:61:58:
         78:66:4b:66:69:27:ee:c4:aa:53:d8:2f:d8:0d:b2:3d:b9:6a:
         cd:d2:8a:1e:8f:b8:d8:6b:e0:d4:e1:aa:54:9e:b6:dd:97:11:
         d7:5e:7e:6a:f8:2a:95:d2:42:00:92:de:93:f1:00:eb:23:3a:
         63:42:1b:fb:d3:c4:6f:7e:cf:36:bb:53:81:46:61:02:b5:3f:
         c4:6b:b6:cc:ef:33:ce:9f:a5:20:9a:44:c1:ac:61:ab:7e:c5:
         52:04:af:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:44 2023 by rpki-client on console-fra.rpki-client.org