Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3136372e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e3136372e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          i4lqbV2VIjH1jx+BV8xyKloEhQ1UBMMHHLd7XtoApu8=
Subject key identifier:   89:14:36:00:14:67:67:3D:92:1B:AA:7C:FB:AF:43:17:A3:CE:82:29
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       252B410F5CFAEBC2898BFA922BA796E78081344B
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3136372e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:20 +0000
ROA not before:           Wed 29 Sep 2021 23:55:20 +0000
ROA not after:            Fri 30 Sep 2022 00:00:20 +0000
asID:                     17451
IP address blocks:        182.253.167.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:2b:41:0f:5c:fa:eb:c2:89:8b:fa:92:2b:a7:96:e7:80:81:34:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:20 2021 GMT
            Not After : Sep 30 00:00:20 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:32:af:df:a0:1c:0c:58:d0:f7:92:79:b4:9a:
                    41:e1:ec:95:c7:07:dc:11:1d:ab:70:69:1c:80:a2:
                    6a:7f:f8:15:83:47:6d:70:81:5f:8f:4e:7e:05:ff:
                    db:fe:7e:c3:31:a4:74:32:77:cb:b1:15:0a:ca:af:
                    d4:36:6f:98:47:18:63:ce:ad:01:1d:62:11:42:e4:
                    17:7d:33:56:82:2b:bd:47:fa:54:2b:5e:6c:09:cb:
                    37:63:07:c8:b2:23:9f:e5:8f:ee:fd:07:89:63:5d:
                    2b:de:06:ae:e7:77:83:0f:09:40:bf:63:a5:4a:c0:
                    aa:76:eb:97:e9:91:ad:16:ac:90:cb:c3:76:41:87:
                    24:34:86:71:45:d0:86:de:da:4c:ee:0f:7a:73:8e:
                    1e:de:d6:c3:99:57:68:cf:05:09:a7:d7:35:d4:71:
                    13:74:0d:64:d2:a2:69:1d:14:f2:96:f3:ce:5b:9d:
                    38:b3:ae:ac:e6:bc:92:ef:a8:66:86:f4:95:0a:05:
                    43:34:d3:3f:e5:51:63:c1:a7:63:e2:73:41:cf:8f:
                    bd:8d:ba:ce:b1:a9:8f:f9:2f:38:1e:81:9c:28:b8:
                    62:09:65:f8:05:1a:49:c7:66:eb:c8:5c:c6:12:4c:
                    ca:80:49:22:f4:85:b6:0f:a3:b7:01:68:6c:89:6b:
                    4d:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:14:36:00:14:67:67:3D:92:1B:AA:7C:FB:AF:43:17:A3:CE:82:29
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3136372e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:7b:0b:54:99:ad:e2:fe:9e:db:48:bf:ca:98:51:54:38:0d:
         99:de:a3:17:ce:ef:f1:66:97:80:14:57:e9:89:cd:1d:4f:ff:
         b4:c0:e9:e6:73:29:90:a7:58:f9:bc:92:09:c5:e5:f6:84:0c:
         1d:b1:e8:ca:3f:79:8e:94:9f:ee:b7:15:73:f3:86:48:8d:71:
         52:61:d3:a6:56:09:c5:4b:d9:78:dc:a1:1d:2d:22:b1:7e:7e:
         a2:57:da:55:0c:3c:3b:a7:cf:6d:36:d0:aa:73:e5:99:84:14:
         1c:a4:c3:e1:a4:c9:68:4b:38:c0:5f:b6:af:bc:2f:32:bd:69:
         a2:2a:f6:95:c3:15:9d:f8:e7:76:3f:fa:fd:33:19:0c:ee:a2:
         60:76:64:1c:d7:68:76:09:23:f3:de:e9:35:28:46:18:97:49:
         98:d0:d3:4b:b7:3e:8e:10:66:3b:24:c7:15:86:e5:e7:6f:3f:
         db:e9:5b:43:77:08:38:58:3c:57:11:33:64:0c:25:11:ba:8e:
         34:53:29:5e:f8:00:98:bd:57:ab:6b:5a:c9:9f:52:95:b0:7b:
         56:f3:96:88:74:7b:fe:f1:c3:83:f1:3c:79:fc:14:86:6d:76:
         71:c8:5b:45:a3:9a:c6:db:8e:aa:70:a5:b4:0b:3d:d0:5d:75:
         54:e7:9a:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:03 2024 by rpki-client on console-fra.rpki-client.org