Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3133362e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e3133362e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          apkqCq+koayUQu+kCTYz/1IixkJ8BzVV++vq/Q0ei5Y=
Subject key identifier:   87:70:60:84:83:92:12:8E:77:DA:BF:6D:F1:E7:42:7E:99:3C:18:8C
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       64C2F76306E01869FE4EFB3547C46FA8C08744B3
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3133362e302f32342d3234203d3e203137343531.roa
Signing time:             Wed 23 Jun 2021 01:19:24 +0000
ROA not before:           Wed 23 Jun 2021 01:14:24 +0000
ROA not after:            Thu 23 Jun 2022 01:19:24 +0000
asID:                     17451
IP address blocks:        182.253.136.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:c2:f7:63:06:e0:18:69:fe:4e:fb:35:47:c4:6f:a8:c0:87:44:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Jun 23 01:14:24 2021 GMT
            Not After : Jun 23 01:19:24 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:29:2f:22:24:e8:fa:38:07:5f:78:49:73:19:
                    60:e0:ec:73:38:e5:7d:be:02:95:e5:58:b8:18:8f:
                    60:69:0c:78:51:30:5f:8e:99:8e:8d:4f:22:fb:77:
                    79:85:47:5b:a8:77:b0:1d:ee:87:e3:cf:d7:69:08:
                    30:df:23:81:22:87:6d:c9:6f:46:e6:93:3d:7b:ea:
                    dd:f6:81:71:9c:8a:2e:bc:1e:f0:cf:39:af:0b:f5:
                    06:b6:3e:06:0e:aa:b2:37:ff:7a:31:b4:1e:e7:47:
                    80:0a:20:27:8e:a3:b1:1e:a8:54:77:47:81:f3:15:
                    70:d3:c4:58:af:e3:03:fc:a4:a6:5b:5b:de:ea:d2:
                    49:d2:15:b7:d6:dd:0b:4d:3f:3f:4d:05:9e:94:e3:
                    00:70:3c:f4:29:cb:b0:71:17:b8:16:11:fc:af:18:
                    ab:6f:35:29:a4:9d:08:55:80:21:4d:fc:9f:1a:59:
                    5b:66:90:54:7e:ee:84:ce:f4:c2:90:3c:77:03:22:
                    1c:b9:51:51:b2:74:cc:c9:01:d9:34:98:1b:36:be:
                    c6:f4:26:96:35:12:16:48:6d:d0:ee:6e:6f:27:62:
                    a8:52:25:e5:f9:0f:76:18:79:4d:57:2a:71:50:fd:
                    6c:71:7b:e8:1c:5f:8a:c1:a2:30:90:26:5c:b9:02:
                    44:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:70:60:84:83:92:12:8E:77:DA:BF:6D:F1:E7:42:7E:99:3C:18:8C
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3133362e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:a3:2e:71:c4:92:53:2b:19:8b:ff:9b:aa:90:0f:ea:5e:10:
         d4:80:aa:00:65:ec:b0:6f:7d:51:11:cf:3d:3f:19:9b:8f:c4:
         32:1f:04:b9:6b:7c:02:31:4b:10:86:06:0b:24:51:fc:f1:8e:
         9f:79:23:7e:dd:2b:52:2f:d4:ff:e5:32:d2:c6:1f:27:bd:22:
         19:2b:93:4b:d3:05:ab:62:fa:e8:84:69:eb:1f:5b:7f:c7:2e:
         c1:63:a3:61:c4:69:16:c2:97:9f:28:78:66:fa:f0:89:31:9c:
         58:90:26:86:bd:c8:52:0e:be:20:03:d3:ce:d8:3e:5d:0c:6c:
         75:63:81:53:00:f5:68:be:8f:04:16:d8:40:fb:b6:8a:ec:b3:
         e0:57:6c:a0:db:89:4d:b2:22:8d:1f:35:51:e3:c4:a0:ba:a4:
         bf:14:da:fa:13:97:a0:4c:9a:c9:29:e2:88:71:84:e7:4c:2e:
         16:a7:64:b9:b5:14:2d:c7:48:41:ed:bf:0e:d5:0d:15:dc:85:
         6d:f8:8c:80:69:9b:68:d2:96:54:f6:d9:ad:40:c5:22:d3:9b:
         eb:1d:ed:3b:b1:03:2c:5f:db:77:a7:70:db:a5:ee:44:db:29:
         6a:fa:08:66:41:f0:2a:bf:bc:83:49:7d:77:44:bb:42:00:4c:
         a5:56:c9:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:03 2024 by rpki-client on console-fra.rpki-client.org