Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131322e37382e3135322e302f32342d3234203d3e203338343832.roa
File:                     3131322e37382e3135322e302f32342d3234203d3e203338343832.roa (raw, json)
Hash identifier:          f5CnNX7rRea69UvIiK2+Ex2cMP4JCb281raJuJGxYPc=
Subject key identifier:   30:C2:2F:A6:64:33:26:62:7E:56:18:A1:15:84:C1:9C:DD:5A:58:36
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       44ED945D98E6721EA4D7BC17C4D20D5DEA86C86C
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131322e37382e3135322e302f32342d3234203d3e203338343832.roa
Signing time:             Mon 31 Jan 2022 09:58:46 +0000
ROA not before:           Mon 31 Jan 2022 09:53:46 +0000
ROA not after:            Tue 31 Jan 2023 09:58:46 +0000
asID:                     38482
IP address blocks:        112.78.152.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:ed:94:5d:98:e6:72:1e:a4:d7:bc:17:c4:d2:0d:5d:ea:86:c8:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Jan 31 09:53:46 2022 GMT
            Not After : Jan 31 09:58:46 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:03:c8:09:23:91:95:4a:6f:f1:c9:30:42:56:
                    43:92:2e:dc:51:c1:5d:48:15:11:62:14:15:7c:de:
                    59:65:d0:b5:12:47:41:bb:11:a5:c3:9e:b7:13:1f:
                    17:9e:e2:98:c0:f3:10:35:ac:2f:88:b4:ba:99:cd:
                    74:2d:97:a9:38:5f:56:7d:6d:fb:16:a3:85:15:78:
                    4f:b4:73:b6:0f:08:ae:b2:04:15:df:0d:61:f4:57:
                    9e:17:68:8c:d4:31:e7:bb:0f:6a:5c:bd:cf:03:83:
                    82:92:1e:21:4c:c4:88:47:79:5b:f7:6c:72:3c:36:
                    8b:a0:55:f5:28:cf:43:8b:7d:a9:e3:81:cd:2d:91:
                    61:2b:3a:09:2a:7c:34:c4:af:12:d0:07:a1:13:69:
                    79:34:0d:30:c9:a8:08:1e:0b:db:f5:98:2f:72:f1:
                    66:5d:65:eb:a3:f6:1f:75:68:48:0e:ec:b6:cc:2b:
                    0d:e6:db:57:a0:31:40:84:61:30:f1:f9:08:b0:1c:
                    cd:ee:6a:8c:68:fb:07:56:31:96:1c:c0:16:e3:29:
                    21:49:f1:42:e0:38:d0:83:16:77:72:43:d3:34:4d:
                    79:4f:9a:5e:b5:9b:9b:f0:fb:c1:c8:2b:28:d0:f3:
                    05:1a:a9:a6:09:47:14:0f:8a:d2:5f:af:a0:c0:65:
                    ed:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:C2:2F:A6:64:33:26:62:7E:56:18:A1:15:84:C1:9C:DD:5A:58:36
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131322e37382e3135322e302f32342d3234203d3e203338343832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.78.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:b4:bf:fc:88:81:35:4e:25:d5:1d:10:ca:b5:4a:e8:4a:83:
         9f:b1:a5:75:f6:30:22:a3:e0:1e:50:74:5f:d0:d4:92:76:30:
         dd:f2:48:27:e0:f1:e1:c5:97:ff:12:3e:31:38:42:e9:e3:ff:
         75:32:3c:c3:4e:1d:9b:df:de:e4:20:33:9c:da:7a:e0:d1:a6:
         21:33:9d:63:90:66:22:aa:1c:fd:bf:d2:e5:65:ce:ea:9c:c7:
         dc:2c:ca:3d:50:42:f1:a2:d4:08:e0:06:83:07:58:ac:72:73:
         98:20:ed:39:7e:79:54:57:f4:0c:eb:36:d9:3d:d3:2a:07:09:
         7f:64:59:b5:04:28:82:37:07:3f:28:df:99:69:ab:64:21:cb:
         93:fd:93:3e:15:14:80:94:ef:f3:a2:6e:c5:b2:c0:1e:fd:c4:
         a6:81:c8:6b:90:3b:7c:23:4d:af:54:1a:b2:e3:3b:b5:ff:e8:
         f0:01:b8:cd:cd:49:fc:61:e1:d3:4b:46:95:ee:3d:e1:bd:20:
         b9:29:6d:12:86:cf:15:a2:87:e4:d0:6f:af:68:14:f3:38:e3:
         79:5c:b4:91:71:7f:0d:eb:a0:a5:d8:df:02:9e:24:d8:06:36:
         91:20:ef:cb:c3:11:30:36:e5:67:9e:40:5b:20:a4:17:a5:f8:
         f2:93:7c:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:02 2024 by rpki-client on console-fra.rpki-client.org