Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e3131312e302f32342d3234203d3e203137343531.roa
File:                     3131372e3130322e3131312e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          tTta7As91rBxI1/pfjsnLONeAbAphQJwQNvinJXY2Nc=
Subject key identifier:   FB:EE:B9:F9:69:9F:76:34:8A:48:2F:0C:57:06:9B:0C:DA:E9:E3:81
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       095E5B829DB941FE1BAACAC9A06DBD0DF5630235
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e3131312e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:29 +0000
ROA not before:           Wed 29 Sep 2021 23:55:29 +0000
ROA not after:            Fri 30 Sep 2022 00:00:29 +0000
asID:                     17451
IP address blocks:        117.102.111.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:5e:5b:82:9d:b9:41:fe:1b:aa:ca:c9:a0:6d:bd:0d:f5:63:02:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:29 2021 GMT
            Not After : Sep 30 00:00:29 2022 GMT
        Subject: CN=3082010A0282010100DE531D2FB729E66AE0552C04FA9757F5F7F39E37ABCFB1217E94DDC93C2CD336B96FDCFDCB45564F29FD0FB2395FEECAA1FC7CF8FE4977E869647E4D2AB78E30D6919065CE4F4A86A880A21E2996A658859451135735E7A42507C2E4E8034141350AEACA32F3F509500E3AD5CBE957769B9D92035099982783164536C56F145DB0609DEC819E20CEB05657E788DB1096D04C7850BE1DD50E29AE1680F583E60110794CE676FAB30656EAA3DC0E880E06D3A13CCBF9363B3C88E4465B1FB57CB204C470D2C38560CFB1820A978E3E189FB6D6629B387E0F72BD21D4125DA9C366AEFF2B4FF7E66226E432D7F2475DDE67A8920DDA96DF19618A31AE1A8E05ABAD0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:53:1d:2f:b7:29:e6:6a:e0:55:2c:04:fa:97:
                    57:f5:f7:f3:9e:37:ab:cf:b1:21:7e:94:dd:c9:3c:
                    2c:d3:36:b9:6f:dc:fd:cb:45:56:4f:29:fd:0f:b2:
                    39:5f:ee:ca:a1:fc:7c:f8:fe:49:77:e8:69:64:7e:
                    4d:2a:b7:8e:30:d6:91:90:65:ce:4f:4a:86:a8:80:
                    a2:1e:29:96:a6:58:85:94:51:13:57:35:e7:a4:25:
                    07:c2:e4:e8:03:41:41:35:0a:ea:ca:32:f3:f5:09:
                    50:0e:3a:d5:cb:e9:57:76:9b:9d:92:03:50:99:98:
                    27:83:16:45:36:c5:6f:14:5d:b0:60:9d:ec:81:9e:
                    20:ce:b0:56:57:e7:88:db:10:96:d0:4c:78:50:be:
                    1d:d5:0e:29:ae:16:80:f5:83:e6:01:10:79:4c:e6:
                    76:fa:b3:06:56:ea:a3:dc:0e:88:0e:06:d3:a1:3c:
                    cb:f9:36:3b:3c:88:e4:46:5b:1f:b5:7c:b2:04:c4:
                    70:d2:c3:85:60:cf:b1:82:0a:97:8e:3e:18:9f:b6:
                    d6:62:9b:38:7e:0f:72:bd:21:d4:12:5d:a9:c3:66:
                    ae:ff:2b:4f:f7:e6:62:26:e4:32:d7:f2:47:5d:de:
                    67:a8:92:0d:da:96:df:19:61:8a:31:ae:1a:8e:05:
                    ab:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:EE:B9:F9:69:9F:76:34:8A:48:2F:0C:57:06:9B:0C:DA:E9:E3:81
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e3131312e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.102.111.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:b4:38:91:85:da:48:a6:52:45:a7:d1:29:b0:6f:10:d0:60:
         8f:60:44:d2:7d:2d:02:0e:83:e0:3b:22:07:85:f3:92:b0:7d:
         29:4f:7c:3e:5a:26:f7:1b:fd:9e:1d:90:0b:0f:0f:be:af:00:
         b8:3e:e2:e7:82:c2:08:40:4a:c5:cd:c3:1c:66:2d:94:fa:65:
         58:fc:7d:c3:88:ce:7b:2a:69:7a:bb:4b:74:d6:43:74:f2:29:
         1c:e7:74:3b:1c:d0:e7:f6:d3:81:8a:be:f6:dc:68:86:0f:fe:
         40:38:45:8d:07:60:80:13:ca:c4:b0:63:11:80:ee:52:1d:ad:
         0a:1f:41:0e:7d:e8:f0:d3:63:8a:34:1c:eb:79:c3:35:d8:be:
         7c:89:10:07:8a:96:62:81:6c:66:86:64:df:3b:86:e3:51:e5:
         32:a2:c6:c3:24:b2:7d:6c:1a:46:3d:53:c7:da:70:5a:4c:b4:
         06:ea:26:86:3f:a3:8e:1d:17:29:35:66:10:28:3b:94:0a:93:
         f8:73:08:bd:4a:dd:cc:9c:cd:86:bf:48:13:b9:7e:53:a6:92:
         46:a0:c9:75:e0:11:77:6f:13:6a:02:7a:9e:2f:f4:a8:80:23:
         5a:af:36:ef:76:3d:c1:cc:e8:c1:29:72:77:25:4e:99:37:4f:
         c3:39:37:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:02 2024 by rpki-client on console-fra.rpki-client.org