Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e39372e302f32342d3234203d3e203137343531.roa
File:                     3131372e3130322e39372e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          THYOatPbkX0XZfE71o8laToWNs33SWhpY6W8QfVjDwE=
Subject key identifier:   7E:F3:3E:20:9E:F2:08:52:D6:FE:1C:F4:42:E0:1D:7D:BF:F3:18:3B
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       29B0F78B72DEE8A9B7C564037E8706CDD6BF5813
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e39372e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:47 +0000
ROA not before:           Wed 29 Sep 2021 23:55:47 +0000
ROA not after:            Fri 30 Sep 2022 00:00:47 +0000
asID:                     17451
IP address blocks:        117.102.97.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:b0:f7:8b:72:de:e8:a9:b7:c5:64:03:7e:87:06:cd:d6:bf:58:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:47 2021 GMT
            Not After : Sep 30 00:00:47 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c8:b1:44:ab:71:58:d1:df:e9:5d:39:84:56:
                    54:17:cf:d3:39:c7:e7:3a:70:b6:61:5c:02:35:07:
                    b2:54:59:5f:8e:84:bf:44:30:8a:3c:2f:4c:0d:0a:
                    4d:78:44:a5:0a:3b:25:98:2c:73:62:19:81:4a:44:
                    d7:13:e3:de:63:41:67:95:28:a1:d8:ec:89:e3:bd:
                    ac:0a:92:ed:cb:8f:8d:83:d5:59:9b:5c:dc:c9:6c:
                    01:ac:86:92:b1:bc:4e:71:b9:21:5e:4f:fc:46:98:
                    77:31:be:79:40:48:0f:71:21:d3:08:fd:0f:48:9d:
                    44:59:06:3f:69:50:30:c2:fd:27:13:fc:d6:e0:21:
                    2c:6a:c2:ea:0b:50:67:6c:ba:99:a0:67:35:e2:9a:
                    ff:f4:b7:55:bf:0e:72:2e:bf:ef:c7:1c:48:66:7c:
                    5b:be:c5:61:4b:37:ea:d4:ae:bf:3b:57:9b:d8:c3:
                    46:eb:96:1f:c5:c2:75:40:c3:73:24:72:eb:97:5c:
                    f9:cc:d2:42:08:7e:4c:28:20:be:fe:a5:f4:aa:da:
                    42:e1:37:5e:5d:0c:50:db:e3:8d:9b:c8:49:06:9e:
                    c5:b0:4e:4b:ae:2c:6f:22:d4:68:61:a2:a7:39:22:
                    c2:5c:66:4e:e2:06:01:10:5f:72:37:bc:15:87:6b:
                    b4:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:F3:3E:20:9E:F2:08:52:D6:FE:1C:F4:42:E0:1D:7D:BF:F3:18:3B
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e39372e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.102.97.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:80:da:13:03:62:19:21:43:bd:f1:e7:7e:c9:08:e9:11:eb:
         d3:2a:69:ee:31:70:94:6f:52:9a:a4:97:86:6a:3d:ec:84:fa:
         07:0d:2c:e0:05:6b:b5:ef:09:05:c8:53:14:54:2f:55:04:fd:
         66:56:b6:df:c9:7c:dd:8f:2b:3b:fb:34:1e:bf:8c:a3:59:30:
         9c:42:0b:31:40:71:27:f9:f7:1d:4c:41:87:63:f4:5d:5e:bf:
         8d:a1:72:7b:e0:36:44:b0:b9:51:f1:61:37:b2:7e:21:0f:0d:
         a2:59:83:2a:bd:65:50:35:59:1e:3d:1c:a2:5d:dd:78:cf:78:
         2b:2c:19:d9:08:fa:7f:a5:dd:02:bd:34:b2:af:d4:bc:22:88:
         80:56:e0:ba:cb:b1:44:1b:cd:15:c4:95:f7:60:78:9b:8a:06:
         0f:e9:c6:07:3e:af:c1:9e:b9:5b:b3:0a:28:4a:55:f7:9d:03:
         8c:4f:5f:5c:46:8f:c8:48:d4:58:fe:90:4e:c7:a2:94:65:e4:
         40:33:82:ca:94:30:7d:e1:d2:bb:25:f8:e4:af:d9:4e:3d:f2:
         d4:15:6a:51:87:73:b9:78:00:1d:70:2b:9e:ff:1e:dc:c9:62:
         ac:14:b8:72:fa:f6:ec:06:6b:40:24:00:3b:6e:b1:c1:5e:b0:
         19:a2:cf:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:00 2023 by rpki-client on console-ams.rpki-client.org