Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3230332e3134322e37332e302f32342d3234203d3e203137343531.roa
File:                     3230332e3134322e37332e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          eCi4qXHJHSMg1+D95D73eyMikgVX5FnmsKvJwvQ1jnw=
Subject key identifier:   07:B5:82:E0:AB:32:1F:29:26:93:DC:30:14:A4:4C:CE:56:67:D8:DB
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       7BBE8FE98119AFE6D0368B95EFF22AFFF000E5F3
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3230332e3134322e37332e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:01 +0000
ROA not before:           Wed 29 Sep 2021 23:55:01 +0000
ROA not after:            Fri 30 Sep 2022 00:00:01 +0000
asID:                     17451
IP address blocks:        203.142.73.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:be:8f:e9:81:19:af:e6:d0:36:8b:95:ef:f2:2a:ff:f0:00:e5:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:01 2021 GMT
            Not After : Sep 30 00:00:01 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:a0:9b:b1:46:1f:50:48:fd:5b:2e:df:71:78:
                    87:49:1c:f3:13:a0:35:dd:93:94:ae:2a:43:2e:ce:
                    5f:61:84:13:ac:b3:eb:5c:56:61:c6:57:eb:1e:eb:
                    67:3e:74:61:f6:5e:7e:1f:2d:c3:b1:22:3e:ca:3a:
                    f5:ce:ab:7f:fa:12:d7:af:49:1c:20:4c:f7:f8:be:
                    cf:79:d3:37:6c:9c:76:04:1d:2b:4e:e3:35:61:4a:
                    6c:25:2d:f7:29:2b:40:db:24:70:99:65:17:98:5e:
                    6f:05:12:0f:03:93:ca:d1:bd:18:c1:15:b4:4e:7f:
                    75:2a:d5:81:d0:1f:cd:30:60:4d:a9:a5:f8:80:a7:
                    db:66:83:ef:9c:95:31:6f:84:ea:02:36:80:67:67:
                    2c:90:87:f2:5d:23:3f:59:67:7f:47:39:56:dd:d6:
                    72:0c:3a:c4:06:04:d0:e7:a4:ae:4f:71:4a:2d:2e:
                    71:c2:b2:c1:e6:f6:c6:28:71:12:41:15:2e:81:23:
                    2e:a3:de:a6:62:97:c5:60:88:ce:8c:79:9b:64:3d:
                    47:3f:23:68:36:22:dd:2f:49:b5:ea:71:23:9d:f5:
                    b4:5d:8a:c4:fa:e7:ce:0b:57:dd:74:09:01:74:7d:
                    e3:e0:c9:14:4c:83:3d:0d:ee:59:fb:b0:12:6e:c3:
                    d3:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:B5:82:E0:AB:32:1F:29:26:93:DC:30:14:A4:4C:CE:56:67:D8:DB
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3230332e3134322e37332e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.142.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:72:ce:47:15:87:50:bc:1a:d6:ba:ce:35:19:c5:c8:86:26:
         b4:95:f0:df:7c:fc:d0:5b:9f:a1:8a:74:3b:03:af:e9:3e:fb:
         c5:7c:fe:87:ae:3b:cd:2e:47:ce:4e:a9:e2:cb:4c:07:d1:2f:
         6d:94:b1:91:10:b2:6f:49:75:e0:e2:b1:fe:bb:4f:8b:a5:28:
         9f:1f:a7:8d:41:ab:dc:0b:6d:84:b5:61:de:b4:51:f2:2f:cd:
         7c:15:78:3b:9d:1f:e8:86:9a:5a:4b:ed:11:6e:15:53:b3:7d:
         60:fc:00:84:ea:12:72:fe:09:5a:47:6c:7d:dd:53:38:9a:79:
         c8:e1:bb:a4:bf:9a:67:ac:d8:79:03:2d:c5:c9:bb:7e:69:5c:
         11:d0:60:ee:a8:19:a9:bf:95:24:b8:42:a1:39:b1:98:97:38:
         70:c9:66:aa:61:9e:44:83:28:69:62:05:94:80:ed:9b:de:90:
         59:8e:de:57:35:8f:a0:99:01:3f:f4:2a:03:c8:f8:99:3e:73:
         9b:cb:7a:7b:1c:a6:6f:0c:c6:6d:6a:a9:0c:0e:a2:d8:26:d6:
         78:26:e0:76:11:aa:42:79:84:cf:77:b8:02:98:0d:b4:b6:20:
         df:ef:9d:ee:16:ad:66:52:b9:fe:78:7e:80:b9:73:40:1b:59:
         46:60:f9:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:46 2023 by rpki-client on console-fra.rpki-client.org