Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131322e37382e3134322e302f32342d3234203d3e203137343531.roa
File:                     3131322e37382e3134322e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          xM+3udiqeqJ4ESiRvXWI9tpEMmOw1+NadwtTaHuOK0g=
Subject key identifier:   43:FF:13:81:6E:67:83:A8:D6:C7:AB:F5:C1:72:C0:1D:9E:59:AC:6B
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       242B9621323A744241F4CD4B5B35D7EEA7FB2904
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131322e37382e3134322e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:01:15 +0000
ROA not before:           Wed 29 Sep 2021 23:56:15 +0000
ROA not after:            Fri 30 Sep 2022 00:01:15 +0000
asID:                     17451
IP address blocks:        112.78.142.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:2b:96:21:32:3a:74:42:41:f4:cd:4b:5b:35:d7:ee:a7:fb:29:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:56:15 2021 GMT
            Not After : Sep 30 00:01:15 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:1f:93:cb:02:c3:d5:22:60:06:90:a8:d9:04:
                    c6:5c:de:2b:1c:9b:50:58:74:c7:31:e1:6d:c8:76:
                    fd:3a:a2:72:08:50:56:14:0a:54:0d:52:5d:5c:ea:
                    cc:d3:1e:1e:31:ec:3a:a3:23:f6:54:85:89:6e:29:
                    b6:4a:11:2f:fe:f1:31:0d:c2:1c:e7:e8:16:51:30:
                    7c:ca:04:b4:39:ca:a9:d5:55:35:91:f7:a4:dd:c8:
                    67:d6:00:e4:6d:59:c5:2f:17:ea:96:3b:59:90:76:
                    81:82:f9:65:d1:36:c9:83:11:00:34:e0:75:ec:fc:
                    98:a1:93:82:bd:94:25:0e:db:08:ba:1d:17:87:d6:
                    5d:a1:fb:a9:ea:cd:0a:f1:9f:41:ef:55:7c:ab:e6:
                    36:b3:66:8f:04:f1:c7:9f:b9:2e:7b:cc:00:8c:08:
                    0c:1a:ed:bd:d8:b3:d9:d3:6d:a2:0b:0f:01:ab:4c:
                    d0:17:9c:8a:61:83:33:6b:60:e8:ea:b7:e0:14:24:
                    bd:6a:f5:f2:6a:5b:59:a0:e3:16:2f:50:34:88:23:
                    1a:8c:1e:af:de:3f:70:02:be:9a:5d:61:50:a8:8a:
                    25:7a:ab:82:43:60:bc:fb:91:05:97:49:ab:61:32:
                    c0:ad:d6:a5:0e:eb:57:29:0b:89:f3:18:ac:03:a4:
                    2c:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:FF:13:81:6E:67:83:A8:D6:C7:AB:F5:C1:72:C0:1D:9E:59:AC:6B
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131322e37382e3134322e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.78.142.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:ac:1f:f4:5d:f7:9b:43:34:0a:61:46:4e:d6:05:47:82:6a:
         bb:cd:37:bb:00:e4:6c:2c:1e:cc:b9:e0:b9:06:37:2a:b6:9a:
         dc:a7:ee:97:19:18:51:ae:43:a1:ea:d7:20:63:29:79:47:9d:
         db:3c:52:3e:0c:cf:3d:f6:b5:7e:0b:55:2f:a4:18:49:82:eb:
         4f:ae:ad:b9:d9:98:cf:fc:bb:37:b9:84:11:fc:6c:12:f7:65:
         db:51:3a:16:f1:58:13:83:bf:12:67:22:22:a3:da:52:79:6b:
         e6:1c:4b:a9:80:cf:94:93:34:39:90:94:36:39:02:7e:27:e5:
         db:a5:26:b0:e1:54:e5:4f:34:02:a3:40:80:68:2b:83:01:a7:
         71:90:a5:67:1e:15:89:d9:41:4f:66:e2:06:d6:e8:47:2c:89:
         53:f7:3a:90:7d:0e:51:22:0c:32:4e:0a:e8:b5:15:c6:a2:d3:
         c1:de:b5:e3:15:70:5b:aa:b4:f1:ef:a6:1c:b4:95:5c:a5:e8:
         25:2f:85:ac:e5:61:1b:04:fb:61:90:65:ed:2f:7e:f6:80:2b:
         12:7c:e1:6e:98:87:0d:2f:71:97:c6:c2:eb:94:31:11:4c:f2:
         23:32:4f:31:47:42:23:42:29:af:81:5b:f6:89:40:50:2a:11:
         d6:d4:0a:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:02 2024 by rpki-client on console-fra.rpki-client.org