Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e36372e302f32342d3234203d3e203137343531.roa
File:                     3131372e3130322e36372e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          Zg2oIdBrmjYUW+R12yE9ll1J6+KsZzYL/73vzMLWqGI=
Subject key identifier:   3A:26:1A:58:F6:17:70:10:17:73:40:FF:C0:0F:B9:39:87:4B:1C:55
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       0E1646BF14FE0FA6C30720FE02E5861C68A10CE6
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e36372e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:01:20 +0000
ROA not before:           Wed 29 Sep 2021 23:56:20 +0000
ROA not after:            Fri 30 Sep 2022 00:01:20 +0000
asID:                     17451
IP address blocks:        117.102.67.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:16:46:bf:14:fe:0f:a6:c3:07:20:fe:02:e5:86:1c:68:a1:0c:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:56:20 2021 GMT
            Not After : Sep 30 00:01:20 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:50:0a:0b:07:56:5a:26:71:7e:f6:b9:36:77:
                    bc:85:fb:ae:42:e7:7a:89:f8:a0:29:1b:20:fd:a2:
                    f6:b0:85:9f:4e:01:ee:a3:83:ca:4d:af:15:f4:0a:
                    ba:22:ce:96:47:cd:8a:14:46:df:e4:02:a5:1b:b2:
                    12:da:e4:c3:95:cb:75:a9:fc:65:35:4c:b0:2a:be:
                    3b:a0:e6:21:84:f5:5c:11:1a:e9:47:3f:e9:94:0e:
                    3c:3f:b2:dd:d5:5c:84:6a:92:88:30:2f:07:7b:cd:
                    6a:c2:6e:27:20:52:a3:f1:81:d5:79:8d:42:5f:09:
                    0b:72:be:ec:4e:0f:35:f3:53:f3:85:4f:23:e1:c0:
                    1b:64:25:3b:ea:c4:06:db:f1:b3:de:e7:d3:d8:37:
                    39:6d:81:74:4a:26:82:7f:15:f7:07:6c:80:e7:84:
                    96:4b:3d:d0:9c:0a:7f:e9:76:a6:a4:8c:84:c3:1b:
                    98:24:18:c8:6b:d1:6e:03:f8:ef:55:db:05:88:e2:
                    d0:ce:bb:c3:4c:aa:77:a9:42:19:c5:f5:c8:80:99:
                    3a:32:03:a5:d9:61:90:16:74:b8:aa:c6:80:81:4d:
                    a6:e9:eb:54:df:ae:16:30:0c:3c:bf:4d:de:3a:4c:
                    77:55:14:1b:0d:09:38:eb:47:76:f2:6f:b6:f2:6c:
                    0c:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:26:1A:58:F6:17:70:10:17:73:40:FF:C0:0F:B9:39:87:4B:1C:55
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e36372e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.102.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:c0:ec:f3:64:78:b0:41:29:3e:99:f3:b9:38:0e:68:fa:1b:
         85:ba:21:9c:3a:a7:ae:4c:aa:4b:da:db:8c:b5:e8:a0:bf:a3:
         ca:b7:9a:91:c4:a3:61:8b:24:04:6f:2c:d8:a2:9e:9e:39:93:
         9c:84:ca:24:c4:a6:0b:e4:73:f1:78:27:8d:66:e3:e1:53:67:
         1e:c1:3e:6c:84:95:37:f1:2e:33:a6:70:6c:e0:24:a4:d6:65:
         6a:06:54:67:41:07:cc:f7:3b:2a:03:49:79:dd:78:f2:89:51:
         41:93:0b:59:8a:cc:56:d3:19:ec:a6:1a:fd:25:96:64:a3:90:
         5d:b0:f9:98:37:a5:ce:f5:da:57:39:d6:ea:b0:dc:1a:6b:62:
         2c:4d:31:b8:7b:b8:94:10:db:3a:68:02:2e:1e:29:37:4e:74:
         38:2c:66:68:5d:c2:aa:b1:54:fa:bd:99:ea:ba:74:1a:0a:e5:
         33:65:f8:28:6f:0d:f1:14:6e:06:d3:00:a7:1c:40:9d:95:a7:
         c2:ae:5d:eb:62:b9:40:9d:52:58:38:11:3e:49:e7:52:e9:68:
         2a:4d:56:73:bf:d2:18:fa:5f:e5:a9:f0:21:cf:f1:ab:41:d5:
         9e:b7:49:57:8a:b9:e7:de:c3:cf:1d:f7:7a:18:a9:9e:1b:1a:
         d5:54:0d:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:02 2024 by rpki-client on console-fra.rpki-client.org