Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a343030303a3a2f33342d3334203d3e20313430343233.roa
File:                     323430363a323063303a343030303a3a2f33342d3334203d3e20313430343233.roa (raw, json)
Hash identifier:          oKot5Ysu83fUemMNRdtgKMNMWh6dhG48XKZblrXcejI=
Subject key identifier:   5C:E3:13:1A:90:28:C8:25:62:63:16:EA:8E:3E:58:5D:F5:99:9D:D8
Certificate issuer:       /CN=7CFD0F39FE2E90EA8B1F5D32D476E387352CB874
Certificate serial:       4020F3490F83D1E12B451BB9F13B849B6721A5DF
Authority key identifier: 7C:FD:0F:39:FE:2E:90:EA:8B:1F:5D:32:D4:76:E3:87:35:2C:B8:74
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a343030303a3a2f33342d3334203d3e20313430343233.roa
Signing time:             Thu 08 Sep 2022 04:27:09 +0000
ROA not before:           Thu 08 Sep 2022 04:22:09 +0000
ROA not after:            Thu 07 Sep 2023 04:27:09 +0000
asID:                     140423
IP address blocks:        2406:20c0:4000::/34 maxlen: 34

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:20:f3:49:0f:83:d1:e1:2b:45:1b:b9:f1:3b:84:9b:67:21:a5:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CFD0F39FE2E90EA8B1F5D32D476E387352CB874
        Validity
            Not Before: Sep  8 04:22:09 2022 GMT
            Not After : Sep  7 04:27:09 2023 GMT
        Subject: CN=5CE3131A9028C825626316EA8E3E585DF5999DD8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:12:0c:a6:c1:08:92:03:be:28:1f:d9:5e:a4:
                    7e:58:e1:0e:75:7a:d3:c1:53:81:a9:b8:45:44:2d:
                    dc:21:34:93:bf:94:3a:42:e1:11:75:eb:04:e2:7e:
                    0c:22:89:46:e4:8f:c4:90:f9:85:7d:a6:9a:4e:77:
                    6e:99:a4:97:94:7e:7d:f7:9c:6e:e9:6b:ce:8d:e5:
                    1b:d1:c2:82:fb:83:07:58:31:fc:a1:a4:7d:8f:ca:
                    ba:48:3c:b7:a8:36:c8:41:01:ec:22:c8:eb:32:14:
                    26:d3:b2:69:53:cb:ee:53:1a:f2:a8:0c:59:29:98:
                    5e:e5:66:76:fc:71:51:f1:5e:88:e6:d6:ba:d9:3e:
                    04:6f:5e:76:64:33:a4:ec:dc:33:fe:fa:a6:54:77:
                    ad:59:bf:73:2f:21:b3:e8:ac:fa:90:bb:7b:a5:19:
                    06:18:1b:58:5d:77:f7:e9:03:c4:7d:a3:72:15:4c:
                    78:f8:71:0c:26:bb:e7:eb:f6:55:f9:ec:79:be:54:
                    03:f2:35:b4:30:be:f1:dd:7e:92:4b:8d:df:59:0a:
                    98:27:4c:6e:07:14:3f:6e:55:b4:4d:d5:2e:0c:bf:
                    3e:2d:90:99:5f:95:a8:fb:73:8b:7f:67:0f:4f:1e:
                    ae:35:02:8b:d4:ad:52:e1:2d:10:2c:78:a7:8d:2d:
                    21:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:E3:13:1A:90:28:C8:25:62:63:16:EA:8E:3E:58:5D:F5:99:9D:D8
            X509v3 Authority Key Identifier:
                keyid:7C:FD:0F:39:FE:2E:90:EA:8B:1F:5D:32:D4:76:E3:87:35:2C:B8:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a343030303a3a2f33342d3334203d3e20313430343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:20c0:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         71:86:75:01:44:6c:10:29:a9:98:7b:bb:ac:25:27:72:2c:54:
         e8:ec:43:95:f6:3e:aa:a2:94:8d:f9:83:61:90:33:dd:e4:b6:
         10:ee:c1:d9:8e:b4:ae:06:a9:08:04:22:2d:cb:2e:94:4b:c2:
         c3:8a:fd:dc:3f:76:ea:e7:fa:4c:6a:9a:07:f9:af:ab:5b:dc:
         54:48:6a:f3:9c:6f:c5:36:ba:da:35:2c:c6:0c:1e:82:41:f5:
         6c:4a:66:b9:64:55:b8:b2:a5:03:52:52:35:26:f8:f8:01:bf:
         55:8e:ca:1e:5e:0c:bb:2e:e4:4c:71:dd:bc:13:6e:a7:a4:71:
         c6:30:c7:87:eb:d5:dd:94:81:0a:53:78:c5:1f:ae:02:c0:da:
         11:4d:29:99:0e:30:ba:60:7d:1d:7b:44:85:a0:ca:24:04:22:
         fb:f1:9d:12:1b:e5:a5:5b:2f:d9:a9:f9:96:eb:5f:0a:cc:fd:
         e2:75:e7:1b:30:ed:ba:33:dc:42:27:6b:b3:77:7e:22:fa:43:
         b7:7a:26:fc:f1:a3:b3:15:a1:7d:84:e3:66:d6:dd:54:63:ac:
         f9:73:2c:1c:da:ee:e5:d7:cc:91:c7:94:14:01:12:dc:98:b2:
         78:5b:b6:a5:6f:ce:67:52:f0:c1:48:bb:00:6a:6e:a2:a0:a8:
         73:98:55:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:01 2024 by rpki-client on console-fra.rpki-client.org