Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a333a3a2f34382d3438203d3e203137343531.roa
File:                     323430343a383030303a333a3a2f34382d3438203d3e203137343531.roa (raw, json)
Hash identifier:          kP0JSGUnRPBSY10dqAjJyuz8V8ODXqOByF6JhkNF+Mg=
Subject key identifier:   1E:E4:B6:54:9B:95:C1:AB:FB:ED:93:D7:B9:96:00:C8:E9:16:8D:D0
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       282E9BE314A7FF0037606BC2414DFD931D1843B3
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a333a3a2f34382d3438203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:07 +0000
ROA not before:           Wed 29 Sep 2021 23:55:07 +0000
ROA not after:            Fri 30 Sep 2022 00:00:07 +0000
asID:                     17451
IP address blocks:        2404:8000:3::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:2e:9b:e3:14:a7:ff:00:37:60:6b:c2:41:4d:fd:93:1d:18:43:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:07 2021 GMT
            Not After : Sep 30 00:00:07 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:4d:df:c8:d6:91:43:10:8d:db:19:0d:f2:8e:
                    17:22:14:14:4d:bc:b6:b6:09:45:5d:ba:0e:01:27:
                    22:3d:63:d0:af:2a:7b:7c:e1:05:9a:af:f0:1e:6e:
                    2c:f9:7f:f3:ba:61:16:de:af:f9:50:c3:46:86:11:
                    e4:ae:1d:e7:f6:f8:cb:30:1b:a9:21:5d:82:a1:01:
                    18:f4:6f:d5:ae:a9:16:97:ce:6c:95:38:c8:c2:f8:
                    a3:a7:86:ad:a4:fb:0b:f2:9d:77:da:79:10:39:18:
                    97:53:77:d8:61:fd:9e:10:86:b3:3d:b5:aa:38:76:
                    d4:8f:77:28:24:40:cc:0a:a9:ef:cd:1f:13:8f:74:
                    9a:23:79:e4:75:9e:99:18:94:95:6c:9a:23:d0:19:
                    cc:e5:58:a8:4b:17:a6:42:78:59:29:15:ef:d8:86:
                    d8:51:66:a3:29:97:81:ee:9b:d2:fc:c9:94:56:1a:
                    7f:a3:6e:94:4d:7c:22:6c:60:ba:5a:1f:b5:89:e0:
                    ab:4e:72:58:33:b0:f7:f1:e8:ae:12:32:23:a4:6b:
                    c8:30:8d:52:aa:0a:96:72:f2:c8:ad:31:96:3f:1b:
                    9c:4f:9e:24:bb:a4:5f:a9:69:cd:3e:c2:e9:cf:ea:
                    67:3f:a6:9b:94:7d:d3:8c:43:99:3c:ab:1d:5c:b8:
                    ea:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:E4:B6:54:9B:95:C1:AB:FB:ED:93:D7:B9:96:00:C8:E9:16:8D:D0
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a333a3a2f34382d3438203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:8000:3::/48

    Signature Algorithm: sha256WithRSAEncryption
         68:65:27:f8:d9:b0:f4:2e:fa:e0:60:a6:ed:4c:63:51:04:86:
         b8:ff:52:44:e9:b2:11:a5:cd:34:67:44:05:01:92:88:88:5d:
         81:c5:6b:3d:1c:42:69:a1:41:00:65:8e:b7:58:c4:dd:8b:88:
         91:01:39:20:ce:c2:2a:bc:11:97:ee:3f:a1:d2:3e:18:5c:26:
         fd:ec:01:8a:4b:9a:56:d4:3f:8d:32:0e:0b:68:e3:ea:fe:bb:
         6c:37:35:47:4d:ee:9b:8e:a2:5c:f6:03:fe:c6:01:71:9b:54:
         f2:6a:11:97:d7:d1:06:e1:f1:79:76:dd:30:a2:87:ce:39:61:
         f7:b9:c6:e9:03:29:59:3d:81:e8:73:64:14:0b:35:26:84:77:
         c5:93:fd:43:97:bf:28:5f:7a:2f:e4:87:fe:b5:2a:40:6d:c2:
         b0:bd:8e:7d:9c:94:a9:12:88:cc:01:69:76:10:e1:1a:1c:33:
         c1:be:b1:63:16:45:1d:08:bb:b6:61:40:37:55:84:bc:31:4e:
         4d:76:f8:f3:1d:cc:a2:b8:bc:c5:62:ea:69:29:b2:6c:f0:d3:
         84:f1:74:4c:ad:b6:60:8a:65:22:cc:ab:10:59:65:c2:16:f6:
         96:3a:25:f2:d5:b4:6c:d2:80:ca:4e:8b:6d:fa:16:cc:8a:e8:
         b9:90:db:73
-----BEGIN CERTIFICATE-----
MIIHKTCCBhGgAwIBAgIUKC6b4xSn/wA3YGvCQU39kx0YQ7MwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJBNDE3
RjcyOERCRjAeFw0yMTA5MjkyMzU1MDdaFw0yMjA5MzAwMDAwMDdaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzQ0RERGQzhENjkxNDMxMDhE
REIxOTBERjI4RTE3MjIxNDE0NERCQ0I2QjYwOTQ1NURCQTBFMDEyNzIyM0Q2M0Qw
QUYyQTdCN0NFMTA1OUFBRkYwMUU2RTJDRjk3RkYzQkE2MTE2REVBRkY5NTBDMzQ2
ODYxMUU0QUUxREU3RjZGOENCMzAxQkE5MjE1RDgyQTEwMTE4RjQ2RkQ1QUVBOTE2
OTdDRTZDOTUzOEM4QzJGOEEzQTc4NkFEQTRGQjBCRjI5RDc3REE3OTEwMzkxODk3
NTM3N0Q4NjFGRDlFMTA4NkIzM0RCNUFBMzg3NkQ0OEY3NzI4MjQ0MENDMEFBOUVG
Q0QxRjEzOEY3NDlBMjM3OUU0NzU5RTk5MTg5NDk1NkM5QTIzRDAxOUNDRTU1OEE4
NEIxN0E2NDI3ODU5MjkxNUVGRDg4NkQ4NTE2NkEzMjk5NzgxRUU5QkQyRkNDOTk0
NTYxQTdGQTM2RTk0NEQ3QzIyNkM2MEJBNUExRkI1ODlFMEFCNEU3MjU4MzNCMEY3
RjFFOEFFMTIzMjIzQTQ2QkM4MzA4RDUyQUEwQTk2NzJGMkM4QUQzMTk2M0YxQjlD
NEY5RTI0QkJBNDVGQTk2OUNEM0VDMkU5Q0ZFQTY3M0ZBNjlCOTQ3REQzOEM0Mzk5
M0NBQjFENUNCOEVBOTMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAxE3fyNaRQxCN2xkN8o4XIhQUTby2tglFXboOASciPWPQryp7fOEF
mq/wHm4s+X/zumEW3q/5UMNGhhHkrh3n9vjLMBupIV2CoQEY9G/VrqkWl85slTjI
wvijp4atpPsL8p132nkQORiXU3fYYf2eEIazPbWqOHbUj3coJEDMCqnvzR8Tj3Sa
I3nkdZ6ZGJSVbJoj0BnM5VioSxemQnhZKRXv2IbYUWajKZeB7pvS/MmUVhp/o26U
TXwibGC6Wh+1ieCrTnJYM7D38eiuEjIjpGvIMI1SqgqWcvLIrTGWPxucT54ku6Rf
qWnNPsLpz+pnP6ablH3TjEOZPKsdXLjqkwIDAQABo4ICNzCCAjMwHQYDVR0OBBYE
FB7ktlSblcGr++2T17mWAMjpFo3QMB8GA1UdIwQYMBaAFKxVVEe6YsORB/Fr9XL4
KkF/co2/MA4GA1UdDwEB/wQEAwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzk5M2YzNTAtYjc1Ni00OTE2LThk
ODQtNDg0ZjAyNWRmZmNjLzAvQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJB
NDE3RjcyOERCRi5jcmwwdAYIKwYBBQUHAQEEaDBmMGQGCCsGAQUFBzAChlhyc3lu
YzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8yL0FDNTU1NDQ3
QkE2MkMzOTEwN0YxNkJGNTcyRjgyQTQxN0Y3MjhEQkYuY2VyMIGkBggrBgEFBQcB
CwSBlzCBlDCBkQYIKwYBBQUHMAuGgYRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby8zOTkzZjM1MC1iNzU2LTQ5MTYtOGQ4NC00ODRmMDI1ZGZmY2MvMC8z
MjM0MzAzNDNhMzgzMDMwMzAzYTMzM2EzYTJmMzQzODJkMzQzODIwM2QzZTIwMzEz
NzM0MzUzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggrBgEFBQcB
BwEB/wQTMBEwDwQCAAIwCQMHACQEgAAAAzANBgkqhkiG9w0BAQsFAAOCAQEAaGUn
+Nmw9C764GCm7UxjUQSGuP9SROmyEaXNNGdEBQGSiIhdgcVrPRxCaaFBAGWOt1jE
3YuIkQE5IM7CKrwRl+4/odI+GFwm/ewBikuaVtQ/jTIOC2jj6v67bDc1R03um46i
XPYD/sYBcZtU8moRl9fRBuHxeXbdMKKHzjlh97nG6QMpWT2B6HNkFAs1JoR3xZP9
Q5e/KF96L+SH/rUqQG3CsL2OfZyUqRKIzAFpdhDhGhwzwb6xYxZFHQi7tmFAN1WE
vDFOTXb48x3Mori8xWLqaSmybPDThPF0TK22YIplIsyrEFllwhb2ljol8tW0bNKA
yk6LbfoWzIrouZDbcw==
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:01 2023 by rpki-client on console-ams.rpki-client.org