Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e3132332e302f32342d3234203d3e203137343531.roa
File:                     3131372e3130322e3132332e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          8XGCtA/zv7qnidBRExgH+u+q3souc35wY6elfnYjtzg=
Subject key identifier:   60:AC:E6:08:D8:B1:81:A1:B8:24:93:79:D8:92:66:3A:EE:48:88:65
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       53D835536AAA883FE7B26DDE8A057A889085C1A5
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e3132332e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:31 +0000
ROA not before:           Wed 29 Sep 2021 23:55:31 +0000
ROA not after:            Fri 30 Sep 2022 00:00:31 +0000
asID:                     17451
IP address blocks:        117.102.123.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:d8:35:53:6a:aa:88:3f:e7:b2:6d:de:8a:05:7a:88:90:85:c1:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:31 2021 GMT
            Not After : Sep 30 00:00:31 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ea:c6:30:86:3c:66:ba:02:6b:66:80:c8:7f:
                    c7:d5:f5:b9:f0:c0:0d:1d:4a:2c:0d:95:ab:89:ed:
                    26:86:be:bd:20:e6:4f:5b:09:b7:b7:09:77:d6:0c:
                    5e:72:07:e3:45:80:ef:e5:25:ce:6e:21:19:75:e4:
                    46:74:9b:16:17:b6:80:7d:bf:05:f2:1d:23:0f:d6:
                    5b:e4:25:ba:ab:e2:f8:1e:4a:d4:61:96:f0:bd:ee:
                    a8:7b:10:18:ce:8e:55:35:27:b4:16:5e:53:9a:a9:
                    15:dc:29:4e:97:50:eb:dc:b1:3c:86:09:ec:5e:3c:
                    05:5d:40:ab:c1:c7:c4:98:0b:5a:f3:90:32:c1:03:
                    27:83:38:06:1d:cd:f8:80:94:56:25:c4:3d:35:78:
                    5d:3f:ed:d1:37:e9:3e:4b:cf:ae:77:d3:f0:5e:9e:
                    05:bb:a4:1f:79:41:a3:3b:eb:81:b9:10:6f:d9:ba:
                    5f:b8:5e:fa:e7:e0:20:dd:c9:cf:5a:1d:7f:a0:a8:
                    2c:f8:25:ae:58:09:bf:7f:17:0c:71:2f:0a:df:54:
                    9c:f0:4f:c5:d9:e2:f6:f3:04:54:65:27:66:73:7f:
                    fa:4c:49:82:bf:fb:bc:ea:ef:d1:bb:34:5d:dc:14:
                    13:80:49:04:f6:eb:47:00:56:47:15:d0:1d:3c:2b:
                    19:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:AC:E6:08:D8:B1:81:A1:B8:24:93:79:D8:92:66:3A:EE:48:88:65
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e3132332e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.102.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:1d:cb:98:d7:ba:a8:2c:a0:50:46:93:3a:99:b1:a8:f2:a5:
         aa:4b:24:1f:a1:f1:d2:83:df:ba:ce:bd:fd:92:dc:c9:80:fa:
         40:23:ce:da:f5:8a:0a:28:bf:25:77:d2:32:a8:d2:0a:af:e1:
         33:91:f8:a0:bb:21:14:f8:8a:2c:37:bd:b1:58:f9:f6:10:49:
         60:a4:f8:b5:ac:5c:26:e4:65:f9:52:f7:c1:37:ee:67:dc:77:
         ca:dc:e1:c9:a5:46:c1:21:44:c9:72:79:de:5f:88:b9:fb:4c:
         93:df:a8:b5:db:46:6c:0c:da:ed:60:c4:c1:4d:e5:3f:a0:22:
         43:2a:70:9d:ce:ab:f6:79:99:f4:73:80:3b:37:76:84:19:70:
         aa:83:ce:d7:5e:0c:9d:cb:eb:fb:85:07:2c:6c:4e:4f:51:cd:
         b5:e5:08:fe:71:25:16:9d:9c:dd:92:c5:cf:72:62:c9:f5:d9:
         ca:7c:ec:bd:8f:1d:18:49:62:ef:96:eb:93:f4:8c:55:a0:ac:
         96:32:03:45:0d:78:96:d1:19:ed:6d:8b:5d:b4:f8:f2:10:de:
         f7:49:97:18:64:27:60:bf:14:0a:fc:01:38:2f:8a:3a:5c:7d:
         8d:22:53:c0:f2:14:13:4c:3d:ab:4b:43:f4:a0:e1:4f:01:08:
         88:12:6b:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:02 2024 by rpki-client on console-fra.rpki-client.org