Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3230332e3134322e36392e302f32342d3234203d3e203137343531.roa
File:                     3230332e3134322e36392e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          mtze5wCOoyG505in1JVTuyBbF+Uww/zCfOmKcBLbsCM=
Subject key identifier:   B5:AC:97:70:02:75:34:50:5F:48:28:5B:E8:76:94:26:F1:EE:5E:32
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       3B77392A8271C504B09AE418CDDAE996B8BCC952
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3230332e3134322e36392e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:51 +0000
ROA not before:           Wed 29 Sep 2021 23:55:51 +0000
ROA not after:            Fri 30 Sep 2022 00:00:51 +0000
asID:                     17451
IP address blocks:        203.142.69.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:77:39:2a:82:71:c5:04:b0:9a:e4:18:cd:da:e9:96:b8:bc:c9:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:51 2021 GMT
            Not After : Sep 30 00:00:51 2022 GMT
        Subject: CN=3082010A0282010100D9C3378E7A3EBEA10671BEE2F9D4BDED27C36183606819539B5AFE2B8D474486EC31D50FA028E3A9DAF68718037F1DA33AFD6AED1245BA3B5F1A90A496EA46278C2B0C3D9326BD643B50ACE4AE77265350D54C4CFDE463E0565A36F4BD179C25BAFFB901886445D1E4989694483B4363E6B794CFDAF6AF748413A07E2F53178EF0AC1823FF1DC61E8427E2EC7F58827FE1CD8F1902372B1A9B64878A0512759BAE9134579468559821FD455807906EA6D6ABC8DE70C7420D92CC0DD6D6213E567F77EEF5B5AC5A8F17CB63128FC2BC109DEE86D4993E7FABFEE1B98B874F22567331F0ECF33733F99F9E872D1866D7B2E7EDE23F6FD14A15E9C1BDBA8F74007B0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:c3:37:8e:7a:3e:be:a1:06:71:be:e2:f9:d4:
                    bd:ed:27:c3:61:83:60:68:19:53:9b:5a:fe:2b:8d:
                    47:44:86:ec:31:d5:0f:a0:28:e3:a9:da:f6:87:18:
                    03:7f:1d:a3:3a:fd:6a:ed:12:45:ba:3b:5f:1a:90:
                    a4:96:ea:46:27:8c:2b:0c:3d:93:26:bd:64:3b:50:
                    ac:e4:ae:77:26:53:50:d5:4c:4c:fd:e4:63:e0:56:
                    5a:36:f4:bd:17:9c:25:ba:ff:b9:01:88:64:45:d1:
                    e4:98:96:94:48:3b:43:63:e6:b7:94:cf:da:f6:af:
                    74:84:13:a0:7e:2f:53:17:8e:f0:ac:18:23:ff:1d:
                    c6:1e:84:27:e2:ec:7f:58:82:7f:e1:cd:8f:19:02:
                    37:2b:1a:9b:64:87:8a:05:12:75:9b:ae:91:34:57:
                    94:68:55:98:21:fd:45:58:07:90:6e:a6:d6:ab:c8:
                    de:70:c7:42:0d:92:cc:0d:d6:d6:21:3e:56:7f:77:
                    ee:f5:b5:ac:5a:8f:17:cb:63:12:8f:c2:bc:10:9d:
                    ee:86:d4:99:3e:7f:ab:fe:e1:b9:8b:87:4f:22:56:
                    73:31:f0:ec:f3:37:33:f9:9f:9e:87:2d:18:66:d7:
                    b2:e7:ed:e2:3f:6f:d1:4a:15:e9:c1:bd:ba:8f:74:
                    00:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:AC:97:70:02:75:34:50:5F:48:28:5B:E8:76:94:26:F1:EE:5E:32
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3230332e3134322e36392e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.142.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:65:b9:d5:85:bb:b7:a1:be:4b:a0:29:09:1f:6a:ae:60:13:
         c8:50:16:3b:d7:21:38:75:1c:8c:41:cf:f6:39:67:63:82:35:
         07:64:8b:db:48:39:e8:e9:e9:95:93:f9:f6:6e:7b:87:cc:dc:
         a6:75:2f:cd:6e:06:46:d0:a9:b8:2f:91:2e:d3:e8:82:11:5c:
         cf:b4:64:f3:27:9a:c1:d2:d5:10:53:ec:1d:3c:d1:6d:ba:6a:
         a1:15:43:05:26:1c:f3:0d:cd:5a:52:e5:da:b2:c1:7a:24:a9:
         e1:dc:7d:92:de:cf:6c:cf:7e:41:74:cc:a3:d5:ff:1b:8e:7b:
         a2:0e:40:51:84:e2:af:cc:03:2e:94:f0:5f:5f:8d:11:6d:3c:
         1e:a6:b7:9b:11:0b:e2:8a:92:b4:d3:e6:90:97:d6:f0:30:ef:
         21:4f:c7:dd:f4:40:2f:ef:83:fa:c6:25:73:ca:b4:ad:d1:1b:
         48:6f:ba:69:c2:6e:18:5f:ee:84:dc:90:3d:96:af:94:6a:44:
         42:45:db:84:c1:9f:ef:61:62:94:09:a6:2b:22:a8:bc:41:b5:
         bb:0e:ed:36:1f:50:04:04:54:0b:46:90:ef:92:f3:41:d1:7c:
         c9:74:15:31:1c:e9:e4:08:2f:8e:8e:6d:44:11:6a:46:12:a3:
         1a:63:df:da
-----BEGIN CERTIFICATE-----
MIIHJDCCBgygAwIBAgIUO3c5KoJxxQSwmuQYzdrplri8yVIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJBNDE3
RjcyOERCRjAeFw0yMTA5MjkyMzU1NTFaFw0yMjA5MzAwMDAwNTFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDlDMzM3OEU3QTNFQkVBMTA2
NzFCRUUyRjlENEJERUQyN0MzNjE4MzYwNjgxOTUzOUI1QUZFMkI4RDQ3NDQ4NkVD
MzFENTBGQTAyOEUzQTlEQUY2ODcxODAzN0YxREEzM0FGRDZBRUQxMjQ1QkEzQjVG
MUE5MEE0OTZFQTQ2Mjc4QzJCMEMzRDkzMjZCRDY0M0I1MEFDRTRBRTc3MjY1MzUw
RDU0QzRDRkRFNDYzRTA1NjVBMzZGNEJEMTc5QzI1QkFGRkI5MDE4ODY0NDVEMUU0
OTg5Njk0NDgzQjQzNjNFNkI3OTRDRkRBRjZBRjc0ODQxM0EwN0UyRjUzMTc4RUYw
QUMxODIzRkYxREM2MUU4NDI3RTJFQzdGNTg4MjdGRTFDRDhGMTkwMjM3MkIxQTlC
NjQ4NzhBMDUxMjc1OUJBRTkxMzQ1Nzk0Njg1NTk4MjFGRDQ1NTgwNzkwNkVBNkQ2
QUJDOERFNzBDNzQyMEQ5MkNDMERENkQ2MjEzRTU2N0Y3N0VFRjVCNUFDNUE4RjE3
Q0I2MzEyOEZDMkJDMTA5REVFODZENDk5M0U3RkFCRkVFMUI5OEI4NzRGMjI1Njcz
MzFGMEVDRjMzNzMzRjk5RjlFODcyRDE4NjZEN0IyRTdFREUyM0Y2RkQxNEExNUU5
QzFCREJBOEY3NDAwN0IwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA2cM3jno+vqEGcb7i+dS97SfDYYNgaBlTm1r+K41HRIbsMdUPoCjj
qdr2hxgDfx2jOv1q7RJFujtfGpCklupGJ4wrDD2TJr1kO1Cs5K53JlNQ1UxM/eRj
4FZaNvS9F5wluv+5AYhkRdHkmJaUSDtDY+a3lM/a9q90hBOgfi9TF47wrBgj/x3G
HoQn4ux/WIJ/4c2PGQI3KxqbZIeKBRJ1m66RNFeUaFWYIf1FWAeQbqbWq8jecMdC
DZLMDdbWIT5Wf3fu9bWsWo8Xy2MSj8K8EJ3uhtSZPn+r/uG5i4dPIlZzMfDs8zcz
+Z+ehy0YZtey5+3iP2/RShXpwb26j3QAewIDAQABo4ICMjCCAi4wHQYDVR0OBBYE
FLWsl3ACdTRQX0goW+h2lCbx7l4yMB8GA1UdIwQYMBaAFKxVVEe6YsORB/Fr9XL4
KkF/co2/MA4GA1UdDwEB/wQEAwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzk5M2YzNTAtYjc1Ni00OTE2LThk
ODQtNDg0ZjAyNWRmZmNjLzAvQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJB
NDE3RjcyOERCRi5jcmwwdAYIKwYBBQUHAQEEaDBmMGQGCCsGAQUFBzAChlhyc3lu
YzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8yL0FDNTU1NDQ3
QkE2MkMzOTEwN0YxNkJGNTcyRjgyQTQxN0Y3MjhEQkYuY2VyMIGiBggrBgEFBQcB
CwSBlTCBkjCBjwYIKwYBBQUHMAuGgYJyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby8zOTkzZjM1MC1iNzU2LTQ5MTYtOGQ4NC00ODRmMDI1ZGZmY2MvMC8z
MjMwMzMyZTMxMzQzMjJlMzYzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzcz
NDM1MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBADLjkUwDQYJKoZIhvcNAQELBQADggEBAItludWFu7eh
vkugKQkfaq5gE8hQFjvXITh1HIxBz/Y5Z2OCNQdki9tIOejp6ZWT+fZue4fM3KZ1
L81uBkbQqbgvkS7T6IIRXM+0ZPMnmsHS1RBT7B080W26aqEVQwUmHPMNzVpS5dqy
wXokqeHcfZLez2zPfkF0zKPV/xuOe6IOQFGE4q/MAy6U8F9fjRFtPB6mt5sRC+KK
krTT5pCX1vAw7yFPx930QC/vg/rGJXPKtK3RG0hvumnCbhhf7oTckD2Wr5RqREJF
24TBn+9hYpQJpisiqLxBtbsO7TYfUAQEVAtGkO+S80HRfMl0FTEc6eQIL46ObUQR
akYSoxpj39o=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:46 2023 by rpki-client on console-fra.rpki-client.org