Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131322e37382e3137322e302f32342d3234203d3e203137343531.roa
File:                     3131322e37382e3137322e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          uoBjxjFqLNCtjdOfncGdBXheBtQSUC3ybrlV6PVF7uo=
Subject key identifier:   4C:F3:6C:2B:E9:3A:DD:8A:94:BE:8D:5A:C2:A0:59:79:4F:AE:F8:55
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       2C6B476A64D3FD9A0014792C94F18080F031C3E9
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131322e37382e3137322e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:11 +0000
ROA not before:           Wed 29 Sep 2021 23:55:11 +0000
ROA not after:            Fri 30 Sep 2022 00:00:11 +0000
asID:                     17451
IP address blocks:        112.78.172.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:6b:47:6a:64:d3:fd:9a:00:14:79:2c:94:f1:80:80:f0:31:c3:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:11 2021 GMT
            Not After : Sep 30 00:00:11 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:62:fa:7e:5d:dd:e2:38:da:8d:5e:4e:7a:33:
                    9b:6a:a0:34:d9:8d:37:26:c7:48:56:b7:49:05:d3:
                    f2:2a:69:b5:51:32:a0:10:13:54:ff:0c:0b:eb:45:
                    13:43:3b:de:5d:ca:0e:27:35:c4:10:2b:f6:41:13:
                    de:e8:3f:39:64:cb:58:92:dc:69:b9:91:42:ed:bb:
                    06:29:1d:52:4d:15:f4:0a:0e:98:bb:0f:52:0b:a4:
                    f8:68:94:bc:65:29:80:6a:8d:ca:1b:3a:93:ce:ab:
                    96:a4:18:d3:a5:5a:c0:b3:22:72:12:e6:24:7e:03:
                    b1:c5:93:da:a7:d0:94:89:af:7a:14:91:8f:15:a3:
                    0f:f0:a7:22:8c:98:9d:50:96:b8:25:0f:cf:b7:8f:
                    d7:ac:ed:60:95:12:ca:23:54:05:63:df:8c:79:47:
                    58:fe:81:5f:ac:8c:cf:81:d3:23:a7:c4:b3:e9:99:
                    7f:f8:89:fd:ff:31:91:3f:90:ce:de:a6:ae:78:f1:
                    32:96:60:b6:18:0e:9f:9c:a7:02:9b:c9:df:b4:1e:
                    92:3f:64:cb:59:44:f3:b2:09:c9:45:e3:ee:24:f4:
                    b6:e7:f8:06:a5:12:10:1c:c2:b6:96:c6:a5:a6:b0:
                    ac:d7:af:d5:6f:e0:bd:f9:64:d4:73:e9:1d:1c:76:
                    ff:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:F3:6C:2B:E9:3A:DD:8A:94:BE:8D:5A:C2:A0:59:79:4F:AE:F8:55
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131322e37382e3137322e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.78.172.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:69:c3:05:00:76:d4:c9:70:98:7d:2e:ee:47:f4:d8:76:20:
         14:4a:6c:48:71:23:f2:da:f0:c5:c4:0d:84:8d:7f:2d:75:9b:
         b4:67:9b:2b:ed:cc:4e:d2:23:a7:66:66:fc:e8:c1:9c:67:6e:
         7d:c2:d8:d3:e8:69:8a:a3:60:a2:3c:f6:00:ca:b6:8d:96:29:
         f7:c1:aa:1c:ba:dc:5c:7d:d9:c3:7e:a0:a1:9d:0b:34:43:aa:
         92:2c:6c:b5:9a:13:f7:c7:8b:2c:ba:c2:e9:1f:39:e9:d5:13:
         f1:e3:fa:69:8a:7c:db:60:cf:ae:60:e5:82:fa:c5:dc:cc:ed:
         43:18:6b:b6:e9:4a:95:5c:e8:71:81:f5:0f:29:15:79:8d:c9:
         9e:c7:28:e6:7f:74:c6:e8:eb:cf:9c:b1:b5:52:24:57:7a:bd:
         59:c5:83:36:80:f7:e6:c2:6e:6a:ec:93:f4:85:80:a1:e1:55:
         f5:f6:f4:2f:ce:7e:0c:7d:84:47:59:01:ed:44:26:29:6f:4a:
         f9:7e:0b:9e:2d:2a:c4:24:93:91:55:b4:8e:c8:a2:69:59:c4:
         06:5c:81:b4:86:f1:2d:82:cd:ca:88:01:fd:e4:65:8f:ef:4a:
         d6:aa:d5:14:eb:1d:17:53:e3:19:e4:19:3e:98:df:76:66:79:
         f9:45:17:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:02 2024 by rpki-client on console-fra.rpki-client.org