Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131382e39392e3131322e302f32342d3234203d3e203137343531.roa
File:                     3131382e39392e3131322e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          PVNUAhWYq2UmMAUUIV+D5nuvDT1Xs++NwUwHKW2ouCk=
Subject key identifier:   CE:64:51:28:B0:E2:06:9C:01:94:B1:42:40:69:F8:82:35:9C:1A:50
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       3CCE7A2CEEE3DE49AC1279B72DD9C172B32A2926
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131382e39392e3131322e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:01:22 +0000
ROA not before:           Wed 29 Sep 2021 23:56:22 +0000
ROA not after:            Fri 30 Sep 2022 00:01:22 +0000
asID:                     17451
IP address blocks:        118.99.112.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:ce:7a:2c:ee:e3:de:49:ac:12:79:b7:2d:d9:c1:72:b3:2a:29:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:56:22 2021 GMT
            Not After : Sep 30 00:01:22 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:6b:de:56:39:bd:35:a7:3e:3b:2f:fc:35:7e:
                    9f:11:a3:2c:97:1e:88:90:f6:fc:30:94:7d:d7:b6:
                    81:00:85:ed:61:0c:eb:65:94:22:55:e4:e0:16:9f:
                    14:53:0f:76:c9:8b:d4:7b:ae:a5:eb:03:50:59:ca:
                    4c:fa:d0:b3:86:58:df:be:cb:4a:f6:30:92:03:1e:
                    ee:89:af:97:09:3d:f6:5e:21:2f:c9:6c:70:7e:69:
                    78:95:cc:f5:f8:f5:ad:aa:0e:b2:8b:ee:e5:64:6d:
                    5c:b5:8b:a0:bb:91:3e:bc:59:d8:61:89:b6:b5:60:
                    9e:ee:f7:29:d4:27:ef:29:c7:36:93:36:cc:68:2b:
                    50:6e:bd:9b:a1:b2:25:1d:4a:b6:22:80:81:bb:65:
                    7a:a5:eb:a9:98:34:e0:53:f7:5c:5e:e9:ec:80:fe:
                    b5:0f:6e:a6:40:9b:95:b6:95:6c:89:a4:7d:7c:86:
                    ad:e7:ad:73:75:d5:23:cd:c0:80:a6:60:bf:f6:58:
                    b1:31:0d:54:e1:3e:71:07:64:00:8a:94:54:89:d1:
                    fd:f5:b1:49:db:92:4d:99:6c:f7:7c:16:1f:6a:83:
                    d0:6c:48:7a:f1:23:ac:8a:15:e1:91:f5:a7:d7:89:
                    1a:4c:75:a5:ae:8f:af:a9:f3:4e:b5:8b:6a:73:f6:
                    08:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:64:51:28:B0:E2:06:9C:01:94:B1:42:40:69:F8:82:35:9C:1A:50
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131382e39392e3131322e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.99.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:41:00:96:23:74:3c:8d:3d:d5:ec:d4:12:a1:bb:52:ea:49:
         7e:9d:47:be:2a:8e:8f:2b:e5:bb:e3:77:5b:8d:1c:af:69:5e:
         3f:0c:a9:e4:ba:67:30:11:d0:24:62:b4:db:21:6c:d4:e5:2d:
         2e:40:68:0a:aa:d3:e4:12:ec:b9:c2:34:e1:27:fa:22:dc:d7:
         15:c9:8f:05:d8:4c:0d:17:63:98:a4:0e:71:a3:73:e5:69:f0:
         bf:6a:9f:8a:4c:25:a8:27:88:a4:fb:8f:00:84:45:90:d5:7e:
         95:42:66:1f:42:1d:fb:95:e7:72:6d:68:57:2a:5f:20:a2:7c:
         07:28:1a:ea:fb:04:13:17:a3:d0:f7:e8:d0:9a:28:4d:85:55:
         2c:10:65:1e:8d:d4:bb:3f:cc:65:96:a5:ff:25:1f:11:98:52:
         bf:21:68:a1:cc:5e:cd:f0:dc:1e:50:34:75:ec:e1:88:74:08:
         0b:d7:74:1e:13:72:b5:9b:33:77:28:df:4f:23:4e:f0:7c:3a:
         4f:bd:2d:29:62:0b:25:0a:d0:f5:46:11:07:1e:b8:14:2c:07:
         c1:9f:fb:41:e5:3b:7c:0f:22:11:5b:48:b0:ab:89:6e:d5:e3:
         5d:f9:39:f3:c1:c5:9c:43:f6:45:67:6a:d8:04:18:7b:a9:6b:
         c0:c6:36:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:44 2023 by rpki-client on console-fra.rpki-client.org