Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3230322e3136392e33372e302f32342d3234203d3e203137343531.roa
File:                     3230322e3136392e33372e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          bxBU61CEEoKG95zvIrRJy1PJ7voHeqwxlgz28LSnhNs=
Subject key identifier:   A2:50:9C:CE:64:B0:14:16:BE:F4:E6:BF:E3:8F:C3:B8:25:73:10:DA
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       78095FFAB7B9809E2AC43EB4F1E3744F24148D18
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3230322e3136392e33372e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:30 +0000
ROA not before:           Wed 29 Sep 2021 23:55:30 +0000
ROA not after:            Fri 30 Sep 2022 00:00:30 +0000
asID:                     17451
IP address blocks:        202.169.37.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:09:5f:fa:b7:b9:80:9e:2a:c4:3e:b4:f1:e3:74:4f:24:14:8d:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:30 2021 GMT
            Not After : Sep 30 00:00:30 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:43:db:a8:d1:73:21:b8:2e:23:f3:02:5e:ac:
                    67:2a:63:78:61:76:71:6c:5b:c6:cd:8d:f2:06:af:
                    2d:78:04:53:0e:0f:00:2f:f0:62:ac:d3:50:f4:15:
                    3f:1e:33:6a:86:b8:b3:f8:f3:b5:dc:21:f0:25:01:
                    45:2f:ea:8d:36:2f:33:2f:c9:2a:7f:94:69:2b:a5:
                    bc:79:25:c5:be:40:8d:69:23:94:8d:3f:51:50:60:
                    f3:eb:e7:1a:38:8d:89:45:1d:cf:aa:72:8c:40:8a:
                    51:8b:16:fd:d9:7b:5d:7d:5d:07:be:5e:b2:68:1e:
                    7c:f1:ea:24:e3:cf:b5:dd:8a:51:64:46:a3:be:fc:
                    77:09:c2:bc:d7:4a:a6:24:c3:68:b8:e3:c4:73:74:
                    67:de:43:ba:da:3d:ac:5f:2d:11:cc:51:cd:7e:33:
                    fd:55:50:33:03:6a:ab:d3:49:b7:9b:dc:7f:2a:13:
                    40:19:37:8f:d3:39:1a:2e:75:e8:44:49:91:1f:de:
                    de:96:d7:c2:8d:20:8e:53:4a:c0:06:06:95:47:60:
                    81:1d:52:9b:e5:52:eb:17:40:e9:ee:6a:26:ad:8c:
                    03:29:ca:3e:bc:1c:11:11:8b:ba:03:f8:90:59:37:
                    d8:3c:7a:51:a1:26:80:54:65:b5:64:ef:db:24:ad:
                    d8:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:50:9C:CE:64:B0:14:16:BE:F4:E6:BF:E3:8F:C3:B8:25:73:10:DA
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3230322e3136392e33372e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.169.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         92:63:df:77:36:0f:86:71:0b:7c:34:0c:89:8f:aa:94:f3:e9:
         1d:09:2a:3c:5a:76:00:2b:c4:c4:dc:f6:1d:ba:47:f5:b5:3c:
         61:62:8a:2e:a7:5f:c8:29:b1:2c:78:9f:75:c6:af:73:90:f1:
         56:b3:9f:d3:f3:ee:9b:f2:ba:92:f6:f4:32:d0:96:d4:4c:f0:
         78:ea:b6:a3:6e:35:16:e0:1d:c2:c3:70:23:65:e2:90:0b:52:
         3b:a2:e8:28:bc:4f:87:33:7d:3c:2c:ab:4f:0e:b8:6a:5c:5f:
         f3:46:ea:ff:36:7e:bb:17:83:8e:74:49:a7:93:e6:b0:e8:2d:
         dd:3e:65:ad:60:2e:5c:0f:fe:c2:bc:6f:6f:eb:91:74:4f:7d:
         8f:41:22:86:e6:e8:fc:43:56:53:9a:f8:82:f5:76:9d:86:4e:
         47:af:be:af:b0:a3:36:d0:d3:0b:22:9a:03:de:7d:a6:85:7c:
         b8:dd:22:1d:68:65:7a:bf:10:71:b8:8a:60:bc:9b:1e:bf:c2:
         72:11:3f:4b:a8:74:c7:02:22:84:71:3f:81:7a:4e:c7:f8:05:
         b2:c4:2b:c8:0a:5f:62:61:7a:6a:86:6f:a1:da:7c:10:5d:a0:
         cb:61:90:0d:20:6b:06:87:23:f7:c4:e6:52:1e:ae:e7:e7:dd:
         c0:e7:f3:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:46 2023 by rpki-client on console-fra.rpki-client.org