Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e39382e302f32342d3234203d3e203137343531.roa
File:                     3131372e3130322e39382e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          DhorOvs95mVTbZcoM/7oDPaRGtlkpbkhBfZ6IA7+Wxk=
Subject key identifier:   AC:22:31:48:FD:95:6C:07:76:D4:E5:B8:20:83:E2:1F:C6:E1:EA:4D
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       7F6A0D4D05DBC8BFE231CFD306337F022B1D373E
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e39382e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:56 +0000
ROA not before:           Wed 29 Sep 2021 23:55:56 +0000
ROA not after:            Fri 30 Sep 2022 00:00:56 +0000
asID:                     17451
IP address blocks:        117.102.98.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:6a:0d:4d:05:db:c8:bf:e2:31:cf:d3:06:33:7f:02:2b:1d:37:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:56 2021 GMT
            Not After : Sep 30 00:00:56 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:4c:05:2a:c4:d0:91:fc:c2:6a:60:7f:a0:dd:
                    76:07:19:05:9b:3d:c1:7c:ac:9b:34:f3:96:19:cd:
                    60:34:7d:80:23:22:b0:97:d3:6c:bd:39:43:cf:a9:
                    ee:ac:ae:04:f0:2f:91:84:3e:84:10:0b:50:77:ef:
                    fe:de:25:84:23:c6:ed:6c:51:73:6c:e7:95:e6:11:
                    49:ce:88:9a:49:f5:74:bd:bf:f9:01:29:98:9d:bc:
                    58:32:4e:f4:d8:f1:22:c8:2f:74:51:75:f8:51:6b:
                    3b:63:f4:e8:b0:30:28:7f:aa:da:1e:18:a9:0e:b8:
                    da:e2:0e:80:b0:0a:00:75:01:9c:15:4e:0b:a7:1a:
                    9f:1e:7d:54:63:87:95:b3:6f:9c:36:dc:c6:9c:f2:
                    70:41:0f:73:8b:bb:4f:a0:df:28:0a:a7:4a:4d:88:
                    cf:dd:6a:f4:a3:94:6e:1c:f6:12:a1:7c:ec:60:6b:
                    5a:69:69:d1:8f:97:07:02:28:e6:d5:4d:3c:44:e5:
                    02:af:2a:77:c3:ff:8b:4a:13:f7:25:4d:fd:70:6d:
                    46:12:e7:b3:12:65:36:8c:fb:f6:a7:58:66:7f:5a:
                    0f:d5:ea:45:9e:49:59:97:f3:16:08:6c:06:63:df:
                    fa:66:a9:1a:3b:f7:e5:a3:ef:ad:af:c8:c8:ef:ad:
                    d2:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:22:31:48:FD:95:6C:07:76:D4:E5:B8:20:83:E2:1F:C6:E1:EA:4D
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e39382e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.102.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:bd:66:68:9b:9d:7b:ba:2c:4f:54:07:cc:9d:b8:a4:85:9e:
         a2:47:94:ad:fc:74:5b:20:ca:ac:f3:46:f4:8e:79:b6:d6:84:
         07:f6:75:45:1d:ac:71:9c:d1:27:24:51:17:b6:0f:a9:14:63:
         6c:5a:f7:0c:64:78:59:cd:79:74:3f:bb:ca:4c:33:a2:ed:b4:
         b1:fc:73:ad:97:11:ff:76:f5:3b:09:e8:68:da:eb:27:c5:ec:
         38:4a:db:98:ca:a4:f3:2d:70:89:e7:00:57:e8:1d:12:39:9e:
         1e:7b:6e:83:d4:70:d8:c2:b5:38:02:dc:ae:df:5e:80:44:47:
         80:09:87:05:d8:4a:03:be:82:71:71:9d:e3:30:41:8f:7e:dc:
         9b:b2:86:e4:bc:c2:e7:1e:8e:4c:ca:3f:5c:0f:80:6f:9e:e8:
         74:f4:b7:db:95:b6:d3:06:2e:5a:d2:09:9c:de:ea:79:6a:22:
         87:46:2e:c6:1a:e0:c5:ae:43:92:bf:fa:1a:a7:38:d3:b2:1b:
         28:67:77:b0:80:0a:a9:c9:86:ce:69:fa:25:54:07:f2:98:27:
         e8:b8:5b:34:24:58:55:10:fb:cb:36:9a:9d:2a:76:78:eb:3c:
         85:36:cb:3e:f4:d0:8e:70:de:56:bd:f7:29:46:e8:66:ee:7e:
         98:b4:9f:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:44 2023 by rpki-client on console-fra.rpki-client.org