Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a633030303a3a2f33342d3334203d3e20313430343233.roa
File:                     323430363a323063303a633030303a3a2f33342d3334203d3e20313430343233.roa (raw, json)
Hash identifier:          4XgOGtMzc9DVzv/mb+UV5wGyDPWfdqGurC1GrAA1VBw=
Subject key identifier:   AE:7B:D1:FC:03:EA:B0:1D:5D:3C:46:A2:CF:67:4C:E0:7E:16:B2:23
Certificate issuer:       /CN=7CFD0F39FE2E90EA8B1F5D32D476E387352CB874
Certificate serial:       553DCC7F10D1C6016EDA387ADEAEF5A105409ABB
Authority key identifier: 7C:FD:0F:39:FE:2E:90:EA:8B:1F:5D:32:D4:76:E3:87:35:2C:B8:74
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a633030303a3a2f33342d3334203d3e20313430343233.roa
Signing time:             Thu 08 Sep 2022 04:27:30 +0000
ROA not before:           Thu 08 Sep 2022 04:22:30 +0000
ROA not after:            Thu 07 Sep 2023 04:27:30 +0000
asID:                     140423
IP address blocks:        2406:20c0:c000::/34 maxlen: 34

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:3d:cc:7f:10:d1:c6:01:6e:da:38:7a:de:ae:f5:a1:05:40:9a:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CFD0F39FE2E90EA8B1F5D32D476E387352CB874
        Validity
            Not Before: Sep  8 04:22:30 2022 GMT
            Not After : Sep  7 04:27:30 2023 GMT
        Subject: CN=AE7BD1FC03EAB01D5D3C46A2CF674CE07E16B223
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:01:79:f3:68:5e:19:d2:d3:a0:79:ad:7e:d5:
                    19:cf:f2:14:71:1d:f9:80:fc:68:d8:a2:d2:77:4b:
                    e3:a2:1a:09:ab:5a:66:7e:25:23:1d:94:cc:41:39:
                    02:90:3a:de:95:e4:d5:00:f5:22:fa:85:cc:82:d4:
                    80:a6:a0:b2:f4:67:ac:10:01:02:af:bc:88:61:f2:
                    dc:0c:cb:c5:7b:a2:59:6c:4a:39:2b:5b:f4:a0:a7:
                    31:54:64:2d:0b:e4:94:ad:f8:85:e9:47:20:02:6d:
                    52:4c:f7:b9:70:d2:b5:73:44:e3:a0:5f:8d:ff:44:
                    cc:cc:2d:2a:15:53:53:dd:d2:ef:18:db:66:cd:e3:
                    2e:84:cd:88:88:db:0a:36:f0:e3:01:c6:2b:13:ab:
                    0d:77:65:c8:3d:06:8c:05:82:9b:93:67:10:c3:b7:
                    75:e7:ad:48:46:b0:3b:28:55:b0:b7:37:df:66:32:
                    fe:d4:d0:af:11:e9:9d:47:77:96:5e:e7:b8:85:d3:
                    1b:30:eb:2c:5a:4d:ed:f0:74:f2:4b:30:81:33:3b:
                    e0:c4:0e:87:82:09:88:10:03:c2:94:c4:0f:e2:78:
                    42:a2:ca:f4:fc:ad:d4:23:5c:a7:ea:ba:73:4c:a5:
                    e5:ce:7f:a9:76:a7:b1:67:8e:cd:61:5e:5d:59:31:
                    c2:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:7B:D1:FC:03:EA:B0:1D:5D:3C:46:A2:CF:67:4C:E0:7E:16:B2:23
            X509v3 Authority Key Identifier:
                keyid:7C:FD:0F:39:FE:2E:90:EA:8B:1F:5D:32:D4:76:E3:87:35:2C:B8:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a633030303a3a2f33342d3334203d3e20313430343233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:20c0:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         61:37:5c:d7:28:03:9f:1a:05:05:d6:28:70:90:b9:9d:31:8a:
         d2:17:bb:0d:88:56:15:60:f9:1d:ab:17:18:e7:22:c7:77:ad:
         7c:ab:5a:e9:3d:a5:4a:10:49:ac:59:61:81:bf:f9:2c:0d:2c:
         75:bd:56:3a:c9:2e:de:46:60:92:34:f7:f1:b8:04:ea:67:b0:
         0f:a6:17:b1:0e:49:65:7d:28:f5:e6:12:e9:34:92:84:0d:b0:
         3d:91:74:75:ab:a6:7d:53:de:72:34:8f:c4:e0:56:02:eb:d3:
         01:41:62:aa:5d:ac:e5:48:4d:57:2f:e1:f5:72:a8:7f:b8:95:
         5c:34:04:f9:b8:e0:36:8b:d0:c8:3c:60:73:96:48:f3:64:53:
         2e:7f:e0:09:b1:d9:f2:e5:df:49:a6:3f:bb:42:03:70:4b:d3:
         9c:3a:d5:67:9a:54:f7:aa:c8:8a:98:2c:93:3a:ef:b0:bb:b0:
         06:55:d7:a3:c4:6b:7a:8f:fe:b0:c6:82:3e:5b:33:48:68:b3:
         59:18:c1:3a:4c:2a:eb:99:7c:6a:d0:4a:b9:7d:ae:26:cd:1f:
         5c:ed:67:52:1e:43:82:f9:75:01:da:d0:9d:cf:54:b6:8d:2d:
         26:e3:23:72:e4:d1:ee:e8:c7:b5:e6:d3:87:31:d0:f0:82:3c:
         38:92:d6:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:01 2024 by rpki-client on console-fra.rpki-client.org