Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a653030333a3a2f34382d3438203d3e20313530323338.roa
File:                     323430363a323063303a653030333a3a2f34382d3438203d3e20313530323338.roa (raw, json)
Hash identifier:          X+gqW/YbZ8v296/PIkGXhQTaG2947IXHucTtOAFYSZw=
Subject key identifier:   49:95:80:5A:41:7E:2E:35:FE:E4:0E:31:0E:8F:0A:AF:6C:5C:7A:47
Certificate issuer:       /CN=7CFD0F39FE2E90EA8B1F5D32D476E387352CB874
Certificate serial:       64E2D93FE6E4600C60D1215E9F646ABEC7204670
Authority key identifier: 7C:FD:0F:39:FE:2E:90:EA:8B:1F:5D:32:D4:76:E3:87:35:2C:B8:74
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a653030333a3a2f34382d3438203d3e20313530323338.roa
Signing time:             Sat 22 Oct 2022 03:12:37 +0000
ROA not before:           Sat 22 Oct 2022 03:07:37 +0000
ROA not after:            Sat 21 Oct 2023 03:12:37 +0000
asID:                     150238
IP address blocks:        2406:20c0:e003::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:e2:d9:3f:e6:e4:60:0c:60:d1:21:5e:9f:64:6a:be:c7:20:46:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CFD0F39FE2E90EA8B1F5D32D476E387352CB874
        Validity
            Not Before: Oct 22 03:07:37 2022 GMT
            Not After : Oct 21 03:12:37 2023 GMT
        Subject: CN=4995805A417E2E35FEE40E310E8F0AAF6C5C7A47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:c0:74:af:56:73:96:c7:45:7c:05:a7:99:ec:
                    a6:e3:57:31:fa:7c:c5:d7:fa:0a:9b:1b:32:1e:eb:
                    3b:62:9d:ed:32:17:d1:38:b1:4f:57:e3:d0:fa:77:
                    fc:4b:ba:ae:dd:53:7c:0b:9d:89:50:d3:f9:85:bd:
                    2a:4b:27:29:27:25:10:02:5b:14:3d:4e:73:85:31:
                    6b:64:d9:84:36:89:c0:c3:c1:2b:9b:79:27:73:48:
                    97:30:5e:c4:2e:e8:6b:f4:0c:ca:7d:00:83:56:3c:
                    e6:8d:4c:e8:dc:9c:c8:86:a4:9f:fe:9b:d9:8b:63:
                    98:7a:c2:ca:53:da:e8:f8:37:e5:f5:1c:a3:5a:63:
                    41:f6:44:ed:75:e5:61:bb:e1:7b:4b:3d:23:db:dc:
                    88:f8:c1:4a:6d:21:9f:d4:14:0c:29:bf:bb:67:ae:
                    de:43:3a:ae:c3:57:36:ec:56:b7:f5:b0:5e:a0:0a:
                    05:61:39:fb:e3:cb:28:6d:7f:03:cf:db:6b:bf:b7:
                    b2:28:e2:12:61:88:23:d6:0a:69:71:20:74:e9:2a:
                    72:13:46:4e:db:53:4b:0b:fa:24:ef:ab:d8:81:70:
                    c1:63:87:06:57:21:e6:d5:66:14:93:7c:d6:42:fc:
                    80:a3:45:0d:03:e9:af:1e:f7:74:54:9b:84:97:51:
                    7a:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:95:80:5A:41:7E:2E:35:FE:E4:0E:31:0E:8F:0A:AF:6C:5C:7A:47
            X509v3 Authority Key Identifier:
                keyid:7C:FD:0F:39:FE:2E:90:EA:8B:1F:5D:32:D4:76:E3:87:35:2C:B8:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7CFD0F39FE2E90EA8B1F5D32D476E387352CB874.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/19a00369-6840-4a95-89b1-a48518f98dc7/0/323430363a323063303a653030333a3a2f34382d3438203d3e20313530323338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:20c0:e003::/48

    Signature Algorithm: sha256WithRSAEncryption
         2f:93:0f:fa:06:61:05:34:cc:c9:af:cc:e8:25:9e:07:2d:ef:
         39:77:6a:18:cc:dc:0e:f4:83:a8:7c:0d:4b:eb:77:66:1f:f9:
         12:c1:c0:73:59:79:71:5b:38:a3:c5:9a:ec:6d:5a:1d:48:1e:
         52:b1:da:93:ff:13:1f:a6:9a:f6:b1:e9:d2:d5:50:aa:d3:13:
         c3:53:b8:76:5a:9c:fc:df:d7:e6:42:93:98:a3:53:5a:b8:bd:
         4b:c7:35:46:ec:2e:6d:f1:53:af:7f:5d:27:59:8e:ea:88:32:
         a3:92:63:08:d7:19:49:12:f1:ca:8a:ab:85:02:72:e4:ed:4f:
         9c:c8:0a:4a:11:ca:58:e0:97:44:ea:25:48:1d:9f:b6:f4:0f:
         a4:da:3a:6e:d2:ab:33:0c:c5:45:e0:d0:d1:e7:e6:a7:85:62:
         49:31:5b:e5:35:4d:ce:3d:17:11:89:6f:5a:f2:43:ec:99:1c:
         29:fd:4b:d9:24:bc:d6:be:f0:33:bf:99:d4:94:6e:f3:b4:90:
         2d:a8:ee:2e:7c:d2:01:9e:db:a1:76:17:52:fb:23:83:0b:04:
         de:42:5d:d8:a6:03:6b:8f:ae:0e:1f:05:90:79:6c:f2:f8:fe:
         ba:28:6e:6b:f8:d4:d3:8c:88:f7:47:0d:ca:85:6b:36:ca:26:
         f9:cb:5d:c9
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgIUZOLZP+bkYAxg0SFen2RqvscgRnAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoN0NGRDBGMzlGRTJFOTBFQThCMUY1RDMyRDQ3NkUzODcz
NTJDQjg3NDAeFw0yMjEwMjIwMzA3MzdaFw0yMzEwMjEwMzEyMzdaMDMxMTAvBgNV
BAMTKDQ5OTU4MDVBNDE3RTJFMzVGRUU0MEUzMTBFOEYwQUFGNkM1QzdBNDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDwwHSvVnOWx0V8BaeZ7KbjVzH6
fMXX+gqbGzIe6ztine0yF9E4sU9X49D6d/xLuq7dU3wLnYlQ0/mFvSpLJyknJRAC
WxQ9TnOFMWtk2YQ2icDDwSubeSdzSJcwXsQu6Gv0DMp9AINWPOaNTOjcnMiGpJ/+
m9mLY5h6wspT2uj4N+X1HKNaY0H2RO115WG74XtLPSPb3Ij4wUptIZ/UFAwpv7tn
rt5DOq7DVzbsVrf1sF6gCgVhOfvjyyhtfwPP22u/t7Io4hJhiCPWCmlxIHTpKnIT
Rk7bU0sL+iTvq9iBcMFjhwZXIebVZhSTfNZC/ICjRQ0D6a8e93RUm4SXUXpxAgMB
AAGjggI/MIICOzAdBgNVHQ4EFgQUSZWAWkF+LjX+5A4xDo8Kr2xcekcwHwYDVR0j
BBgwFoAUfP0POf4ukOqLH10y1HbjhzUsuHQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
OWEwMDM2OS02ODQwLTRhOTUtODliMS1hNDg1MThmOThkYzcvMC83Q0ZEMEYzOUZF
MkU5MEVBOEIxRjVEMzJENDc2RTM4NzM1MkNCODc0LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvN0NGRDBGMzlGRTJFOTBFQThCMUY1RDMyRDQ3NkUzODczNTJD
Qjg3NC5jZXIwgawGCCsGAQUFBwELBIGfMIGcMIGZBggrBgEFBQcwC4aBjHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzE5YTAwMzY5LTY4NDAtNGE5NS04
OWIxLWE0ODUxOGY5OGRjNy8wLzMyMzQzMDM2M2EzMjMwNjMzMDNhNjUzMDMwMzMz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMTM1MzAzMjMzMzgucm9hMBgGA1UdIAEB
/wQOMAwwCgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAk
BiDA4AMwDQYJKoZIhvcNAQELBQADggEBAC+TD/oGYQU0zMmvzOglngct7zl3ahjM
3A70g6h8DUvrd2Yf+RLBwHNZeXFbOKPFmuxtWh1IHlKx2pP/Ex+mmvax6dLVUKrT
E8NTuHZanPzf1+ZCk5ijU1q4vUvHNUbsLm3xU69/XSdZjuqIMqOSYwjXGUkS8cqK
q4UCcuTtT5zICkoRyljgl0TqJUgdn7b0D6TaOm7SqzMMxUXg0NHn5qeFYkkxW+U1
Tc49FxGJb1ryQ+yZHCn9S9kkvNa+8DO/mdSUbvO0kC2o7i580gGe26F2F1L7I4ML
BN5CXdimA2uPrg4fBZB5bPL4/roobmv41NOMiPdHDcqFazbKJvnLXck=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:01 2024 by rpki-client on console-fra.rpki-client.org