Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3132362e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e3132362e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          y/xOM3o5Z84D2+VFInZUFSItVZ1g+K4UsI7tgp27jqs=
Subject key identifier:   CB:55:2E:9B:60:54:3A:BC:54:41:28:58:20:C3:AA:1D:EE:DD:4A:4C
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       4FD916E62FF95FF308F734898B5AAEFD7CCC7E92
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3132362e302f32342d3234203d3e203137343531.roa
Signing time:             Tue 14 Sep 2021 05:17:08 +0000
ROA not before:           Tue 14 Sep 2021 05:12:08 +0000
ROA not after:            Wed 14 Sep 2022 05:17:08 +0000
asID:                     17451
IP address blocks:        182.253.126.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:d9:16:e6:2f:f9:5f:f3:08:f7:34:89:8b:5a:ae:fd:7c:cc:7e:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 14 05:12:08 2021 GMT
            Not After : Sep 14 05:17:08 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:5e:dd:df:a2:73:19:fd:c9:e1:2a:bb:71:0a:
                    bc:4a:be:e8:52:c4:69:70:1c:88:18:a4:01:c6:1d:
                    b4:00:e8:88:de:c4:e1:b4:ac:fe:b9:2b:61:f9:30:
                    b9:2c:c2:fb:a4:98:be:b2:13:56:d7:20:0e:9e:10:
                    e4:f2:7b:fc:fd:a7:f4:4d:d6:f6:0e:a1:16:76:72:
                    1d:0d:3b:b0:09:4b:b2:77:31:09:bb:f8:e5:23:6d:
                    a1:7f:84:07:94:d0:6a:cc:10:16:63:b4:6b:81:75:
                    74:1c:42:1c:7f:8a:88:12:6e:97:a4:58:42:96:73:
                    a1:11:7f:cc:74:db:14:7e:20:23:a1:b8:fd:b1:8b:
                    6e:b2:ea:3e:6f:fc:d8:de:2f:a9:f1:51:5e:02:9b:
                    e2:95:23:67:d1:19:fb:cd:df:01:2d:2a:8d:5f:93:
                    5d:5e:56:70:af:91:9d:cc:1c:c5:a7:e0:db:e0:49:
                    20:61:f9:88:81:aa:7d:fb:24:fc:f1:fb:e8:01:8f:
                    9e:a8:f6:2f:f8:74:87:2b:f3:ce:2a:3b:69:18:cb:
                    e1:dd:ff:c1:74:10:1f:a9:da:6f:2e:fc:63:f0:f9:
                    a4:61:f6:7f:9d:65:96:4a:9e:45:c7:d0:7d:53:31:
                    db:7d:d9:7a:6d:42:c9:5f:3d:27:ed:79:56:19:eb:
                    e3:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:55:2E:9B:60:54:3A:BC:54:41:28:58:20:C3:AA:1D:EE:DD:4A:4C
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3132362e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:63:5c:31:8c:56:12:b0:2e:be:41:06:4d:4c:f3:da:e1:7d:
         ad:bf:50:4d:ec:6f:6d:d7:dc:e9:91:b6:c3:d1:fa:cb:17:5d:
         22:61:3a:fe:5c:be:93:05:f4:9d:7a:30:cd:71:93:11:1e:37:
         62:99:0f:b2:9c:f6:96:5b:c4:14:f0:57:1d:dd:f6:70:69:f8:
         c3:d1:be:4a:07:cf:a5:72:73:f2:24:c4:26:8c:81:38:60:2e:
         eb:57:c7:23:d0:ba:6a:2b:5c:c6:af:1c:f1:e9:d8:a7:64:2b:
         b5:77:71:57:5c:c8:8c:22:c1:7d:9a:10:78:fb:d4:d7:1a:5d:
         1d:99:e8:00:d7:77:e9:2e:fd:21:cc:89:d5:93:61:cf:37:22:
         8b:3e:68:a6:37:08:58:b4:82:f6:d7:17:bf:c4:38:33:43:82:
         02:10:8a:80:a6:26:67:97:33:86:5e:77:92:1e:1f:d4:39:7e:
         12:ce:51:8f:6a:b9:e5:5c:bd:52:34:64:88:37:de:88:f5:69:
         f9:26:f5:12:92:93:10:76:c3:75:d8:1d:42:55:c1:1d:dc:60:
         ed:1d:60:8a:28:19:6d:e3:01:42:0b:b5:c7:94:e9:3d:02:85:
         68:5d:a9:59:9f:3e:6a:e4:8a:8e:30:ba:ef:76:6c:47:6e:06:
         35:9d:41:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:03 2024 by rpki-client on console-fra.rpki-client.org