Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a363030303a3a2f33352d3335203d3e20313430343233.roa
File:                     323430363a323063303a363030303a3a2f33352d3335203d3e20313430343233.roa (raw, json)
Hash identifier:          hLEnPaW3Wr3eXNgJvqO5HsRN5g1vYOPFrORCyoELCbk=
Subject key identifier:   81:D9:E1:EE:89:F9:92:40:46:36:A1:FE:93:C2:A5:08:82:09:84:87
Certificate issuer:       /CN=7CFD0F39FE2E90EA8B1F5D32D476E387352CB874
Certificate serial:       19E35F8AED7D8CB2E1ED5FA8E92E36FAB68E193B
Authority key identifier: 7C:FD:0F:39:FE:2E:90:EA:8B:1F:5D:32:D4:76:E3:87:35:2C:B8:74
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a363030303a3a2f33352d3335203d3e20313430343233.roa
Signing time:             Thu 08 Sep 2022 04:28:03 +0000
ROA not before:           Thu 08 Sep 2022 04:23:03 +0000
ROA not after:            Thu 07 Sep 2023 04:28:03 +0000
asID:                     140423
IP address blocks:        2406:20c0:6000::/35 maxlen: 35

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:e3:5f:8a:ed:7d:8c:b2:e1:ed:5f:a8:e9:2e:36:fa:b6:8e:19:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CFD0F39FE2E90EA8B1F5D32D476E387352CB874
        Validity
            Not Before: Sep  8 04:23:03 2022 GMT
            Not After : Sep  7 04:28:03 2023 GMT
        Subject: CN=81D9E1EE89F992404636A1FE93C2A50882098487
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:05:70:40:2f:0e:48:b7:0c:f7:a7:f4:31:21:
                    39:a0:b6:c6:9a:f2:6f:7a:64:a8:40:dc:93:6a:d3:
                    6e:fc:a3:5c:ec:3e:e1:8c:60:fa:4f:cf:4f:04:83:
                    88:74:f7:7e:32:db:38:68:73:12:19:ae:b0:e5:44:
                    0d:45:7f:0e:c3:11:be:80:ae:51:52:11:7c:8d:0a:
                    79:a7:3d:91:ff:a3:52:44:a3:10:ca:06:fc:6f:41:
                    8e:74:d8:5e:d3:2d:3d:05:b4:82:15:e5:12:59:e5:
                    14:a2:27:19:f5:c8:b2:91:1b:70:e6:6f:dc:f9:cb:
                    1f:78:a5:13:b8:d0:c5:b0:ce:d0:46:9f:26:31:0d:
                    c3:cc:43:26:11:2b:fd:37:3b:4a:63:64:e2:1e:12:
                    4a:61:7c:47:6c:9b:d7:a2:a6:51:78:77:50:8e:a0:
                    20:9d:dd:ce:c0:01:83:79:a1:2e:7f:f9:22:0d:df:
                    a6:3e:7c:02:9b:43:ed:73:c5:53:24:f4:00:d4:d5:
                    80:26:63:b7:f8:15:20:e8:ec:1d:07:8d:3f:fb:52:
                    83:63:a7:c2:1d:90:9f:9d:e2:b1:c5:0f:28:93:ce:
                    eb:d3:f1:16:58:4f:fb:ce:87:4f:f1:fa:9a:48:d8:
                    e8:48:cc:8c:7f:91:5b:a5:a6:c2:04:bc:b4:9b:0e:
                    49:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:D9:E1:EE:89:F9:92:40:46:36:A1:FE:93:C2:A5:08:82:09:84:87
            X509v3 Authority Key Identifier:
                keyid:7C:FD:0F:39:FE:2E:90:EA:8B:1F:5D:32:D4:76:E3:87:35:2C:B8:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a363030303a3a2f33352d3335203d3e20313430343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:20c0:6000::/35

    Signature Algorithm: sha256WithRSAEncryption
         c5:e7:1b:c1:75:57:2c:da:e3:98:83:11:4a:99:a3:ef:a0:09:
         ee:80:59:c1:fe:34:b5:ca:fa:95:90:73:ed:a1:35:be:07:c8:
         78:19:f7:6b:c4:9b:6f:ad:a1:aa:03:27:ec:c6:fd:94:74:c6:
         4e:c5:a9:b1:67:b0:db:39:62:ab:f5:98:f7:1b:99:a9:7d:74:
         2c:d2:b0:04:d8:4c:90:6d:a7:b7:6b:81:48:62:5d:32:a9:60:
         1d:33:ee:b1:d8:d8:04:b4:dd:86:55:ff:83:3a:83:a0:af:77:
         df:15:9b:65:b6:9b:14:18:f3:c3:42:46:ba:20:7a:db:0b:85:
         94:d3:30:d4:63:e7:bd:eb:e3:d4:9e:7c:bd:f6:80:7a:bf:11:
         f8:6b:59:f2:78:6e:91:1d:22:7b:d1:41:a2:ca:9f:05:b0:e1:
         b9:58:c8:95:ba:9c:9a:7e:32:e1:8b:0a:3c:b5:70:9d:cf:fa:
         ea:e0:7e:aa:dd:28:be:f1:9d:9d:bf:b7:2b:b7:f5:b5:b8:4c:
         50:14:11:ee:4c:fd:52:a8:1f:77:dc:06:62:16:73:56:21:17:
         42:4c:db:78:da:c8:51:eb:62:f0:7b:b4:e6:c2:67:16:bd:e4:
         05:c8:5a:10:b2:be:dd:52:94:84:e5:7f:fe:57:81:8d:9a:a1:
         bc:b7:89:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:01 2024 by rpki-client on console-fra.rpki-client.org