Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a323030303a3a2f34382d3438203d3e20313430343233.roa
File:                     323430363a323063303a323030303a3a2f34382d3438203d3e20313430343233.roa (raw, json)
Hash identifier:          s0Qg3dJHIA+Hl9nShfN4/KRy5sb/snLDVVLNAZ1dgmU=
Subject key identifier:   CF:13:1F:F9:2D:0A:30:DE:EC:64:46:18:6F:1B:AA:5B:33:E1:8E:63
Certificate issuer:       /CN=7CFD0F39FE2E90EA8B1F5D32D476E387352CB874
Certificate serial:       6AB36BA0695821AE7D206F0B2DCFA9564790BDDD
Authority key identifier: 7C:FD:0F:39:FE:2E:90:EA:8B:1F:5D:32:D4:76:E3:87:35:2C:B8:74
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a323030303a3a2f34382d3438203d3e20313430343233.roa
Signing time:             Thu 08 Sep 2022 04:28:59 +0000
ROA not before:           Thu 08 Sep 2022 04:23:59 +0000
ROA not after:            Thu 07 Sep 2023 04:28:59 +0000
asID:                     140423
IP address blocks:        2406:20c0:2000::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:b3:6b:a0:69:58:21:ae:7d:20:6f:0b:2d:cf:a9:56:47:90:bd:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CFD0F39FE2E90EA8B1F5D32D476E387352CB874
        Validity
            Not Before: Sep  8 04:23:59 2022 GMT
            Not After : Sep  7 04:28:59 2023 GMT
        Subject: CN=CF131FF92D0A30DEEC6446186F1BAA5B33E18E63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:04:6a:63:19:95:17:e0:02:50:15:e6:0f:0b:
                    b4:ed:6c:5d:6a:32:43:74:03:91:fb:15:ff:ca:de:
                    a3:dc:65:c2:c3:ef:db:b5:70:5b:08:c3:eb:d4:5d:
                    25:08:f9:3a:37:bc:b5:b9:ed:07:5d:c4:d6:ca:a3:
                    c1:73:b3:71:c9:7c:63:50:a2:e4:83:ae:11:f4:c9:
                    f9:bb:cf:4f:5c:ab:8a:20:d2:56:71:c8:70:15:ac:
                    b3:cd:cf:aa:a1:21:46:fe:b4:a3:1e:b9:40:df:29:
                    95:e5:55:33:ac:67:fe:4a:8c:92:80:02:13:b3:d5:
                    a7:45:d9:c4:97:51:e2:97:c7:01:46:77:a7:0c:a6:
                    45:67:31:ed:15:1f:50:2a:61:c3:1b:f1:4a:f9:83:
                    2d:cf:1f:93:d6:59:d4:9e:b8:0b:37:bc:31:56:27:
                    0a:79:b4:b2:a8:19:b0:f3:92:be:28:e1:b6:7d:5b:
                    98:e9:3f:6a:66:eb:14:ab:a0:27:ec:03:d0:a4:07:
                    82:38:a0:c4:ca:96:82:38:3d:64:38:f5:52:79:51:
                    4f:11:68:ad:ac:e7:44:61:e4:fd:8c:44:bb:13:c5:
                    e5:10:a2:75:45:8b:b4:ea:3c:86:db:ab:76:a6:8a:
                    2c:7f:de:a3:37:5d:63:2c:78:fc:46:43:e0:3a:cd:
                    d0:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:13:1F:F9:2D:0A:30:DE:EC:64:46:18:6F:1B:AA:5B:33:E1:8E:63
            X509v3 Authority Key Identifier:
                keyid:7C:FD:0F:39:FE:2E:90:EA:8B:1F:5D:32:D4:76:E3:87:35:2C:B8:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a323030303a3a2f34382d3438203d3e20313430343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:20c0:2000::/48

    Signature Algorithm: sha256WithRSAEncryption
         14:70:3b:c6:ee:30:62:bd:c2:67:47:d3:cc:69:c7:8b:e8:2b:
         6c:99:01:d6:4b:ab:b4:ca:8e:d7:11:54:31:00:ea:cd:9f:0c:
         f3:f5:ca:93:4c:7f:b5:f0:ae:bd:65:a3:11:73:36:74:6a:64:
         84:66:ea:15:ca:d1:3c:7b:0d:fa:b6:20:68:79:85:48:b4:7f:
         42:b5:a9:ac:79:f8:00:1a:17:33:71:80:57:22:28:c3:7a:8c:
         c9:5e:04:98:b4:c8:17:28:ee:7b:f6:b4:4b:46:e2:0f:bd:de:
         ca:f9:95:c1:8d:15:03:5c:9a:77:80:10:cd:32:1e:b6:26:d0:
         7a:fa:ef:11:8b:57:1f:1a:a0:38:d1:e4:cc:9f:28:74:b6:12:
         68:a5:59:bc:89:20:b2:02:60:8c:3d:84:46:a6:e1:70:4b:c1:
         f9:e6:3a:21:e7:84:14:7c:43:e3:48:e4:56:bc:5a:fd:73:13:
         1d:1c:07:1b:fa:ee:0f:e0:c4:c2:45:2a:69:0e:7b:76:d5:82:
         e7:85:24:69:3d:1a:99:a6:35:75:32:c5:c3:8a:19:8e:a9:64:
         7b:b5:57:18:76:12:64:14:e9:0e:55:0f:b0:9a:70:d4:f8:9f:
         ad:e6:90:af:96:22:fe:91:ec:b7:50:7a:f0:09:e8:26:ae:5a:
         7d:9c:10:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:01 2024 by rpki-client on console-fra.rpki-client.org