Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131322e37382e3137392e302f32342d3234203d3e203137343531.roa
File:                     3131322e37382e3137392e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          erU8trZmeCbEbMQKz9A1DRllKFBHuBItaTcR6T/gSsw=
Subject key identifier:   12:3F:D3:A7:62:8D:A3:BC:A3:DC:86:8E:6D:0F:23:83:AA:21:FC:8B
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       084CB52460F6ED57850F49F4188C6DDEAC57ABCF
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131322e37382e3137392e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:53 +0000
ROA not before:           Wed 29 Sep 2021 23:55:53 +0000
ROA not after:            Fri 30 Sep 2022 00:00:53 +0000
asID:                     17451
IP address blocks:        112.78.179.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:4c:b5:24:60:f6:ed:57:85:0f:49:f4:18:8c:6d:de:ac:57:ab:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:53 2021 GMT
            Not After : Sep 30 00:00:53 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:dc:1f:d7:74:43:45:4c:4b:e7:cb:01:1b:61:
                    7e:b0:a6:89:01:f1:b0:b0:cc:9c:a3:78:b8:e0:e0:
                    33:a1:0c:47:ba:3b:04:c0:ae:13:54:e3:a4:29:5b:
                    61:03:37:8f:7d:ae:7b:47:27:4d:2d:8f:18:3f:07:
                    41:c5:e4:9c:0b:76:bd:e2:49:b1:8a:e3:6a:e4:e0:
                    b7:a0:e0:51:2e:d1:a4:77:7f:2a:bd:6c:ee:c4:5a:
                    6c:3c:6d:d7:eb:b3:9c:76:07:c4:95:13:e5:d1:4e:
                    52:f6:90:18:a5:76:09:93:77:28:8c:6e:20:00:c7:
                    59:49:44:11:ae:dd:98:ee:0b:9b:06:d7:2c:1c:ea:
                    03:60:c9:7d:f7:8f:e2:d7:5b:63:e5:c3:d0:27:e1:
                    ad:94:cd:24:4f:9f:d7:5c:2c:86:45:27:d8:e4:c1:
                    a3:ae:d6:99:65:45:b8:07:41:41:3d:85:4c:a7:d3:
                    15:a9:56:96:62:3d:00:44:88:df:37:7b:cc:a6:b4:
                    56:f0:dd:23:9e:a5:7d:b5:67:cf:59:ae:36:ec:25:
                    97:e8:18:77:60:b8:cc:6d:f4:ca:9a:13:77:3e:0c:
                    e7:84:2e:b1:51:f6:5e:ea:22:8b:c4:88:99:74:04:
                    82:59:9e:71:e6:8f:68:e1:5d:6a:46:a9:37:17:c1:
                    67:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:3F:D3:A7:62:8D:A3:BC:A3:DC:86:8E:6D:0F:23:83:AA:21:FC:8B
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131322e37382e3137392e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.78.179.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:4f:b8:c8:6d:6b:7d:4d:a2:c9:21:b0:c8:17:73:64:e6:fb:
         07:cf:8f:30:61:41:80:65:9f:c4:b5:dc:a0:b2:de:0a:d0:d6:
         df:57:20:98:ce:dc:73:6a:d1:20:29:fa:55:aa:81:28:21:77:
         79:5c:85:94:a5:30:70:a2:9f:bc:b6:5d:0f:dd:6a:77:ea:51:
         52:ad:e3:54:dd:70:d7:9f:95:ac:b3:8b:a4:63:75:fc:f5:66:
         7f:8e:2d:cb:87:00:00:61:1c:95:a4:14:c6:ce:b2:9d:72:d8:
         47:dd:9a:74:e7:04:4c:c1:03:db:2f:a5:be:53:97:47:0f:28:
         c1:0e:29:24:af:89:98:db:87:a1:3e:bb:36:74:cb:f1:80:3e:
         7f:78:a8:c5:03:1d:91:6b:5d:1e:54:c7:52:ea:47:68:da:fe:
         3d:f3:31:ad:55:24:a8:e0:23:99:e8:f4:b9:16:41:cd:a0:fd:
         7a:3f:82:ef:5e:b7:9d:eb:30:1b:c2:93:4f:7e:73:eb:ee:42:
         5d:20:cb:83:2b:f2:93:74:26:1d:41:a0:33:4e:2e:3c:3c:0c:
         2b:c3:0a:bb:76:75:5f:48:52:e6:15:9f:da:7d:57:e6:9a:c9:
         fb:de:61:90:40:ba:9d:45:0b:6a:ed:55:e0:76:cc:e4:c4:dd:
         16:4b:7a:50
-----BEGIN CERTIFICATE-----
MIIHJDCCBgygAwIBAgIUCEy1JGD27VeFD0n0GIxt3qxXq88wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJBNDE3
RjcyOERCRjAeFw0yMTA5MjkyMzU1NTNaFw0yMjA5MzAwMDAwNTNaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkNEQzFGRDc3NDQzNDU0QzRC
RTdDQjAxMUI2MTdFQjBBNjg5MDFGMUIwQjBDQzlDQTM3OEI4RTBFMDMzQTEwQzQ3
QkEzQjA0QzBBRTEzNTRFM0E0Mjk1QjYxMDMzNzhGN0RBRTdCNDcyNzREMkQ4RjE4
M0YwNzQxQzVFNDlDMEI3NkJERTI0OUIxOEFFMzZBRTRFMEI3QTBFMDUxMkVEMUE0
Nzc3RjJBQkQ2Q0VFQzQ1QTZDM0M2REQ3RUJCMzlDNzYwN0M0OTUxM0U1RDE0RTUy
RjY5MDE4QTU3NjA5OTM3NzI4OEM2RTIwMDBDNzU5NDk0NDExQUVERDk4RUUwQjlC
MDZENzJDMUNFQTAzNjBDOTdERjc4RkUyRDc1QjYzRTVDM0QwMjdFMUFEOTRDRDI0
NEY5RkQ3NUMyQzg2NDUyN0Q4RTRDMUEzQUVENjk5NjU0NUI4MDc0MTQxM0Q4NTRD
QTdEMzE1QTk1Njk2NjIzRDAwNDQ4OERGMzc3QkNDQTZCNDU2RjBERDIzOUVBNTdE
QjU2N0NGNTlBRTM2RUMyNTk3RTgxODc3NjBCOENDNkRGNENBOUExMzc3M0UwQ0U3
ODQyRUIxNTFGNjVFRUEyMjhCQzQ4ODk5NzQwNDgyNTk5RTcxRTY4RjY4RTE1RDZB
NDZBOTM3MTdDMTY3MkYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAvNwf13RDRUxL58sBG2F+sKaJAfGwsMyco3i44OAzoQxHujsEwK4T
VOOkKVthAzePfa57RydNLY8YPwdBxeScC3a94kmxiuNq5OC3oOBRLtGkd38qvWzu
xFpsPG3X67OcdgfElRPl0U5S9pAYpXYJk3cojG4gAMdZSUQRrt2Y7gubBtcsHOoD
YMl994/i11tj5cPQJ+GtlM0kT5/XXCyGRSfY5MGjrtaZZUW4B0FBPYVMp9MVqVaW
Yj0ARIjfN3vMprRW8N0jnqV9tWfPWa427CWX6Bh3YLjMbfTKmhN3PgznhC6xUfZe
6iKLxIiZdASCWZ5x5o9o4V1qRqk3F8FnLwIDAQABo4ICMjCCAi4wHQYDVR0OBBYE
FBI/06dijaO8o9yGjm0PI4OqIfyLMB8GA1UdIwQYMBaAFKxVVEe6YsORB/Fr9XL4
KkF/co2/MA4GA1UdDwEB/wQEAwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzk5M2YzNTAtYjc1Ni00OTE2LThk
ODQtNDg0ZjAyNWRmZmNjLzAvQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJB
NDE3RjcyOERCRi5jcmwwdAYIKwYBBQUHAQEEaDBmMGQGCCsGAQUFBzAChlhyc3lu
YzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8yL0FDNTU1NDQ3
QkE2MkMzOTEwN0YxNkJGNTcyRjgyQTQxN0Y3MjhEQkYuY2VyMIGiBggrBgEFBQcB
CwSBlTCBkjCBjwYIKwYBBQUHMAuGgYJyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby8zOTkzZjM1MC1iNzU2LTQ5MTYtOGQ4NC00ODRmMDI1ZGZmY2MvMC8z
MTMxMzIyZTM3MzgyZTMxMzczOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzcz
NDM1MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBABwTrMwDQYJKoZIhvcNAQELBQADggEBABRPuMhta31N
oskhsMgXc2Tm+wfPjzBhQYBln8S13KCy3grQ1t9XIJjO3HNq0SAp+lWqgSghd3lc
hZSlMHCin7y2XQ/danfqUVKt41TdcNeflayzi6Rjdfz1Zn+OLcuHAABhHJWkFMbO
sp1y2EfdmnTnBEzBA9svpb5Tl0cPKMEOKSSviZjbh6E+uzZ0y/GAPn94qMUDHZFr
XR5Ux1LqR2ja/j3zMa1VJKjgI5no9LkWQc2g/Xo/gu9et53rMBvCk09+c+vuQl0g
y4Mr8pN0Jh1BoDNOLjw8DCvDCrt2dV9IUuYVn9p9V+aayfveYZBAup1FC2rtVeB2
zOTE3RZLelA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:02 2024 by rpki-client on console-fra.rpki-client.org