Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a313031353a3a2f34382d3438203d3e203137343531.roa
File:                     323430343a383030303a313031353a3a2f34382d3438203d3e203137343531.roa (raw, json)
Hash identifier:          ZNx1HyWYNPqeXuknKvy/GbLL6u4fhqqqmiG4crC3ffo=
Subject key identifier:   A9:F5:B1:1A:31:2D:63:94:2F:5F:D6:96:04:58:4C:F6:83:77:24:54
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       729D22A3810F64B0853827C30D5B1510F524BDF6
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a313031353a3a2f34382d3438203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:15 +0000
ROA not before:           Wed 29 Sep 2021 23:55:15 +0000
ROA not after:            Fri 30 Sep 2022 00:00:15 +0000
asID:                     17451
IP address blocks:        2404:8000:1015::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:9d:22:a3:81:0f:64:b0:85:38:27:c3:0d:5b:15:10:f5:24:bd:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:15 2021 GMT
            Not After : Sep 30 00:00:15 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ff:fd:51:37:3f:26:24:1b:3e:74:7d:17:96:
                    03:79:2a:27:f3:27:4f:23:6b:39:55:5e:c4:5e:20:
                    de:d2:c6:04:10:cb:f1:42:a7:9c:57:38:8e:4b:ea:
                    db:eb:19:f5:a1:b6:06:72:c6:7e:62:e2:34:97:ee:
                    12:97:8c:f3:6a:21:71:50:00:56:0c:72:fa:27:15:
                    45:31:df:a8:57:8a:6b:ec:80:70:5d:a6:f2:de:e4:
                    dc:8b:65:a4:5c:ad:f4:68:61:a2:1c:f8:3f:a0:f3:
                    5a:0e:a4:34:95:d8:b1:70:fa:57:d3:73:83:13:4e:
                    65:0b:1b:b9:82:d5:34:28:67:19:1f:13:65:29:90:
                    b2:f2:4c:a7:05:eb:89:1a:c8:f9:72:1e:c3:9f:12:
                    68:dc:e5:0d:b4:87:62:9e:13:ef:87:5c:d5:65:fc:
                    61:b9:b3:fa:f5:61:a3:60:d1:18:bd:cf:e3:b9:a5:
                    47:99:0d:6e:df:f1:6b:3d:35:f3:6b:a2:91:68:27:
                    26:01:b5:0b:2c:79:2a:58:e6:5b:99:f6:f2:fc:85:
                    de:c5:e0:0f:0e:39:38:45:96:47:91:08:c9:b6:08:
                    6a:98:8e:16:b6:e7:2b:f8:5f:6f:bd:12:14:bf:2d:
                    e8:1c:88:6a:78:20:40:70:37:37:85:1e:c2:dd:9f:
                    d8:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:F5:B1:1A:31:2D:63:94:2F:5F:D6:96:04:58:4C:F6:83:77:24:54
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a313031353a3a2f34382d3438203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:8000:1015::/48

    Signature Algorithm: sha256WithRSAEncryption
         7f:c4:14:db:19:e2:16:8c:86:0b:f2:c8:cf:5e:6e:36:cf:6f:
         7c:7b:c6:c2:f1:14:5e:f3:07:c7:ba:49:15:8e:dd:1b:7a:90:
         0f:da:aa:8b:c0:4e:3e:08:de:60:0a:02:02:05:c9:48:ee:d3:
         5b:bd:6c:5b:2f:4b:28:e2:ec:a6:0e:91:6b:57:9e:c8:be:85:
         13:ba:68:79:78:ec:41:cf:2b:67:e8:09:ee:f7:1a:0d:e9:b6:
         0e:ab:4b:d4:39:48:74:91:68:fd:db:5b:e0:2e:3d:fc:ea:d1:
         3f:43:76:20:1d:6a:ef:84:fb:75:b7:b2:ed:a9:a1:6a:fe:7e:
         16:14:b7:e0:b8:53:9e:1e:40:5b:4e:13:da:6f:8e:4b:94:77:
         0e:b0:e2:f1:58:8e:f7:84:03:36:ff:a0:5a:5b:59:0c:0a:8e:
         98:a5:ea:fd:e9:c5:5d:f7:21:07:9c:9d:46:8a:a3:59:36:18:
         ef:ff:c1:85:c0:30:5a:75:35:5b:7e:ed:7a:7c:17:97:db:1d:
         78:f3:2d:b8:49:86:e0:fb:a3:81:92:f8:4a:71:26:52:4b:85:
         20:9f:95:65:ed:01:95:df:fd:47:dd:c9:b4:f2:d2:43:f4:83:
         83:a5:3e:6b:33:77:12:31:20:e3:e0:49:58:26:dc:3b:90:9b:
         17:97:5b:ce
-----BEGIN CERTIFICATE-----
MIIHLzCCBhegAwIBAgIUcp0io4EPZLCFOCfDDVsVEPUkvfYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJBNDE3
RjcyOERCRjAeFw0yMTA5MjkyMzU1MTVaFw0yMjA5MzAwMDAwMTVaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzNGRkZENTEzNzNGMjYyNDFC
M0U3NDdEMTc5NjAzNzkyQTI3RjMyNzRGMjM2QjM5NTU1RUM0NUUyMERFRDJDNjA0
MTBDQkYxNDJBNzlDNTczODhFNEJFQURCRUIxOUY1QTFCNjA2NzJDNjdFNjJFMjM0
OTdFRTEyOTc4Q0YzNkEyMTcxNTAwMDU2MEM3MkZBMjcxNTQ1MzFERkE4NTc4QTZC
RUM4MDcwNURBNkYyREVFNERDOEI2NUE0NUNBREY0Njg2MUEyMUNGODNGQTBGMzVB
MEVBNDM0OTVEOEIxNzBGQTU3RDM3MzgzMTM0RTY1MEIxQkI5ODJENTM0Mjg2NzE5
MUYxMzY1Mjk5MEIyRjI0Q0E3MDVFQjg5MUFDOEY5NzIxRUMzOUYxMjY4RENFNTBE
QjQ4NzYyOUUxM0VGODc1Q0Q1NjVGQzYxQjlCM0ZBRjU2MUEzNjBEMTE4QkRDRkUz
QjlBNTQ3OTkwRDZFREZGMTZCM0QzNUYzNkJBMjkxNjgyNzI2MDFCNTBCMkM3OTJB
NThFNjVCOTlGNkYyRkM4NURFQzVFMDBGMEUzOTM4NDU5NjQ3OTEwOEM5QjYwODZB
OTg4RTE2QjZFNzJCRjg1RjZGQkQxMjE0QkYyREU4MUM4ODZBNzgyMDQwNzAzNzM3
ODUxRUMyREQ5RkQ4NTkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAw//9UTc/JiQbPnR9F5YDeSon8ydPI2s5VV7EXiDe0sYEEMvxQqec
VziOS+rb6xn1obYGcsZ+YuI0l+4Sl4zzaiFxUABWDHL6JxVFMd+oV4pr7IBwXaby
3uTci2WkXK30aGGiHPg/oPNaDqQ0ldixcPpX03ODE05lCxu5gtU0KGcZHxNlKZCy
8kynBeuJGsj5ch7DnxJo3OUNtIdinhPvh1zVZfxhubP69WGjYNEYvc/juaVHmQ1u
3/FrPTXza6KRaCcmAbULLHkqWOZbmfby/IXexeAPDjk4RZZHkQjJtghqmI4Wtucr
+F9vvRIUvy3oHIhqeCBAcDc3hR7C3Z/YWQIDAQABo4ICPTCCAjkwHQYDVR0OBBYE
FKn1sRoxLWOUL1/WlgRYTPaDdyRUMB8GA1UdIwQYMBaAFKxVVEe6YsORB/Fr9XL4
KkF/co2/MA4GA1UdDwEB/wQEAwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzk5M2YzNTAtYjc1Ni00OTE2LThk
ODQtNDg0ZjAyNWRmZmNjLzAvQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJB
NDE3RjcyOERCRi5jcmwwdAYIKwYBBQUHAQEEaDBmMGQGCCsGAQUFBzAChlhyc3lu
YzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8yL0FDNTU1NDQ3
QkE2MkMzOTEwN0YxNkJGNTcyRjgyQTQxN0Y3MjhEQkYuY2VyMIGqBggrBgEFBQcB
CwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby8zOTkzZjM1MC1iNzU2LTQ5MTYtOGQ4NC00ODRmMDI1ZGZmY2MvMC8z
MjM0MzAzNDNhMzgzMDMwMzAzYTMxMzAzMTM1M2EzYTJmMzQzODJkMzQzODIwM2Qz
ZTIwMzEzNzM0MzUzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggr
BgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQEgAAQFTANBgkqhkiG9w0BAQsFAAOC
AQEAf8QU2xniFoyGC/LIz15uNs9vfHvGwvEUXvMHx7pJFY7dG3qQD9qqi8BOPgje
YAoCAgXJSO7TW71sWy9LKOLspg6Ra1eeyL6FE7poeXjsQc8rZ+gJ7vcaDem2DqtL
1DlIdJFo/dtb4C49/OrRP0N2IB1q74T7dbey7amhav5+FhS34LhTnh5AW04T2m+O
S5R3DrDi8ViO94QDNv+gWltZDAqOmKXq/enFXfchB5ydRoqjWTYY7//BhcAwWnU1
W37tenwXl9sdePMtuEmG4PujgZL4SnEmUkuFIJ+VZe0Bld/9R93JtPLSQ/SDg6U+
azN3EjEg4+BJWCbcO5CbF5dbzg==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:01 2023 by rpki-client on console-ams.rpki-client.org