Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3132332e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e3132332e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          x22h0QG5cZR4TiKJE542V1IgZAWcy9TV3xypa08Z9gU=
Subject key identifier:   ED:D1:2B:26:2E:B5:CD:9A:0D:3E:94:87:5E:4A:7E:28:2E:62:3C:ED
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       382B09EBEB394B3F7F5CA5E3357F8D865934EE3D
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3132332e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:07 +0000
ROA not before:           Wed 29 Sep 2021 23:55:07 +0000
ROA not after:            Fri 30 Sep 2022 00:00:07 +0000
asID:                     17451
IP address blocks:        182.253.123.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:2b:09:eb:eb:39:4b:3f:7f:5c:a5:e3:35:7f:8d:86:59:34:ee:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:07 2021 GMT
            Not After : Sep 30 00:00:07 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:7e:29:9b:90:77:3f:6e:cb:b1:60:b4:aa:d1:
                    44:cf:89:80:a5:57:37:ac:5a:83:92:0a:a5:82:c3:
                    72:a9:f3:26:d2:bd:f5:6d:05:5b:66:d4:06:74:76:
                    46:dc:34:d0:8a:b7:73:e8:28:9c:3a:84:1a:c4:ee:
                    83:1c:7e:08:4a:6c:a4:47:81:8e:dc:9f:8f:7e:d5:
                    10:c5:60:b7:58:46:27:b8:70:41:24:e3:1d:b2:7b:
                    a2:10:7b:0d:78:74:f1:05:1a:1c:f7:cc:16:01:d4:
                    a9:0e:fd:87:89:a2:cf:3a:a9:00:be:a0:2e:9c:09:
                    66:c8:18:b4:5f:d4:d9:68:43:57:7c:77:f2:5f:8a:
                    a4:2f:e4:01:28:84:98:ef:5f:49:53:d7:33:e7:a5:
                    9b:5e:46:4b:12:9d:25:b8:43:b2:34:85:e5:79:1a:
                    fb:74:0e:82:b5:25:74:52:64:1f:3a:45:79:16:4b:
                    21:ad:25:9d:22:1a:f6:ba:6c:89:01:dd:e6:6e:9b:
                    cc:ff:bc:a3:f7:1e:4b:b6:35:6f:a7:fd:a5:23:0c:
                    07:35:a5:b0:77:8f:db:4f:a5:09:0b:ea:f3:ac:de:
                    0d:81:d7:73:9f:4b:5a:62:cb:a2:08:52:39:7f:88:
                    38:88:e1:b8:b8:63:f3:7a:52:b8:be:7f:e8:35:17:
                    51:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:D1:2B:26:2E:B5:CD:9A:0D:3E:94:87:5E:4A:7E:28:2E:62:3C:ED
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3132332e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.123.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:f0:4e:45:7b:3f:9f:23:e0:18:70:d7:6f:62:ff:1f:34:50:
         53:98:9d:ab:91:09:c0:39:18:2c:af:7d:18:92:c8:5d:98:72:
         e6:04:76:dc:81:ca:3b:09:df:6f:1d:6a:06:ce:ca:11:61:02:
         d0:bb:9e:74:8f:85:8f:ff:27:bf:ba:3b:65:a3:a8:0e:00:69:
         e2:34:c9:b0:63:73:94:bc:b9:a9:3b:b8:cd:32:c0:46:ee:c8:
         08:9f:d5:50:5e:9a:f7:aa:97:62:99:25:ef:1a:38:8e:6c:45:
         2c:33:9f:e4:bb:e4:b0:21:0d:f4:ea:b2:d1:bf:68:8b:12:9c:
         8c:ae:cc:55:84:1c:f9:01:13:fb:5e:8a:42:af:44:59:70:3f:
         e3:ca:c5:cf:07:3e:9b:29:60:81:2b:db:57:79:f2:e9:a9:e5:
         b5:aa:53:32:99:19:ef:a0:71:29:3f:c7:85:3f:8a:4c:9a:55:
         2f:bb:fa:73:c4:bf:76:5d:fb:69:a1:55:46:0f:2a:d6:d3:51:
         4a:d6:c1:11:79:8f:de:b6:66:e8:7d:29:b4:b3:4c:e3:3b:04:
         21:b7:53:5c:c4:4e:4f:c0:f9:63:f6:66:83:0a:8a:8d:15:c8:
         c7:50:3e:76:74:69:34:48:40:cd:ac:5f:e1:d1:f4:a4:6e:8a:
         4c:4c:90:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:03 2024 by rpki-client on console-fra.rpki-client.org