Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3230332e3134322e38362e302f32342d3234203d3e203137343531.roa
File:                     3230332e3134322e38362e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          px8ZPJtHTux25xLYtnO/yRqicPvXFbNmNZAv9f1wuSk=
Subject key identifier:   C9:3A:55:31:34:7E:B4:84:11:BD:B9:41:09:C2:F8:AF:A2:3C:3C:7A
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       72CB3BCEB677DE8BAB9E2C140030BD8803CBDC66
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3230332e3134322e38362e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:27 +0000
ROA not before:           Wed 29 Sep 2021 23:55:27 +0000
ROA not after:            Fri 30 Sep 2022 00:00:27 +0000
asID:                     17451
IP address blocks:        203.142.86.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:cb:3b:ce:b6:77:de:8b:ab:9e:2c:14:00:30:bd:88:03:cb:dc:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:27 2021 GMT
            Not After : Sep 30 00:00:27 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:30:28:08:6e:df:00:a0:5f:89:aa:e4:86:74:
                    95:04:1a:41:4f:18:1a:9b:97:b2:ee:22:95:48:1d:
                    d3:fd:52:db:ac:75:5e:42:32:9f:94:73:8d:8e:7c:
                    13:53:62:34:86:be:f1:4b:3e:14:aa:05:5b:e9:45:
                    7e:5b:97:10:2c:af:9b:da:73:90:96:ea:66:a6:15:
                    1d:13:79:0f:bc:a5:86:34:4c:b7:0a:fb:24:15:fd:
                    b7:31:06:e9:fb:30:30:25:6a:18:9d:b4:aa:b2:16:
                    f6:15:a2:33:4a:7a:05:82:7b:2c:2b:64:05:df:d1:
                    d4:ca:33:36:da:22:f3:47:60:f8:6c:9e:4a:74:1c:
                    f0:9b:51:77:40:c9:9b:04:55:27:3e:77:f1:a7:f6:
                    4f:b9:93:f8:4f:f2:43:ce:1f:a0:09:27:fb:92:df:
                    67:2d:35:e0:db:2a:3f:b6:be:89:bc:99:a0:7d:27:
                    c3:fd:49:b3:65:b4:b8:1e:9e:f9:d9:3e:8e:44:67:
                    e2:0d:e8:f9:46:6f:17:ba:63:f2:8c:0b:6d:bf:03:
                    55:e7:d3:ec:ca:9a:b1:fe:c7:41:d0:37:1f:d2:29:
                    96:19:79:a4:68:72:a6:1d:be:1a:b4:33:a7:39:12:
                    34:62:93:a0:4f:a6:da:dd:e0:83:d3:d3:a1:46:8d:
                    a6:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:3A:55:31:34:7E:B4:84:11:BD:B9:41:09:C2:F8:AF:A2:3C:3C:7A
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3230332e3134322e38362e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.142.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:9a:4e:25:40:0b:a1:d9:60:c2:af:2b:3b:4d:fa:33:01:45:
         ff:c9:c9:65:26:5c:0a:2b:9a:dc:4d:d9:4b:ed:16:f4:27:1f:
         c9:eb:a2:f4:b6:0d:58:89:6b:92:e0:a0:81:d0:c7:be:d1:2c:
         62:28:02:61:e5:32:b6:d4:16:6b:28:1e:a2:8b:a3:90:76:aa:
         b2:24:45:eb:68:ba:9c:f8:2d:87:a7:bc:a2:7b:bb:66:56:9f:
         28:f3:5a:e7:3b:88:47:12:5a:d9:41:b4:82:f0:6c:c0:99:67:
         3e:30:02:7f:1e:69:6f:e0:e9:ff:37:4f:bb:cc:6c:ca:00:fa:
         73:79:1d:a4:f0:e7:40:01:7a:34:99:15:e1:8e:60:9e:58:92:
         05:53:91:d3:df:62:20:b2:04:ad:b7:c2:46:4c:a4:05:f5:1a:
         27:86:01:b1:3b:33:68:0f:88:22:33:8f:81:f2:ac:4d:e8:ec:
         96:e8:b9:a2:3a:3b:c9:f0:e5:27:45:7b:39:c4:c4:af:cf:69:
         98:d4:55:b0:9c:b9:9a:ad:5a:49:78:da:e2:4e:80:52:6d:e0:
         10:fc:4a:ad:59:c2:5b:92:9a:79:8f:f1:48:cd:02:f7:34:63:
         03:c0:e9:79:49:4f:1f:9d:b0:90:f4:b0:c9:15:a7:b3:49:22:
         e4:1f:c1:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:46 2023 by rpki-client on console-fra.rpki-client.org