Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3230322e3136392e36322e302f32342d3234203d3e203137343531.roa
File:                     3230322e3136392e36322e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          scfWOS2Z4VVo+4bBJ/wkxfMkwNXckgBMbsJUm/io3q8=
Subject key identifier:   46:07:E8:10:6F:EB:3E:54:D8:40:18:2D:6A:93:8F:48:81:1E:98:B0
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       08498F31A3FFFDD5A90A73D3DC0152FA16B84585
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3230322e3136392e36322e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:01:21 +0000
ROA not before:           Wed 29 Sep 2021 23:56:21 +0000
ROA not after:            Fri 30 Sep 2022 00:01:21 +0000
asID:                     17451
IP address blocks:        202.169.62.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:49:8f:31:a3:ff:fd:d5:a9:0a:73:d3:dc:01:52:fa:16:b8:45:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:56:21 2021 GMT
            Not After : Sep 30 00:01:21 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:a8:a6:0a:83:02:b8:1a:ed:56:b3:35:40:a3:
                    37:96:ae:8a:75:b2:29:38:87:3e:53:c9:a3:ad:7c:
                    ac:74:4e:2c:f8:c9:ec:b2:38:20:89:76:d3:88:33:
                    0a:c6:20:e7:a3:90:21:f0:93:8e:61:a7:ea:07:f7:
                    e3:05:cc:31:2d:c2:db:67:a7:fa:85:f0:0a:3a:4e:
                    b6:ab:f2:99:eb:99:d8:cc:8c:04:44:ea:f7:9b:a3:
                    d6:74:5b:84:91:cf:c8:09:e3:2c:4f:de:0d:e2:f2:
                    18:38:3b:0c:55:8f:4a:01:d1:d2:44:8a:ea:44:3d:
                    d0:2e:60:31:56:a2:ff:c2:a0:64:1d:fc:73:c6:ba:
                    fd:d2:73:93:12:01:24:b7:cc:c2:1c:d8:f3:0c:82:
                    f4:85:b3:ef:25:06:20:4e:b7:c5:f6:b6:64:ec:ed:
                    5b:0b:1d:8c:2d:a2:67:57:58:56:f3:4c:8e:96:17:
                    48:8a:bd:3b:bc:f1:d8:b9:ec:6c:f0:51:12:28:93:
                    93:8f:76:5a:55:a5:d5:ad:c7:ee:11:68:36:fa:dd:
                    f3:07:94:22:7a:34:e5:e0:bc:8b:7f:e5:ad:64:03:
                    0e:a6:d9:50:0f:d1:cd:d7:00:69:eb:b9:6c:32:74:
                    81:1f:b5:46:df:5e:07:8b:cd:5d:f2:9e:4d:d2:38:
                    53:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:07:E8:10:6F:EB:3E:54:D8:40:18:2D:6A:93:8F:48:81:1E:98:B0
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3230322e3136392e36322e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.169.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         11:4b:a1:30:2d:f4:f2:04:42:60:0f:5e:15:e8:da:a8:70:16:
         73:dc:84:a5:29:2c:97:d5:e7:bf:46:60:f5:d5:09:ef:64:57:
         98:65:91:bf:91:1c:f1:0a:fa:1e:9e:ce:c8:8b:08:2d:d4:cd:
         54:bf:70:87:f8:f3:91:cc:ef:9a:76:56:ad:bb:a9:16:a9:b1:
         ea:0d:49:5b:dd:50:d7:4d:b0:3f:65:05:d8:d4:f5:bb:cb:d3:
         64:7a:0f:17:0e:17:36:b0:07:76:9f:a7:b9:80:65:5c:c4:a1:
         57:19:de:12:93:ea:36:bf:7f:99:29:7d:a1:30:0f:29:63:67:
         af:05:22:64:7d:c3:72:fc:4d:36:d3:b1:e1:ff:f2:7a:8d:27:
         5c:06:62:4f:43:9f:4a:22:b5:47:3d:83:c0:20:f0:de:3e:9b:
         1b:61:d1:1e:66:bb:99:1d:39:4f:20:c4:cf:ae:62:46:6a:69:
         ef:51:0c:9a:c3:d1:e4:1c:1a:b4:f1:69:94:a0:31:42:f6:24:
         c9:66:61:b3:a8:76:38:cc:32:07:33:55:f3:62:9b:21:ed:f3:
         71:cf:d4:2d:aa:a6:30:d9:d6:08:61:2e:75:97:1c:96:e2:b4:
         c1:b2:f3:a4:ea:7e:c7:b0:e8:bf:2a:e4:07:61:a2:63:f7:19:
         91:b9:b7:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:46 2023 by rpki-client on console-fra.rpki-client.org