Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e38352e302f32342d3234203d3e203338343832.roa
File:                     3131372e3130322e38352e302f32342d3234203d3e203338343832.roa (raw, json)
Hash identifier:          tPlVDjla8xVTVqZEYC6R6Rp5NF30Aoxl/t3wciHas7w=
Subject key identifier:   FE:4D:F0:7C:A8:BC:F4:07:76:CC:B2:C4:97:C0:4F:79:6A:D4:EA:D0
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       267C18522211926978199276CF798E206795AA7F
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e38352e302f32342d3234203d3e203338343832.roa
Signing time:             Wed 02 Mar 2022 05:11:21 +0000
ROA not before:           Wed 02 Mar 2022 05:06:21 +0000
ROA not after:            Thu 02 Mar 2023 05:11:21 +0000
asID:                     38482
IP address blocks:        117.102.85.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:7c:18:52:22:11:92:69:78:19:92:76:cf:79:8e:20:67:95:aa:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Mar  2 05:06:21 2022 GMT
            Not After : Mar  2 05:11:21 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c8:b0:3c:00:76:4f:6a:2e:74:87:fe:df:36:
                    fe:2e:19:00:ef:38:f7:d1:bf:da:d6:df:65:4a:1f:
                    67:36:43:8b:6a:dd:a6:52:e5:f4:83:3d:78:8b:b1:
                    af:33:b5:7b:d6:a3:34:81:b3:b0:38:26:02:fa:67:
                    57:55:e4:cf:31:19:34:ec:85:7d:72:b6:e8:11:9d:
                    44:d7:0b:1c:8b:0d:e4:fd:86:e8:93:6c:b4:a5:af:
                    14:3d:53:19:2e:c4:8b:53:3b:82:50:36:cb:72:62:
                    a4:70:ba:5c:2f:73:f9:67:dc:3b:22:9a:d0:da:1d:
                    7f:c5:8c:13:17:7d:85:d9:86:6e:e5:f6:29:1e:e2:
                    a8:1f:2f:bf:81:62:34:a9:e8:01:d6:67:fa:05:bc:
                    80:3c:d5:a4:fd:36:b2:69:08:e0:7e:54:a2:41:e7:
                    b6:24:19:22:ca:44:8f:4d:2b:69:84:a8:0e:a5:6c:
                    bf:33:27:27:fb:32:23:c1:d9:c1:f4:3c:94:03:82:
                    a8:f9:54:8a:2c:e4:5f:3c:30:7a:30:3c:a9:23:e2:
                    1f:88:fe:07:67:10:06:da:be:73:eb:16:e1:fe:85:
                    f5:4f:e4:f7:5b:28:c6:74:74:3a:63:7a:83:03:9d:
                    66:0f:eb:08:8b:78:61:30:bb:46:8b:d3:3e:3b:6d:
                    20:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:4D:F0:7C:A8:BC:F4:07:76:CC:B2:C4:97:C0:4F:79:6A:D4:EA:D0
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e38352e302f32342d3234203d3e203338343832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.102.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:25:e1:fc:07:ce:c6:1a:1c:73:3a:5b:38:75:24:f7:30:1c:
         48:3c:73:57:c3:37:9c:7b:eb:5c:2a:41:47:33:bd:e6:83:52:
         8e:d5:22:44:a4:14:c5:92:77:b6:f0:19:61:18:b9:a5:b5:c6:
         48:94:e9:09:d2:c2:70:2c:32:1e:13:d9:7d:9e:13:2a:59:54:
         c2:11:58:82:1c:08:0f:c8:73:a8:9b:e4:f0:12:3f:b0:d2:83:
         ab:1b:66:62:e2:03:b8:f2:e9:7e:ab:e0:19:c1:50:da:55:6c:
         a7:06:d1:81:86:55:ec:f6:ae:80:52:62:68:22:87:67:b7:f5:
         ad:83:12:c6:77:97:7f:da:94:6e:63:79:0a:83:8f:77:1f:cf:
         1c:e2:b0:d4:be:a2:e8:5e:b8:67:2d:0a:04:77:94:95:c0:50:
         8a:66:ff:a6:81:f2:c9:90:72:01:87:a1:f9:da:15:04:39:a9:
         bd:22:c1:71:7a:1d:a6:a0:b2:ab:9f:17:02:50:4f:31:ea:b6:
         2c:9d:97:d4:86:fe:38:7b:06:c1:ed:a0:21:68:0d:49:07:13:
         fc:f4:08:d5:63:9b:81:92:38:bf:c3:1a:6e:5a:b0:8e:96:9d:
         67:66:da:47:16:7c:88:64:fc:7a:02:d6:56:38:34:1a:90:fb:
         87:f2:e7:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:02 2024 by rpki-client on console-fra.rpki-client.org