Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e32362e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e32362e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          kPlzlTFdGic7gSTJOjG/qtfF005lC/SVvYBN9zNPMU0=
Subject key identifier:   02:EB:05:1B:A6:EE:4A:84:0E:EC:13:5A:8A:FF:F1:EE:20:EF:12:40
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       4F185C3F8B800C94CDD98C94B19007B13888CBDE
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e32362e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:15 +0000
ROA not before:           Wed 29 Sep 2021 23:55:15 +0000
ROA not after:            Fri 30 Sep 2022 00:00:15 +0000
asID:                     17451
IP address blocks:        182.253.26.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:18:5c:3f:8b:80:0c:94:cd:d9:8c:94:b1:90:07:b1:38:88:cb:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:15 2021 GMT
            Not After : Sep 30 00:00:15 2022 GMT
        Subject: CN=3082010A0282010100BB4A3EC078330429BB203F89F9EEAE6B89C9E23042AAB7B3ABA3B78D867446FF08E71B487688BE08541133B3B96B457C6EF51D9634E641E43DB7CC8EECF3C6ED4AE8B59E3D4707C3B76D6213E004B1DFF2EC761F3AE72BC4744611066115BBE00AF673336F1976455FDF3DD36CEC7FFD5629EA6C1E6EF4248DF0EEF5AB324CEE2D4D88BF15341691F6C120439B22B7239E4184BD20C48A0CFB263E9FB7C6761F5F60626CA8A98D9068A46A57151474DDB5EBBAF09BD1A254A81C7E37B93F2AEC84CFCBA6538B4710B8886CFC529FC018D7595E980AD4B76A1E2841E26E90E55AA1A5763A5C8D65F0B61CCCBC26D91405316D9B9672BE886F5DEB8E3D9C3544EB0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:4a:3e:c0:78:33:04:29:bb:20:3f:89:f9:ee:
                    ae:6b:89:c9:e2:30:42:aa:b7:b3:ab:a3:b7:8d:86:
                    74:46:ff:08:e7:1b:48:76:88:be:08:54:11:33:b3:
                    b9:6b:45:7c:6e:f5:1d:96:34:e6:41:e4:3d:b7:cc:
                    8e:ec:f3:c6:ed:4a:e8:b5:9e:3d:47:07:c3:b7:6d:
                    62:13:e0:04:b1:df:f2:ec:76:1f:3a:e7:2b:c4:74:
                    46:11:06:61:15:bb:e0:0a:f6:73:33:6f:19:76:45:
                    5f:df:3d:d3:6c:ec:7f:fd:56:29:ea:6c:1e:6e:f4:
                    24:8d:f0:ee:f5:ab:32:4c:ee:2d:4d:88:bf:15:34:
                    16:91:f6:c1:20:43:9b:22:b7:23:9e:41:84:bd:20:
                    c4:8a:0c:fb:26:3e:9f:b7:c6:76:1f:5f:60:62:6c:
                    a8:a9:8d:90:68:a4:6a:57:15:14:74:dd:b5:eb:ba:
                    f0:9b:d1:a2:54:a8:1c:7e:37:b9:3f:2a:ec:84:cf:
                    cb:a6:53:8b:47:10:b8:88:6c:fc:52:9f:c0:18:d7:
                    59:5e:98:0a:d4:b7:6a:1e:28:41:e2:6e:90:e5:5a:
                    a1:a5:76:3a:5c:8d:65:f0:b6:1c:cc:bc:26:d9:14:
                    05:31:6d:9b:96:72:be:88:6f:5d:eb:8e:3d:9c:35:
                    44:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:EB:05:1B:A6:EE:4A:84:0E:EC:13:5A:8A:FF:F1:EE:20:EF:12:40
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e32362e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:5a:0a:0f:ab:a3:63:65:8b:ba:a6:82:92:be:ff:3e:9c:37:
         f0:1c:76:90:2a:a7:4c:77:b1:c4:a2:ab:fc:3a:80:df:9d:2c:
         81:fd:9d:c6:09:64:6b:e8:4c:75:38:2c:7a:2e:57:53:f6:45:
         f1:44:a6:47:b2:1d:0f:5e:2c:36:66:c3:32:df:32:96:23:9f:
         2c:ce:0c:0e:bf:61:3b:ec:21:86:c3:1d:5c:3c:00:cf:bb:6e:
         98:e0:3d:79:8f:61:62:6b:8a:26:30:76:82:d5:54:ac:4a:59:
         c1:19:ef:86:01:cc:76:9d:e6:36:9c:1b:c8:a0:48:12:6c:f4:
         b4:96:7e:02:b8:44:fe:57:4b:cd:db:a6:20:a8:ef:64:36:da:
         49:60:f0:b5:7b:35:d8:fe:52:ba:5f:be:ab:29:7b:1d:51:5f:
         98:d7:74:10:4d:2f:65:66:5a:81:f2:fd:96:8a:d0:1d:56:2c:
         41:e2:d2:75:b7:b2:b6:30:16:62:1f:c9:91:47:3e:e8:b8:db:
         58:4b:0c:29:d1:de:ef:00:3f:7b:cc:b3:54:6e:98:6c:a0:df:
         ad:6d:f2:29:1c:ab:a0:f1:6f:2b:9e:54:e0:5c:5d:2e:8d:93:
         61:a8:ad:f7:ff:3d:11:fc:94:1b:b7:09:d3:2f:f7:35:8d:4e:
         ed:c9:49:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:45 2023 by rpki-client on console-fra.rpki-client.org