Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a343030303a3a2f34382d3438203d3e20313430343233.roa
File:                     323430363a323063303a343030303a3a2f34382d3438203d3e20313430343233.roa (raw, json)
Hash identifier:          RV8vm66ib/YNYBv3VlLYvIRvZr+3HuaF8OoNlW+O7Vc=
Subject key identifier:   81:19:4A:B9:07:6A:3D:D4:AE:8F:1A:FA:21:83:BE:86:65:95:06:71
Certificate issuer:       /CN=7CFD0F39FE2E90EA8B1F5D32D476E387352CB874
Certificate serial:       7436CC2AA5DF54C2E2C957BFD68EBA4E4898C716
Authority key identifier: 7C:FD:0F:39:FE:2E:90:EA:8B:1F:5D:32:D4:76:E3:87:35:2C:B8:74
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a343030303a3a2f34382d3438203d3e20313430343233.roa
Signing time:             Thu 08 Sep 2022 04:29:07 +0000
ROA not before:           Thu 08 Sep 2022 04:24:07 +0000
ROA not after:            Thu 07 Sep 2023 04:29:07 +0000
asID:                     140423
IP address blocks:        2406:20c0:4000::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:36:cc:2a:a5:df:54:c2:e2:c9:57:bf:d6:8e:ba:4e:48:98:c7:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CFD0F39FE2E90EA8B1F5D32D476E387352CB874
        Validity
            Not Before: Sep  8 04:24:07 2022 GMT
            Not After : Sep  7 04:29:07 2023 GMT
        Subject: CN=81194AB9076A3DD4AE8F1AFA2183BE8665950671
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c9:2c:43:28:5c:43:fc:6d:c6:5c:94:49:23:
                    a0:4a:00:94:22:97:91:08:76:0a:e3:d0:d5:ed:81:
                    4f:8d:49:d3:ab:9f:18:3d:e3:61:d2:39:82:35:33:
                    c0:be:34:55:b1:42:8d:23:17:37:e1:31:7f:09:36:
                    8b:8a:d5:44:f7:3b:32:ea:5c:f2:e3:ed:dd:12:e7:
                    98:ab:5e:b8:bd:86:11:91:30:b6:01:e8:70:73:5b:
                    a1:f9:c9:3d:60:31:db:07:2f:58:09:57:e3:3c:bd:
                    c7:a6:42:69:c5:61:52:ad:69:ac:c2:71:29:5f:e8:
                    15:d1:4b:1e:5a:f8:44:82:9a:00:be:5c:03:aa:e7:
                    6c:5b:e4:69:58:3d:36:3c:b2:94:6c:d0:87:a7:1c:
                    c0:d9:23:37:48:96:c0:4a:73:00:ae:63:02:c1:04:
                    95:4a:16:99:ec:10:02:46:63:00:73:ec:8c:d5:74:
                    9e:2c:fa:d0:bd:27:60:a9:a8:1f:d1:e2:50:62:2b:
                    8f:42:5c:74:21:a9:a8:94:08:56:ce:98:e6:94:48:
                    05:cf:6d:e1:c4:db:f8:0c:02:f4:24:48:43:56:38:
                    1c:29:18:9c:6e:6b:ab:df:55:a2:73:7b:d0:67:59:
                    7e:c6:1b:6a:5e:0f:dc:e1:d8:3e:85:59:ce:0e:8a:
                    2c:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:19:4A:B9:07:6A:3D:D4:AE:8F:1A:FA:21:83:BE:86:65:95:06:71
            X509v3 Authority Key Identifier:
                keyid:7C:FD:0F:39:FE:2E:90:EA:8B:1F:5D:32:D4:76:E3:87:35:2C:B8:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a343030303a3a2f34382d3438203d3e20313430343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:20c0:4000::/48

    Signature Algorithm: sha256WithRSAEncryption
         85:3e:45:32:1f:8d:71:22:54:52:66:dc:c4:e2:9e:63:10:e3:
         71:2c:2b:0d:18:da:12:80:99:59:83:45:81:a0:fb:3b:c2:3c:
         35:b8:bb:75:ec:d0:3a:05:6c:b0:96:5a:75:ed:ac:a8:f1:22:
         72:4a:57:77:35:5c:bf:a2:90:e5:1b:18:06:4a:d6:4d:21:d4:
         e9:09:e0:15:aa:e9:e9:c2:e5:fe:af:a6:fd:b4:e8:56:1d:16:
         66:3a:0d:1c:3e:19:de:47:e4:9d:9d:7c:6b:ee:69:9b:b7:40:
         21:c3:ad:b4:fa:47:09:22:ff:ca:47:23:34:63:30:40:11:78:
         57:78:91:9a:e1:c0:c2:24:b1:a3:38:f6:ca:5e:67:71:8b:b2:
         7c:d8:6c:4b:5c:ee:90:41:ee:13:f1:ac:4a:7e:75:3d:6c:cf:
         b1:a8:db:28:f2:00:94:60:d3:39:ee:29:26:7e:39:0a:c6:6a:
         de:28:b1:db:a1:61:b0:eb:13:8c:94:0a:4f:19:61:1a:58:68:
         83:7a:91:4d:46:34:4b:36:5b:e0:a6:ce:40:52:f4:76:70:7c:
         cb:82:1c:9b:36:79:66:18:bf:f8:15:bc:0b:34:3b:83:6a:9c:
         94:31:e8:ef:13:64:33:5e:06:9e:f4:f8:6e:b5:f1:4b:8e:ae:
         39:f2:0f:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:01 2024 by rpki-client on console-fra.rpki-client.org