Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e3132322e302f32342d3234203d3e203137343531.roa
File:                     3131372e3130322e3132322e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          k+ctm04FDQzSxznSyhgMsKJnJaxGq+hWywiPQPzg9NE=
Subject key identifier:   53:A0:DC:1A:31:05:30:52:19:24:97:4C:F9:F4:B2:8D:1E:FD:CF:A1
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       209996B438211FB5562391134AF06BF00D0454DE
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e3132322e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:31 +0000
ROA not before:           Wed 29 Sep 2021 23:55:31 +0000
ROA not after:            Fri 30 Sep 2022 00:00:31 +0000
asID:                     17451
IP address blocks:        117.102.122.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:99:96:b4:38:21:1f:b5:56:23:91:13:4a:f0:6b:f0:0d:04:54:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:31 2021 GMT
            Not After : Sep 30 00:00:31 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:90:68:c7:81:78:e1:05:c5:b7:13:3c:e8:b2:
                    d0:6c:b6:ec:be:0d:45:aa:62:75:9f:f1:9d:71:7a:
                    28:5a:97:ff:e3:28:b9:6c:8d:bb:6f:f0:b7:f9:8b:
                    d4:05:23:53:18:57:75:e2:3b:b9:3f:58:1d:e5:5e:
                    3b:3b:b5:f3:f7:9a:55:b9:3f:6a:fa:1d:a7:54:60:
                    d2:75:ba:9f:99:23:a8:19:23:ad:f6:ad:4a:62:ba:
                    74:62:7a:8c:3f:ee:04:d1:33:7e:b4:44:1a:1f:e4:
                    25:af:ec:86:37:c7:a7:7f:81:f9:4a:f2:fa:a1:a8:
                    7b:82:47:d1:24:6e:29:b9:23:bf:26:d6:e0:63:43:
                    70:21:3c:c7:39:79:75:6c:4b:47:74:69:19:17:6c:
                    57:c3:e9:1c:e5:7a:5f:7f:12:5e:73:50:40:54:36:
                    9d:3d:d1:89:af:c7:27:ab:bb:4d:2b:05:ef:07:41:
                    5b:19:4f:06:3e:17:fe:da:df:4d:62:ff:32:6b:c4:
                    9b:0e:ba:77:1c:b2:ce:2c:8f:03:6e:70:d6:9c:14:
                    ff:7d:73:fc:41:b4:19:05:ac:ed:1f:dc:ed:fe:cc:
                    35:05:87:60:d9:4e:e7:73:61:34:ff:76:90:7d:7e:
                    78:9e:44:a1:4b:6d:3c:22:95:61:7b:03:0e:fc:38:
                    28:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:A0:DC:1A:31:05:30:52:19:24:97:4C:F9:F4:B2:8D:1E:FD:CF:A1
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e3132322e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.102.122.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:c8:30:1a:db:1e:9a:50:73:0f:45:52:09:67:d1:db:11:01:
         40:73:63:9f:b0:1b:63:df:61:83:aa:bb:d0:e2:11:9a:7a:ab:
         17:04:2f:be:d4:63:17:28:15:d4:5c:97:20:fc:9a:f2:50:a0:
         21:51:03:7e:d2:6d:0c:27:f9:97:0d:04:d3:5b:d6:62:2f:70:
         c3:6d:81:e3:5f:bd:56:2d:7b:52:c4:c1:69:79:a9:c1:14:91:
         c9:5d:74:bc:b2:15:88:ab:2d:5e:2f:4f:5b:18:7c:9f:6e:78:
         1a:de:69:6f:f7:d2:1b:e2:02:7c:b4:09:b4:57:f5:4a:61:54:
         60:66:25:07:67:e4:2f:cf:c1:8c:28:9d:04:f2:e0:00:eb:e2:
         da:c8:27:fc:c7:b8:a4:44:e6:ac:42:48:42:9e:8c:a1:73:72:
         f6:9c:8c:8c:2e:0c:5b:a9:c0:39:24:e0:c0:a0:19:df:a7:2e:
         0f:2f:04:99:ac:f9:bc:82:d5:d2:7d:08:99:7a:b8:08:19:a8:
         d5:39:aa:2b:de:03:8d:b8:b2:59:f0:b3:5d:f5:c1:65:d3:f0:
         11:05:1f:5f:c7:df:91:ed:2f:5c:63:d1:61:08:24:53:b5:4e:
         a9:b3:31:7f:43:b6:ce:51:ce:25:fe:03:81:d0:60:3e:1d:a7:
         ef:1d:80:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:02 2024 by rpki-client on console-fra.rpki-client.org