Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e37362e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e37362e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          bkk+uPZ7sFjNbnwOCGAX5lD+DWNb65APBJhWiCX9vbc=
Subject key identifier:   C4:01:B9:03:08:7B:7B:DC:1C:A9:D3:14:34:99:74:C1:98:92:DB:89
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       3D924567334A8E3EC4EB8B0EA6C70CFDD588D4F8
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e37362e302f32342d3234203d3e203137343531.roa
Signing time:             Wed 20 Oct 2021 18:00:02 +0000
ROA not before:           Wed 20 Oct 2021 17:55:02 +0000
ROA not after:            Thu 20 Oct 2022 18:00:02 +0000
asID:                     17451
IP address blocks:        182.253.76.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:92:45:67:33:4a:8e:3e:c4:eb:8b:0e:a6:c7:0c:fd:d5:88:d4:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Oct 20 17:55:02 2021 GMT
            Not After : Oct 20 18:00:02 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:16:80:29:5f:98:7f:69:50:30:18:fd:27:87:
                    17:eb:24:82:a3:c6:3c:33:4e:b7:b8:18:ee:df:07:
                    36:be:2c:33:78:45:20:40:c3:db:aa:0a:3b:4e:7d:
                    49:fa:27:1a:9b:bc:82:84:62:88:2a:9a:e9:7f:fb:
                    fc:93:4c:0e:a8:f6:37:46:34:8a:d6:f4:55:6a:c8:
                    7e:09:93:2d:9e:f6:1f:7c:63:61:df:43:7b:e8:e7:
                    42:32:04:b9:36:c8:20:76:77:32:20:4e:b8:73:d0:
                    14:df:d8:00:f8:ba:24:03:7f:a2:43:17:7d:ae:11:
                    99:7e:1a:29:c6:3c:9e:34:df:15:87:51:b1:7a:33:
                    94:ad:7f:ac:fb:8c:80:f9:9b:e8:96:0e:8e:7b:ff:
                    0e:8a:a8:17:04:e5:0e:da:dd:78:a3:b2:14:ce:08:
                    71:69:5a:c0:fd:76:f8:db:47:45:34:46:7c:4e:a9:
                    bf:ef:1c:ed:5e:41:38:d2:3b:2c:fc:45:6f:76:92:
                    c0:64:70:4d:44:7d:db:06:22:c9:28:86:ba:03:4b:
                    84:fb:98:b6:bc:09:a9:9e:9c:fd:5b:42:4c:29:70:
                    1a:0f:d4:d0:4f:ef:cb:a4:f7:44:e8:f1:42:86:b7:
                    01:56:fe:95:9f:fa:52:31:02:64:b4:ac:44:72:98:
                    83:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:01:B9:03:08:7B:7B:DC:1C:A9:D3:14:34:99:74:C1:98:92:DB:89
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e37362e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         46:ab:3d:e8:ab:75:97:7e:9e:7b:ec:8c:96:20:3d:c9:13:5d:
         38:20:71:10:04:5a:92:fc:1b:c0:c5:0a:4d:3b:a6:31:a9:4f:
         d4:3e:c8:1e:55:be:79:16:ee:ed:28:3b:90:a7:68:c2:d9:54:
         de:ec:67:d6:c9:c7:ce:88:6f:b7:a8:66:6b:34:37:8d:86:ef:
         3e:c0:34:d8:c7:4e:52:da:4f:5b:a1:84:72:5e:8b:f4:e9:a9:
         69:69:cc:ef:6d:46:ed:f4:87:e4:68:25:11:b3:38:39:f2:5a:
         0f:20:5d:10:a9:f6:d8:36:62:bd:99:15:00:41:25:e1:6a:78:
         68:e7:6b:64:6f:f3:05:3b:07:b9:a2:7b:e8:71:7d:34:bf:19:
         36:99:fe:46:43:6a:17:c8:43:cc:f0:b5:c8:71:b4:0b:7a:81:
         ec:d7:28:02:ac:d7:7d:3f:62:87:a9:0e:53:48:24:4f:3e:85:
         0a:91:1b:06:02:2f:d3:34:bd:5f:2d:50:6c:fc:79:c0:c0:b2:
         d8:29:08:cf:a9:09:e0:c1:8a:b0:9e:4b:c8:cb:9e:70:59:a2:
         ac:a1:77:32:08:1a:1e:3d:c4:f6:ba:81:9a:45:53:61:99:d3:
         6c:9d:05:43:0c:88:88:9a:ea:fc:a9:63:f9:28:f7:6a:be:c3:
         e6:ed:a9:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:45 2023 by rpki-client on console-fra.rpki-client.org