Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e38362e302f32342d3234203d3e203137343531.roa
File:                     3131372e3130322e38362e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          A3s1IcKhCIiz5zU21/fpIOVFV6hn2bFjLuR54D2BsdU=
Subject key identifier:   21:CD:4E:D9:0B:AE:4A:1D:E0:AC:4A:0E:D2:AA:24:50:19:06:5A:F7
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       6AD0BC7F0335FDFCEA37AB60486E77D73F0DCB4E
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e38362e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:27 +0000
ROA not before:           Wed 29 Sep 2021 23:55:27 +0000
ROA not after:            Fri 30 Sep 2022 00:00:27 +0000
asID:                     17451
IP address blocks:        117.102.86.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:d0:bc:7f:03:35:fd:fc:ea:37:ab:60:48:6e:77:d7:3f:0d:cb:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:27 2021 GMT
            Not After : Sep 30 00:00:27 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:1c:2f:6f:2e:eb:86:a4:d6:47:6b:a3:6e:7d:
                    46:ff:28:43:2b:7d:8e:36:d9:0c:b8:f7:c0:2a:62:
                    5e:94:3d:aa:dc:39:26:5b:56:b9:af:b2:15:31:d7:
                    ce:5a:ac:f9:9e:01:cf:86:64:e6:7f:82:1b:43:86:
                    60:99:16:ad:52:8e:40:c3:f3:54:08:9f:a2:7d:d1:
                    83:b0:13:fa:5f:71:3c:0c:3f:bb:46:f4:cb:36:ab:
                    db:02:42:63:e9:71:0f:85:95:e1:8d:ab:3d:10:39:
                    55:fc:dd:41:11:9f:9d:c1:c3:01:60:71:01:83:21:
                    d4:57:54:66:ca:76:97:52:6d:08:83:bf:49:2d:0f:
                    f7:30:14:37:be:74:fe:fb:86:84:77:e5:f8:56:9a:
                    28:1a:7a:68:77:a4:24:57:ee:0f:7f:45:f6:cc:49:
                    59:cb:05:00:53:27:aa:dc:02:5a:23:e4:72:ef:50:
                    0c:9b:ff:d1:2f:05:4d:ce:37:a1:53:fe:65:ae:9a:
                    10:e2:88:a9:53:70:65:eb:85:26:31:c0:4b:2b:5d:
                    b4:56:14:27:78:31:b8:8c:6b:68:2a:91:2d:96:6a:
                    ef:53:7d:81:5b:30:ac:ea:d0:81:6c:eb:ca:1f:5f:
                    34:c6:9c:d8:f6:50:8c:32:9e:c8:3e:cc:4b:60:75:
                    65:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:CD:4E:D9:0B:AE:4A:1D:E0:AC:4A:0E:D2:AA:24:50:19:06:5A:F7
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e38362e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.102.86.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:17:79:32:da:d3:b9:9f:d6:d2:66:53:f3:fa:bd:59:2c:da:
         75:f6:b6:1b:e4:78:99:5b:23:be:cc:1b:0e:d3:f3:60:02:ee:
         5f:3a:ca:ea:fc:7a:96:3f:a7:1d:88:a8:0d:b9:48:a7:d9:88:
         65:94:c8:b4:20:c2:21:bd:1a:c3:ed:60:89:87:19:b3:1e:18:
         a3:60:dd:f2:2d:7c:e8:6d:68:ae:06:62:c0:7e:1f:76:7b:af:
         f8:4e:3d:81:1b:9c:d6:c6:ae:69:8f:62:3c:19:88:ac:bb:e0:
         93:a8:6b:31:00:7b:3f:22:3b:f9:a7:7f:b0:dc:38:3d:72:7c:
         ae:56:da:0e:f8:77:b0:03:87:c2:84:d2:0b:38:db:f8:ee:c4:
         33:92:4f:d7:5f:cb:3f:a9:4b:4e:14:c5:7d:7d:4f:8e:ea:20:
         70:a4:48:dd:54:73:12:cb:f2:75:92:8b:af:02:0b:de:c3:12:
         56:38:48:73:9d:0d:5f:eb:1f:6f:7e:c2:3c:c9:72:e4:9c:7a:
         ef:b2:d0:16:e6:4f:c8:01:3d:e9:fa:dd:e7:cf:a6:ee:5f:a5:
         94:af:4c:ab:1c:95:38:bd:b6:a3:f5:d4:56:71:38:8c:99:34:
         ef:8f:c5:19:34:1c:21:08:8a:57:33:0d:b2:48:fc:9d:6b:53:
         65:02:83:b5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:02 2024 by rpki-client on console-fra.rpki-client.org