Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131322e37382e3133352e302f32342d3234203d3e203137343531.roa
File:                     3131322e37382e3133352e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          SMNiPvIRfzG++aRMsiZPfyB1xqigFDTHjJ4fctCzhKc=
Subject key identifier:   EF:B5:6F:A1:6A:76:15:08:21:38:08:0F:40:55:58:6A:6E:CB:50:C7
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       3B2342A11250397C3A247CFDA4B44EF3E31081D5
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131322e37382e3133352e302f32342d3234203d3e203137343531.roa
Signing time:             Mon 12 Jul 2021 20:36:57 +0000
ROA not before:           Mon 12 Jul 2021 20:31:57 +0000
ROA not after:            Tue 12 Jul 2022 20:36:57 +0000
asID:                     17451
IP address blocks:        112.78.135.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:23:42:a1:12:50:39:7c:3a:24:7c:fd:a4:b4:4e:f3:e3:10:81:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Jul 12 20:31:57 2021 GMT
            Not After : Jul 12 20:36:57 2022 GMT
        Subject: CN=3082010A0282010100AC4581CFE2A5B11F31EA2229C54FE55134A4D3962D3505A72549AF6BF58ADAD318B980D90CCE90617AB9B26D1AC3074C7A8140F992D8367EFA639D2AA97F9418A2203B16F702769307D8739BF2CB63C23A2B52CFE66E04B519D857F013109ABBA55158334A8A177413CE625072AA601D0D2C49BBB7B875ED75D68E2B5445CA80EE9337F26221729E20DBAE62AB7640A38A800908FD3F7F1C03D0B29D76AAB1D5488232C64627743B0C9E8C2EB82E7885B3CD20DAB22849D12BEB73F08E2A3A17F702A9216266851B0749E40F1019EE3E0182CE15C5BFC2467DEA75C335FC19C5801A76D9D2C614908CFC78FC46B3D1903E39790BB43AA1D8BC8C5B8D0D7F23790203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:45:81:cf:e2:a5:b1:1f:31:ea:22:29:c5:4f:
                    e5:51:34:a4:d3:96:2d:35:05:a7:25:49:af:6b:f5:
                    8a:da:d3:18:b9:80:d9:0c:ce:90:61:7a:b9:b2:6d:
                    1a:c3:07:4c:7a:81:40:f9:92:d8:36:7e:fa:63:9d:
                    2a:a9:7f:94:18:a2:20:3b:16:f7:02:76:93:07:d8:
                    73:9b:f2:cb:63:c2:3a:2b:52:cf:e6:6e:04:b5:19:
                    d8:57:f0:13:10:9a:bb:a5:51:58:33:4a:8a:17:74:
                    13:ce:62:50:72:aa:60:1d:0d:2c:49:bb:b7:b8:75:
                    ed:75:d6:8e:2b:54:45:ca:80:ee:93:37:f2:62:21:
                    72:9e:20:db:ae:62:ab:76:40:a3:8a:80:09:08:fd:
                    3f:7f:1c:03:d0:b2:9d:76:aa:b1:d5:48:82:32:c6:
                    46:27:74:3b:0c:9e:8c:2e:b8:2e:78:85:b3:cd:20:
                    da:b2:28:49:d1:2b:eb:73:f0:8e:2a:3a:17:f7:02:
                    a9:21:62:66:85:1b:07:49:e4:0f:10:19:ee:3e:01:
                    82:ce:15:c5:bf:c2:46:7d:ea:75:c3:35:fc:19:c5:
                    80:1a:76:d9:d2:c6:14:90:8c:fc:78:fc:46:b3:d1:
                    90:3e:39:79:0b:b4:3a:a1:d8:bc:8c:5b:8d:0d:7f:
                    23:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:B5:6F:A1:6A:76:15:08:21:38:08:0F:40:55:58:6A:6E:CB:50:C7
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131322e37382e3133352e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.78.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:a6:1b:82:64:12:30:eb:8a:48:16:96:89:28:ba:ac:6b:0b:
         bf:c5:40:e1:0b:c6:a9:cc:c4:68:a4:dd:51:13:64:de:9f:ba:
         04:ce:d6:66:45:4b:a7:d3:b8:cb:89:11:c7:72:ac:a7:61:a7:
         51:d6:15:52:84:a8:bc:36:c9:94:d3:89:34:05:39:15:01:0c:
         dd:93:bb:8a:41:10:bb:26:2c:85:0a:51:45:89:93:2c:f1:35:
         d9:38:9f:d0:dc:d2:ba:94:11:d8:91:b3:f7:63:a5:79:d7:af:
         cd:91:45:1c:67:49:c7:8c:ac:fd:0d:8c:cd:bd:92:28:67:3d:
         20:07:df:8f:49:b5:52:eb:cc:f8:0b:5a:a4:48:93:57:be:43:
         9a:8e:04:20:c1:dd:ee:86:e1:49:8e:df:ea:31:cb:1a:7b:49:
         09:8a:c3:a1:2d:bb:76:c6:79:69:de:30:99:20:19:a6:8e:06:
         fb:51:22:97:1f:1a:8c:db:68:c9:c9:4b:2f:5f:a4:a3:8b:d0:
         2d:03:ba:eb:ec:34:f3:52:97:cf:9e:a8:a7:d4:c1:ed:47:61:
         19:ea:c8:7c:fa:7a:9d:23:8c:84:b3:76:e2:63:9b:37:3e:83:
         5d:53:e7:0f:7f:44:31:3c:27:5a:46:f3:97:3a:0c:c0:72:02:
         1c:f8:06:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:02 2024 by rpki-client on console-fra.rpki-client.org