Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3230332e3134322e38332e302f32342d3234203d3e203137343531.roa
File:                     3230332e3134322e38332e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          8S6PHsdfihTjXQVi/zy+HcXUZYXZuT4R+RBQ7cSIOEE=
Subject key identifier:   F4:C6:14:CA:04:76:4F:84:E9:B5:C2:7B:79:15:13:22:14:AE:F9:07
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       3D6317B99EC3B57E1B9BAD9FDF080FA108578B06
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3230332e3134322e38332e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:16 +0000
ROA not before:           Wed 29 Sep 2021 23:55:16 +0000
ROA not after:            Fri 30 Sep 2022 00:00:16 +0000
asID:                     17451
IP address blocks:        203.142.83.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:63:17:b9:9e:c3:b5:7e:1b:9b:ad:9f:df:08:0f:a1:08:57:8b:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:16 2021 GMT
            Not After : Sep 30 00:00:16 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:72:07:dd:f3:16:7d:78:2e:0c:d7:7e:b4:01:
                    36:71:c6:a5:93:33:ba:ab:6a:4f:74:53:2a:1a:9f:
                    50:d8:99:a5:21:c6:af:be:7d:de:48:1f:08:20:4c:
                    0a:4c:ee:f1:d5:17:3f:8a:14:c1:a8:10:03:e2:20:
                    b5:17:08:db:43:88:92:21:db:be:22:6a:a9:9a:82:
                    55:fe:f4:da:7d:bf:a5:70:aa:6e:94:63:9b:14:e3:
                    b3:ac:e8:8d:a0:ea:a3:a1:fe:2a:ea:1f:8f:2a:8f:
                    2d:98:c7:56:80:9d:1a:c5:96:fe:ba:8d:fd:66:66:
                    ee:f1:34:e4:ea:db:44:8c:51:6d:85:9a:51:ea:ee:
                    16:59:55:01:69:5c:f8:09:ce:c1:e6:f0:16:4c:64:
                    4b:28:5c:b3:bb:91:7b:9f:2b:60:3a:2c:93:fd:a4:
                    22:f1:8b:bf:51:2e:f6:28:a5:9b:c3:b4:7d:06:a4:
                    7c:4e:1f:07:3c:e7:8b:55:0e:a3:d9:d0:08:dc:15:
                    38:1a:77:8f:94:01:81:19:5e:2d:fe:88:9d:18:7a:
                    82:95:5c:f4:3c:2d:ca:c1:5b:02:37:45:72:0c:11:
                    5a:0c:2e:05:de:da:60:2f:9d:9c:00:5f:14:41:07:
                    9e:33:34:cc:09:ac:2c:dd:b1:1f:41:36:22:67:50:
                    f6:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:C6:14:CA:04:76:4F:84:E9:B5:C2:7B:79:15:13:22:14:AE:F9:07
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3230332e3134322e38332e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.142.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         07:46:83:8f:d0:4c:ad:5b:0a:14:70:5d:d5:92:4f:35:e3:2c:
         52:2f:5c:fb:58:19:13:ad:74:cb:82:76:fe:0d:0a:17:da:c3:
         1d:39:2f:b3:6d:fb:d0:16:66:8a:00:15:93:23:48:3e:5d:04:
         74:f0:84:ba:48:5a:9b:6a:5e:9e:fe:8e:75:97:4e:1f:1e:64:
         00:f2:db:e9:70:3c:15:41:c4:f2:b7:8e:50:e9:d8:1c:7d:b7:
         65:7c:8a:e9:43:16:94:89:25:59:00:19:42:23:98:49:97:b7:
         23:8a:97:ec:25:e8:f9:29:fa:13:92:5e:62:35:c4:8e:13:04:
         e6:2c:1c:c0:46:3a:88:8c:88:13:29:82:2a:fc:bd:68:a1:9f:
         6e:52:05:a1:d0:03:a6:12:a3:fa:53:40:72:0a:4f:a3:97:f4:
         5d:64:9b:09:f6:9f:4d:e4:9f:8f:0d:f3:8b:10:ff:c8:64:60:
         6b:39:b4:21:d5:01:b3:03:22:bd:bd:3c:3d:86:36:12:1e:a4:
         82:d7:60:f6:d2:7b:41:e3:28:be:18:7c:0a:67:8f:9a:9f:f5:
         75:49:d3:d8:3a:0d:f6:85:d6:02:96:5f:9b:85:c3:23:02:ae:
         78:73:24:a6:93:7c:95:84:75:4d:dc:43:f6:59:75:e6:8a:86:
         78:8b:a1:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:46 2023 by rpki-client on console-fra.rpki-client.org