Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3131342e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e3131342e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          uR5WJtlQCacuHrgjjUBI0UYaNLrLNjBIPZe7cLRzwGY=
Subject key identifier:   0B:89:09:BD:CC:22:37:72:B4:0A:68:F7:55:CD:41:8D:FF:63:0A:AB
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       7D994ECDE3D030B9B74ED32134CC8A176029121D
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3131342e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:25 +0000
ROA not before:           Wed 29 Sep 2021 23:55:25 +0000
ROA not after:            Fri 30 Sep 2022 00:00:25 +0000
asID:                     17451
IP address blocks:        182.253.114.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:99:4e:cd:e3:d0:30:b9:b7:4e:d3:21:34:cc:8a:17:60:29:12:1d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:25 2021 GMT
            Not After : Sep 30 00:00:25 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:40:9b:94:ab:92:34:75:77:6f:c1:52:ba:66:
                    a3:a9:82:60:75:5e:cf:f4:e1:8d:43:95:83:57:44:
                    ab:5d:91:a3:a1:ce:67:1c:c5:d6:0c:1e:60:65:16:
                    a5:b1:eb:b3:60:61:30:e4:a8:f4:f8:a2:53:6e:e3:
                    47:66:0b:6d:b9:ec:bf:3c:0d:75:cf:55:b2:34:c5:
                    d4:45:28:66:17:8c:fc:33:ca:2a:fc:21:d3:72:c2:
                    0f:aa:fe:d3:62:0e:d6:13:5a:da:c9:99:0c:47:9c:
                    83:b7:0b:56:5b:7e:7f:b3:9a:a8:46:2a:28:ea:d3:
                    0d:8b:3e:c4:05:31:42:f0:e1:3d:50:4f:c3:65:e7:
                    2c:05:92:82:86:2e:4b:23:00:3f:e3:8f:e0:31:e0:
                    e0:96:2e:30:3a:e2:b1:38:82:8e:af:7e:7c:d2:01:
                    6d:2d:ba:ff:1b:1f:60:80:8e:5b:30:f7:29:37:60:
                    e3:22:b5:e3:d8:5b:39:6b:b2:2e:cd:0f:51:5a:78:
                    11:4d:30:df:32:21:b8:18:c5:af:49:74:7b:ab:29:
                    1c:2d:86:f3:0f:d4:a0:56:33:ab:9b:61:ed:e8:d7:
                    b3:01:2c:56:f1:3b:0d:05:cd:ba:84:9b:20:a1:f7:
                    84:60:e0:80:b9:e2:90:cc:9c:52:95:46:04:cd:5e:
                    2d:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:89:09:BD:CC:22:37:72:B4:0A:68:F7:55:CD:41:8D:FF:63:0A:AB
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3131342e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         74:8d:5d:cb:86:5c:e2:7d:8c:b3:85:2b:de:15:5a:20:9f:57:
         a5:f5:c4:9e:df:a0:cc:6e:f8:f0:cc:fe:40:9b:2c:2d:49:75:
         df:3a:75:6b:01:94:3e:27:fe:a3:00:2e:3e:36:b3:58:e7:ed:
         ef:a1:2b:59:13:ca:eb:47:a6:5a:a0:9c:da:80:4b:04:5d:e7:
         c0:32:4a:e5:67:21:ca:b7:56:6b:5d:24:b5:11:62:bc:52:3f:
         bc:2d:b0:d1:79:af:6d:f8:2d:08:35:c3:50:5a:0f:e3:7b:63:
         3a:bb:10:4e:67:a8:c9:d1:6c:71:cd:02:ca:f4:97:89:57:9d:
         e0:41:ae:4c:97:99:01:f0:37:e5:c1:b7:4c:94:0d:a9:19:de:
         29:f2:a6:22:1e:1c:73:b1:46:5f:96:8a:e2:7c:d2:cc:59:e1:
         05:3c:9b:3a:ff:fe:db:a0:85:3a:b9:d6:9f:1d:71:b4:ff:8c:
         48:92:7e:d8:fb:a6:8c:4f:2b:f6:ff:a8:69:6a:cc:f2:91:06:
         d5:50:19:d1:43:b6:b8:e7:f2:60:d2:5d:fe:9e:86:9f:e6:d0:
         94:a5:ba:34:73:a5:ad:67:3e:3d:20:60:53:c3:b7:6c:3f:be:
         27:31:0a:cb:96:c3:b6:8a:82:ed:db:0b:67:38:e2:43:d6:f5:
         76:09:e9:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:03 2024 by rpki-client on console-fra.rpki-client.org