Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3136322e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e3136322e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          HkOF1yw2Z8xCFP9VFGuBmxjJZD8f5AzWECUcABS09vg=
Subject key identifier:   64:FB:98:9D:85:16:72:97:D3:AC:AC:CB:A0:61:B7:CD:14:31:B9:1C
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       6AA2A1CF02B2A2B76AB3D6381778EAE741EE523C
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3136322e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 13 Jan 2022 01:00:00 +0000
ROA not before:           Thu 13 Jan 2022 00:55:00 +0000
ROA not after:            Fri 13 Jan 2023 01:00:00 +0000
asID:                     17451
IP address blocks:        182.253.162.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:a2:a1:cf:02:b2:a2:b7:6a:b3:d6:38:17:78:ea:e7:41:ee:52:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Jan 13 00:55:00 2022 GMT
            Not After : Jan 13 01:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:90:2f:f5:bf:6c:45:6c:5a:e1:01:47:6d:72:
                    37:c7:00:03:6c:c4:2e:56:9b:76:7f:a7:d4:48:48:
                    5b:14:73:38:83:47:8f:bf:60:90:f0:cc:d6:ef:4b:
                    43:40:77:f6:64:5a:8b:fd:96:47:b7:7c:17:02:f2:
                    2b:c8:5b:a8:ad:fa:31:85:3c:1b:f8:b9:19:27:c4:
                    bd:59:ab:9d:46:eb:c6:09:67:91:72:44:a2:56:2e:
                    88:d4:7f:ef:f9:34:a1:d3:65:a5:b4:78:b1:8c:19:
                    11:a8:35:8d:48:e6:15:24:3b:39:2e:50:69:fc:3c:
                    f8:99:fb:01:cc:b7:9d:22:38:32:96:5b:9e:d5:ef:
                    d0:43:03:fa:38:32:3a:9a:95:3f:8c:51:cc:b4:4c:
                    54:9d:a2:99:75:18:c5:23:d1:a8:c9:8e:e5:4f:9b:
                    b9:17:63:82:e2:3b:5e:d6:94:f8:e3:69:0e:fb:9a:
                    5c:72:0c:56:85:68:f0:a7:7e:bd:f5:55:4b:fc:96:
                    4a:07:45:b5:a6:42:92:52:86:bb:fe:78:52:56:10:
                    2f:31:07:4c:c5:85:8a:5d:9f:f7:fc:29:73:fe:dc:
                    60:0d:d8:41:3f:cf:59:62:9c:ae:64:df:8e:fd:a8:
                    c7:dd:ee:62:47:64:e6:a5:2e:f9:51:a9:51:84:db:
                    94:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:FB:98:9D:85:16:72:97:D3:AC:AC:CB:A0:61:B7:CD:14:31:B9:1C
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3136322e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.162.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4e:02:c6:1a:7d:d8:4b:85:30:8f:10:db:4d:7c:04:31:5a:52:
         c0:08:8e:81:99:4d:1e:35:76:32:01:fd:70:b7:1b:d0:1c:f1:
         2e:be:e4:ac:64:84:c5:8f:dd:be:b7:31:57:2a:47:e9:86:25:
         e6:07:c7:b2:ae:be:09:7a:f1:4f:b1:b2:92:55:2c:86:1f:b2:
         f0:6c:e5:76:45:ed:8c:e4:a6:50:13:d3:37:09:c6:fc:1c:3e:
         f2:69:58:85:6e:84:89:38:eb:9a:76:9b:85:c4:a4:1c:c8:6b:
         c4:94:36:f2:ba:1c:ed:c6:14:8f:47:09:a5:cf:8a:ff:cd:d9:
         a5:36:57:e1:80:4d:e7:82:36:a6:44:73:7e:de:e8:b4:14:44:
         a7:46:2f:e3:8d:d8:31:35:cc:7c:f8:c7:e9:1b:e9:7e:99:22:
         4b:9f:1f:e2:5a:cd:22:f8:21:e1:8c:db:81:00:dc:15:8c:a1:
         4a:27:ef:5b:19:28:66:f4:c8:03:52:1d:0e:c0:5f:c8:29:4a:
         a8:24:49:67:17:42:40:0c:d9:0e:7c:e6:3b:96:65:45:0b:25:
         a5:21:99:74:f0:68:8a:48:a1:78:05:5b:04:94:52:a4:20:c9:
         51:5d:03:37:b0:f0:db:ce:18:80:97:2c:50:e0:58:69:fd:64:
         fc:a1:74:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:45 2023 by rpki-client on console-fra.rpki-client.org