Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3137362e302f32322d3232203d3e203137343531.roa
File:                     3138322e3235332e3137362e302f32322d3232203d3e203137343531.roa (raw, json)
Hash identifier:          nYM0goOkuMYCRwBW7BsGjE9xPoqIMyit9EstbZnfX1I=
Subject key identifier:   A5:C1:41:68:B3:FF:09:9C:84:02:41:B6:A3:4D:01:F2:D6:9D:5C:10
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       2328F3FDEED994C25DCBDD6D7C1FC655B4FAA929
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3137362e302f32322d3232203d3e203137343531.roa
Signing time:             Wed 06 Oct 2021 09:00:09 +0000
ROA not before:           Wed 06 Oct 2021 08:55:09 +0000
ROA not after:            Thu 06 Oct 2022 09:00:09 +0000
asID:                     17451
IP address blocks:        182.253.176.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:28:f3:fd:ee:d9:94:c2:5d:cb:dd:6d:7c:1f:c6:55:b4:fa:a9:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Oct  6 08:55:09 2021 GMT
            Not After : Oct  6 09:00:09 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:89:f2:e6:d7:d3:94:97:21:5d:05:ee:28:22:
                    89:8a:42:27:97:9d:5e:4c:f7:77:66:ba:e1:e5:63:
                    49:d2:00:5b:66:50:2d:f6:f9:a6:66:5d:e6:8f:1b:
                    42:4c:5d:48:4d:9a:ac:81:f7:ba:a7:75:8c:b3:31:
                    7d:32:c4:ae:13:78:29:6d:de:a9:05:41:86:3b:2b:
                    9d:38:a2:ac:ba:a6:12:b1:47:54:b9:9e:d4:6f:f2:
                    98:17:22:15:e5:c8:c6:8e:60:e5:12:52:1e:49:4b:
                    ad:f3:d3:3c:d0:27:f4:73:a6:8b:ec:b9:5c:fd:27:
                    b1:ca:83:ea:73:6a:8a:57:14:a7:e3:b2:2c:35:6d:
                    f1:85:f8:45:dc:8c:e6:18:43:b1:f8:d9:33:ff:33:
                    55:81:7c:a8:4f:fe:ce:cd:e4:05:49:bb:9d:05:d7:
                    7b:46:65:a9:da:68:33:93:92:8d:c3:11:90:8d:0f:
                    07:b4:05:29:f1:05:1f:f6:20:f9:96:bd:b0:0e:20:
                    02:c2:e4:44:30:b5:76:63:5e:0b:bb:af:34:49:07:
                    8f:18:2a:27:c4:8b:40:ee:26:4c:1f:68:ce:73:4f:
                    e4:09:8a:c3:73:2a:4a:79:79:f7:34:ae:ac:9c:7f:
                    09:53:ee:a8:30:49:31:b9:98:2a:5d:01:c9:23:f4:
                    4f:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:C1:41:68:B3:FF:09:9C:84:02:41:B6:A3:4D:01:F2:D6:9D:5C:10
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3137362e302f32322d3232203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1c:d4:2b:df:b6:b5:d8:6f:6d:60:db:00:3f:44:6d:fd:50:3f:
         8a:57:97:fb:2c:1d:56:06:0f:7f:82:6c:f9:a1:12:73:ad:5f:
         ea:47:46:8b:29:f7:81:26:9b:b4:71:e5:04:1f:67:97:e6:4d:
         a1:ef:61:ed:be:c9:4b:d9:c7:38:4e:3a:d4:b2:be:0b:33:09:
         32:2e:83:61:62:ea:48:b0:65:d4:77:88:07:5e:23:30:a9:33:
         4e:65:56:f0:56:fb:b9:10:c9:26:96:69:0e:da:1a:52:8c:39:
         53:00:ec:5c:b1:8e:79:bb:12:7d:99:73:5b:73:cb:a4:d0:e0:
         a0:20:d9:16:de:5b:5c:e6:73:7a:4a:42:a7:01:49:2b:93:82:
         f9:01:ab:b6:8e:1e:be:a7:1c:c6:53:78:60:11:a4:c5:4a:c5:
         5b:53:28:27:6c:71:b1:47:5e:07:08:3f:79:a2:d0:a0:07:ce:
         23:a4:9a:72:b8:fb:63:11:ed:4f:8e:8e:06:78:b1:e9:a1:7e:
         25:6d:c6:46:99:26:00:28:08:5b:1f:04:8a:86:36:70:b2:8e:
         90:70:ae:e9:99:64:ea:34:01:df:7e:84:b7:f9:d9:8e:fe:53:
         cf:0e:f1:52:9f:25:6c:95:37:ac:29:fc:9d:3e:b2:30:f1:ea:
         19:a1:a8:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:45 2023 by rpki-client on console-fra.rpki-client.org