Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3230332e3134322e38312e302f32342d3234203d3e203137343531.roa
File:                     3230332e3134322e38312e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          vfaKhu+bMEAiOajl5+1CFcFiSN2FA0z72REobye2PDg=
Subject key identifier:   D4:FF:42:E1:88:04:6C:A6:4F:D1:1A:DE:00:00:CF:8B:72:4A:B1:13
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       5A32893ACEDC515CD669EACE782173E948E4C08D
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3230332e3134322e38312e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:38 +0000
ROA not before:           Wed 29 Sep 2021 23:55:38 +0000
ROA not after:            Fri 30 Sep 2022 00:00:38 +0000
asID:                     17451
IP address blocks:        203.142.81.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:32:89:3a:ce:dc:51:5c:d6:69:ea:ce:78:21:73:e9:48:e4:c0:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:38 2021 GMT
            Not After : Sep 30 00:00:38 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:2e:3e:fa:4f:73:1d:e8:12:8a:b9:cb:01:86:
                    c1:cc:fa:e8:dd:91:80:73:8a:52:55:19:f4:3e:a8:
                    6e:70:87:94:60:fb:7b:69:63:c7:81:f1:48:dd:07:
                    56:a5:9e:be:1d:f4:52:25:22:dc:0d:39:f3:0c:04:
                    82:5a:f5:81:34:63:44:30:c8:66:b7:71:d9:0f:0b:
                    a9:14:3f:1e:76:aa:e0:59:fe:bd:1b:7e:8a:9b:e7:
                    b8:2b:3f:e9:4c:2a:6d:2c:5a:b2:cd:d7:15:ad:a2:
                    b7:a2:2c:b9:45:df:f6:e5:5c:da:03:41:36:ca:1d:
                    55:6f:06:ee:a9:2f:1d:b0:d8:12:d5:29:30:a5:23:
                    69:22:c6:4d:cd:e9:26:8b:4c:49:4d:52:0f:a7:99:
                    d4:35:af:87:3e:bb:c2:a8:7c:38:1e:d0:92:5d:a9:
                    f8:d4:e2:62:fa:7a:b7:e4:0c:15:af:80:b4:77:79:
                    9f:de:3d:a7:b8:8f:64:68:69:d0:52:b7:96:02:bc:
                    8d:95:f9:70:40:49:75:62:13:05:bf:20:35:9c:c2:
                    b4:d5:bc:7c:0e:9b:26:07:1c:63:ea:c1:51:e7:81:
                    8f:50:e6:31:45:41:22:13:10:67:48:41:f2:76:26:
                    3e:d5:09:94:72:66:1b:20:9d:c2:24:a1:75:99:7f:
                    eb:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:FF:42:E1:88:04:6C:A6:4F:D1:1A:DE:00:00:CF:8B:72:4A:B1:13
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3230332e3134322e38312e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.142.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:92:30:7e:4f:94:b7:63:ff:b8:89:61:e1:ed:72:11:d3:13:
         7d:12:00:ef:dd:0c:7a:90:a5:51:69:a4:c4:06:90:24:40:5b:
         17:07:aa:8c:4a:55:4e:98:ef:4f:a6:1e:ea:97:52:29:23:c7:
         ed:22:34:8d:22:06:c8:02:2d:71:51:44:18:d6:54:d5:a1:60:
         99:04:f7:89:92:62:dc:1e:4c:9d:80:68:99:f1:74:ab:d3:9d:
         82:be:40:32:b8:3e:af:0c:eb:d1:82:03:d0:17:ed:e9:d0:b0:
         1f:21:64:36:24:6d:d8:29:42:3e:66:e8:9e:49:f4:d6:fb:08:
         2f:31:65:6e:68:e9:87:8b:52:74:dd:d3:9d:f5:fa:62:bd:59:
         19:42:db:3c:57:94:82:64:e8:3e:7d:26:aa:ec:e1:07:75:dd:
         b2:de:78:27:d1:36:3f:58:c3:07:3c:3c:98:0e:3d:22:ea:35:
         90:2c:a4:ff:2f:89:37:f1:d9:8b:02:4a:5d:e6:b0:23:1b:a0:
         75:f1:c0:5f:ad:07:6e:70:8d:08:c0:c9:0b:4e:1d:0c:30:97:
         f6:5e:b7:54:df:dd:8d:e4:77:5c:7c:9c:1a:bf:5b:e8:aa:f7:
         ec:e2:17:19:69:8c:d9:63:7e:7e:d4:ae:ee:b0:1c:6f:f4:30:
         c5:fc:a7:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:46 2023 by rpki-client on console-fra.rpki-client.org