Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3130302e302f32342d3234203d3e203338343832.roa
File:                     3138322e3235332e3130302e302f32342d3234203d3e203338343832.roa (raw, json)
Hash identifier:          l02X27A2k4rJOkvj4zEQNYgCniJBKbg/4eKZTzwx0Bk=
Subject key identifier:   ED:CC:7C:0C:95:8A:9F:B9:AD:5F:3E:7E:32:BD:16:70:F2:24:99:C6
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       306D55AA81B554FF2936D2DAE702664BE50EB2C1
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3130302e302f32342d3234203d3e203338343832.roa
Signing time:             Fri 31 Dec 2021 01:43:11 +0000
ROA not before:           Fri 31 Dec 2021 01:38:11 +0000
ROA not after:            Sat 31 Dec 2022 01:43:11 +0000
asID:                     38482
IP address blocks:        182.253.100.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:6d:55:aa:81:b5:54:ff:29:36:d2:da:e7:02:66:4b:e5:0e:b2:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Dec 31 01:38:11 2021 GMT
            Not After : Dec 31 01:43:11 2022 GMT
        Subject: CN=3082010A0282010100C8599066BE2003C10A091599CC5B83E426FED21AF32AC093F28F9AC4E1AAC41275A328890402BD1D5DCE12875C24879EDBC62C9472B869CEF0E48DE3B0CD9BBA96D5320018D59554DD512926F957ACB58AAADE6B596FDA3AE871AC024DA2AF5A44EE6406458F58F8B52C905ACE92CDB5179EA39C3110CDD27DE51DA684C6B1DA0138D530D7FFBA66743226209E49A7C0904DACAC0196725F3CCD1052CAC80F49D858CC8A1F509CE0C82A9870E6B2A27A40B1B8838DB23FFC456D07EA1C7B9C2C408ED9C4E84786C3A9E25F87D2B1B64BCFDCBE1C3EEC15E24FE84E121EC6D1654B116BBC66504737FC47C9F13CF068A926A1B4111DD0460B77366E7B709858D90203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:59:90:66:be:20:03:c1:0a:09:15:99:cc:5b:
                    83:e4:26:fe:d2:1a:f3:2a:c0:93:f2:8f:9a:c4:e1:
                    aa:c4:12:75:a3:28:89:04:02:bd:1d:5d:ce:12:87:
                    5c:24:87:9e:db:c6:2c:94:72:b8:69:ce:f0:e4:8d:
                    e3:b0:cd:9b:ba:96:d5:32:00:18:d5:95:54:dd:51:
                    29:26:f9:57:ac:b5:8a:aa:de:6b:59:6f:da:3a:e8:
                    71:ac:02:4d:a2:af:5a:44:ee:64:06:45:8f:58:f8:
                    b5:2c:90:5a:ce:92:cd:b5:17:9e:a3:9c:31:10:cd:
                    d2:7d:e5:1d:a6:84:c6:b1:da:01:38:d5:30:d7:ff:
                    ba:66:74:32:26:20:9e:49:a7:c0:90:4d:ac:ac:01:
                    96:72:5f:3c:cd:10:52:ca:c8:0f:49:d8:58:cc:8a:
                    1f:50:9c:e0:c8:2a:98:70:e6:b2:a2:7a:40:b1:b8:
                    83:8d:b2:3f:fc:45:6d:07:ea:1c:7b:9c:2c:40:8e:
                    d9:c4:e8:47:86:c3:a9:e2:5f:87:d2:b1:b6:4b:cf:
                    dc:be:1c:3e:ec:15:e2:4f:e8:4e:12:1e:c6:d1:65:
                    4b:11:6b:bc:66:50:47:37:fc:47:c9:f1:3c:f0:68:
                    a9:26:a1:b4:11:1d:d0:46:0b:77:36:6e:7b:70:98:
                    58:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:CC:7C:0C:95:8A:9F:B9:AD:5F:3E:7E:32:BD:16:70:F2:24:99:C6
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3130302e302f32342d3234203d3e203338343832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.100.0/24

    Signature Algorithm: sha256WithRSAEncryption
         42:cd:06:25:e2:da:cb:2a:ea:71:24:bb:81:c3:88:90:ac:57:
         98:97:de:06:95:6c:0d:2e:f5:be:18:65:cf:89:21:dc:dc:f6:
         dc:e7:69:6d:6e:b9:39:1a:c6:6b:5f:8f:67:e6:10:fc:cc:9a:
         2e:f9:90:f8:c4:ac:a5:5c:ec:42:db:75:91:fd:b6:8c:37:ab:
         35:8b:d8:bb:70:40:ce:af:fb:e5:27:71:c0:31:3a:0e:c3:62:
         f5:63:08:d8:cd:1d:eb:db:c3:f5:54:c7:bf:51:9e:00:5d:e0:
         63:23:a1:f5:3f:49:bf:9f:7c:fe:ef:d4:54:55:b8:b8:ec:74:
         a4:52:8b:b9:ef:6b:8c:8e:ce:3b:10:96:1f:fd:fc:e1:ab:78:
         46:5d:62:98:fd:c6:9d:02:9d:71:51:86:36:a2:f2:1a:d9:1f:
         98:35:b3:32:d7:26:48:4c:b1:a0:b4:f7:89:da:b0:b6:3f:76:
         94:1a:03:10:09:ba:47:48:52:d8:de:47:8e:a5:0b:dc:6d:fa:
         fe:1d:7b:ad:e1:ae:9b:e4:ef:46:f0:90:93:81:15:e5:fd:71:
         72:91:81:80:86:4f:c6:4a:8b:07:ba:12:28:26:cf:db:2c:8f:
         38:77:1c:76:28:6d:40:3a:9f:7e:01:19:72:36:d5:cc:32:9d:
         f2:b3:59:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:02 2024 by rpki-client on console-fra.rpki-client.org