Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3230322e3136392e36332e302f32342d3234203d3e203137343531.roa
File:                     3230322e3136392e36332e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          Vl2LQM31Lou2yMCRH21vRTKysIrkz/t1v7Ad0afvH88=
Subject key identifier:   E6:71:1F:A0:73:83:43:4B:E0:90:57:3C:1E:D1:76:3F:1B:E7:3F:61
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       5A6C614631802E95DEF84F930E3DE4A5289F9F26
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3230322e3136392e36332e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:01:07 +0000
ROA not before:           Wed 29 Sep 2021 23:56:07 +0000
ROA not after:            Fri 30 Sep 2022 00:01:07 +0000
asID:                     17451
IP address blocks:        202.169.63.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:6c:61:46:31:80:2e:95:de:f8:4f:93:0e:3d:e4:a5:28:9f:9f:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:56:07 2021 GMT
            Not After : Sep 30 00:01:07 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:d7:be:df:fd:a1:08:fd:c6:cc:e2:f6:6c:ec:
                    2b:f1:f9:35:49:ac:e9:1a:ad:da:c2:2b:1d:32:4e:
                    93:ae:20:cb:9c:dd:01:9c:c3:b2:ea:bc:ba:73:81:
                    bb:13:40:81:95:c2:90:1b:28:c2:a9:f5:97:d5:bd:
                    a8:da:5c:9e:fd:1e:41:30:4a:bb:18:4a:55:5a:be:
                    ff:47:26:4f:80:eb:d5:24:78:ab:b5:65:3f:d3:5c:
                    1e:57:86:96:cb:0c:91:b8:be:09:d4:55:24:8d:22:
                    79:67:6d:aa:4d:f0:6a:91:90:d4:e5:df:63:3b:de:
                    8b:22:81:b7:07:92:a5:0d:79:cd:91:c0:70:ed:b4:
                    88:a9:81:c0:43:dd:94:b2:08:27:c5:32:d7:13:24:
                    e0:2f:90:33:4f:1a:d4:f8:58:dc:36:00:98:bd:06:
                    83:6a:7f:10:60:d4:0b:dd:0d:eb:60:e2:7f:ae:19:
                    d6:59:3e:5c:5f:7f:6a:e2:19:ad:c6:f7:00:af:3d:
                    b0:98:51:a3:c8:78:c7:bd:e1:95:52:2b:0c:cc:99:
                    c7:bf:38:e5:07:7d:ea:7b:e4:7e:6d:89:65:e5:25:
                    19:c2:24:3d:15:e3:47:d1:71:26:e8:28:52:b7:cd:
                    ca:37:ea:b1:51:cf:88:2b:27:d8:b6:c8:b9:67:4b:
                    bb:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:71:1F:A0:73:83:43:4B:E0:90:57:3C:1E:D1:76:3F:1B:E7:3F:61
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3230322e3136392e36332e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.169.63.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:0c:be:1f:4f:ad:94:68:21:73:7a:2c:cd:c7:bd:ce:bc:6b:
         b4:47:91:51:65:8c:75:a7:98:5a:20:a3:c4:f5:1d:55:d0:77:
         37:71:fc:6c:8f:b0:f6:6e:d6:ea:ad:b7:6e:52:c4:c5:c1:ec:
         96:c1:e5:d8:c6:53:32:a1:ea:ba:40:29:d7:dd:dd:ec:09:a3:
         c3:4a:86:41:83:5a:60:e7:92:36:45:c9:2c:fd:5e:aa:62:42:
         01:0c:35:c5:29:a9:2d:2a:e4:db:e4:47:e3:6b:b6:2a:d4:8e:
         37:4b:3d:4a:4f:3d:ba:fe:73:f9:48:46:94:28:08:16:a2:56:
         ab:8b:58:bf:8a:8f:a1:27:2c:52:6e:3e:d3:3b:17:f2:9e:0c:
         7a:c8:88:3e:08:83:15:06:ce:cd:47:52:71:4f:ce:d1:f0:70:
         04:3d:4c:7b:04:5c:5c:52:1f:fd:08:6e:1b:07:c4:2b:26:b2:
         33:1a:03:b7:4e:cf:6c:ad:11:85:e5:eb:1a:d0:0d:a3:cd:10:
         73:e2:64:57:f8:8b:92:15:cc:bd:c9:62:1d:5d:6b:da:4f:4b:
         05:0e:c4:75:85:1b:b6:f5:0b:c3:60:bd:69:9f:5b:6d:6d:e7:
         4b:72:76:81:34:bb:47:9f:34:68:88:d9:ab:c0:f6:ce:d0:92:
         d2:4e:68:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:46 2023 by rpki-client on console-fra.rpki-client.org