Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3133322e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e3133322e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          1fq3TR1wHVZTFz5oUi6PpxV2AcpZ6gdinZ1MpYPG0Qg=
Subject key identifier:   46:8F:F3:5C:0F:EE:C8:98:3C:94:EE:90:BC:9A:AD:25:D1:40:AD:04
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       175FCCC169CA1E951520555FE5DC9FE1DC9756AC
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3133322e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:39 +0000
ROA not before:           Wed 29 Sep 2021 23:55:39 +0000
ROA not after:            Fri 30 Sep 2022 00:00:39 +0000
asID:                     17451
IP address blocks:        182.253.132.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:5f:cc:c1:69:ca:1e:95:15:20:55:5f:e5:dc:9f:e1:dc:97:56:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:39 2021 GMT
            Not After : Sep 30 00:00:39 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:5c:df:0d:09:1e:bf:f2:47:53:f9:95:1e:8b:
                    b5:0b:5b:63:6b:16:ba:e7:91:ff:27:d2:f2:95:86:
                    fb:6d:70:07:31:53:e7:ad:f4:be:4b:eb:ed:84:d2:
                    6e:02:a4:6a:a1:31:6e:37:67:c8:d3:c0:6e:10:59:
                    32:b5:ed:0b:1b:3e:5b:55:6f:df:ac:6b:ce:5c:c5:
                    06:01:da:02:49:e2:4a:cd:a6:e7:cf:53:a4:db:19:
                    ff:9f:f6:4b:d6:72:3d:ed:b7:bf:be:28:70:28:5d:
                    5c:2e:6e:56:f1:38:b1:06:6e:51:ce:59:0b:2c:89:
                    c3:32:be:d5:d4:e2:96:ab:f0:c7:d7:60:b6:15:7c:
                    8c:65:5a:16:c1:ee:f9:dc:18:ef:36:c0:6b:18:91:
                    fe:55:1a:36:a6:79:06:9a:ba:d4:47:86:de:db:e4:
                    4d:9a:dd:31:63:a1:cd:cb:93:9c:d2:80:f5:4a:42:
                    a2:d8:ad:69:b5:66:c6:d7:08:f2:f4:5b:c8:c7:00:
                    b8:94:f7:a2:f8:c2:c4:a2:65:60:35:93:a1:65:12:
                    68:e7:b4:7b:75:5d:70:a6:73:9e:94:32:c6:52:f3:
                    fb:b6:f0:cd:4a:3b:1c:cc:d9:fe:81:f4:23:33:f4:
                    7f:45:82:16:c7:20:e8:0e:97:af:aa:06:76:7f:b6:
                    a4:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:8F:F3:5C:0F:EE:C8:98:3C:94:EE:90:BC:9A:AD:25:D1:40:AD:04
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3133322e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         86:b2:cc:12:4b:25:fe:77:57:7a:a5:8c:7a:ad:33:fa:ed:de:
         bc:a4:12:85:b3:20:d4:05:2e:43:d6:ce:04:76:1c:f5:dd:f7:
         90:f5:7e:0e:c2:ca:4d:20:76:02:1c:db:0c:38:ec:e8:82:14:
         82:57:cf:fd:78:32:44:dd:66:03:eb:7d:ea:9c:0e:e4:e8:dd:
         cc:21:21:7c:47:be:87:eb:3d:e9:d6:50:83:1c:3b:f2:84:97:
         39:77:bf:54:b7:05:46:76:98:e6:e2:15:1e:ac:21:c0:33:0a:
         e8:ba:6e:4b:03:ef:77:f6:d0:37:89:32:9d:80:92:13:41:4c:
         ee:15:59:b5:11:14:12:93:35:da:a2:43:31:1c:90:f3:e5:8c:
         54:36:c0:fb:4f:c7:de:e2:ac:41:7a:fd:96:2c:50:25:d9:da:
         78:e1:69:38:76:23:f9:4a:6e:0e:64:b9:42:a6:af:5e:31:15:
         f8:6c:a2:dd:2c:b3:4d:a4:71:ab:c7:64:79:e3:30:48:be:e7:
         dc:64:4d:dc:4e:b7:4e:1a:b9:c9:ab:f2:d2:4f:e7:d4:7a:12:
         78:18:de:3d:46:b0:a1:c8:e5:08:48:91:46:2f:1a:e3:8c:0b:
         46:18:7d:c0:9c:e9:c5:a5:db:b7:c8:af:e0:88:85:9d:d4:f0:
         9e:5f:ab:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:45 2023 by rpki-client on console-fra.rpki-client.org