Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131322e37382e3138382e302f32342d3234203d3e203137343531.roa
File:                     3131322e37382e3138382e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          XYjPZhwgeeN/DHA4kPGY/3ri1hREutVfliccMc/xwok=
Subject key identifier:   C5:35:89:10:AE:6E:B5:80:95:E3:30:31:47:65:F3:1B:45:60:9E:61
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       087017FDE2FADDD78B108D5C02CDA6A133324637
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131322e37382e3138382e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:50 +0000
ROA not before:           Wed 29 Sep 2021 23:55:50 +0000
ROA not after:            Fri 30 Sep 2022 00:00:50 +0000
asID:                     17451
IP address blocks:        112.78.188.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:70:17:fd:e2:fa:dd:d7:8b:10:8d:5c:02:cd:a6:a1:33:32:46:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:50 2021 GMT
            Not After : Sep 30 00:00:50 2022 GMT
        Subject: CN=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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:00:cc:12:84:2c:4f:42:14:49:01:3d:34:bf:
                    78:4e:24:c8:da:73:c9:de:0d:90:e4:18:ea:c7:ad:
                    48:37:6f:ec:03:01:cb:6d:c7:98:f8:d1:7c:1b:f2:
                    59:f0:da:74:c9:c7:c9:ec:29:42:29:83:b7:84:8b:
                    74:78:0f:fe:fa:0a:80:51:44:91:0e:e7:14:0b:e8:
                    ce:d6:c0:20:98:be:3b:e3:e6:d3:07:fd:50:48:b8:
                    78:63:77:fd:9f:b8:b8:c5:15:ba:67:0e:30:b5:3f:
                    4a:15:e5:77:99:99:5a:17:19:4b:99:64:1f:65:a7:
                    5d:be:30:0e:29:32:3a:62:37:5a:fb:99:47:ce:21:
                    bd:1b:61:74:6d:19:f2:25:77:3c:96:97:dd:7e:6f:
                    a9:da:00:0a:ed:be:08:8d:6d:86:99:42:82:62:08:
                    a5:b0:e6:0b:71:0c:ad:58:f1:20:cf:f4:f3:32:17:
                    1c:e2:e5:16:ea:71:e1:ab:16:7b:9e:a9:f6:19:80:
                    08:c3:42:4a:30:b6:3b:ef:5f:5d:11:f0:e2:87:5a:
                    c8:6f:af:30:22:b6:02:1a:44:ab:ee:f5:30:60:ad:
                    07:54:f5:3f:98:8d:ef:92:3a:2f:1d:53:17:b1:59:
                    86:e9:1f:ea:da:ba:00:ff:33:bf:f4:6a:74:f6:2f:
                    f0:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:35:89:10:AE:6E:B5:80:95:E3:30:31:47:65:F3:1B:45:60:9E:61
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131322e37382e3138382e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.78.188.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:f8:ad:1e:80:65:d6:1a:13:0d:d1:ab:6f:b8:29:37:f0:67:
         ab:89:89:d5:0d:f9:3e:4f:c1:33:86:5c:39:07:93:9e:41:11:
         7e:9f:31:14:9f:3a:7f:45:f0:48:88:6e:67:09:fc:e9:06:6a:
         e6:f0:e6:d3:b4:74:c1:2d:bb:ab:e4:d8:67:3e:1d:64:c6:3a:
         fd:9e:b6:49:0f:18:cc:10:a7:06:3a:d6:5d:6a:b0:8c:e8:4c:
         25:47:ea:89:6a:48:9c:a9:a5:11:4d:08:2c:2a:ca:c8:e6:c9:
         15:7f:3c:03:43:f7:5f:01:d0:e6:9a:03:cb:61:c0:ae:3b:3e:
         83:13:bd:69:77:a3:98:4a:6d:58:42:92:4d:17:1e:3f:ea:5b:
         92:60:6f:50:43:68:b1:a8:83:43:47:58:f0:85:8e:03:be:d9:
         cd:00:8f:e8:bf:96:f8:94:51:3b:58:ac:59:e6:20:66:70:c8:
         92:58:b0:1f:a5:b7:8d:01:e6:5d:0d:58:ed:41:7d:57:09:8e:
         46:de:3c:a2:d6:d1:44:29:42:48:d6:e3:2a:11:82:cb:ed:94:
         bb:42:67:69:27:24:d3:14:1e:d4:a1:29:49:9c:49:65:25:43:
         81:ab:fe:fa:69:79:08:66:a3:3e:48:60:17:c1:b3:0c:90:00:
         de:5a:0b:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:02 2024 by rpki-client on console-fra.rpki-client.org