Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3136382e302f32322d3232203d3e203137343531.roa
File:                     3138322e3235332e3136382e302f32322d3232203d3e203137343531.roa (raw, json)
Hash identifier:          PVA+FurXxX8GKwE0tFHno+c8LrjrzIFbWwjHuDh+5CM=
Subject key identifier:   E1:D1:91:1A:49:7D:5B:2A:58:D8:E2:01:20:2C:83:C0:38:B2:3E:1E
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       5E7884E087C78559F7C71EEA1971979328F846B3
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3136382e302f32322d3232203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:53 +0000
ROA not before:           Wed 29 Sep 2021 23:55:53 +0000
ROA not after:            Fri 30 Sep 2022 00:00:53 +0000
asID:                     17451
IP address blocks:        182.253.168.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:78:84:e0:87:c7:85:59:f7:c7:1e:ea:19:71:97:93:28:f8:46:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:53 2021 GMT
            Not After : Sep 30 00:00:53 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:05:d0:ab:03:4e:0b:4c:08:39:cf:ef:80:87:
                    64:a9:7e:1e:78:1b:6b:08:51:0a:9a:ab:ce:33:fe:
                    71:fb:34:42:8d:1e:d3:06:ed:26:65:f1:f5:08:9e:
                    de:8b:88:c7:ca:97:79:27:15:2d:e9:6e:85:bf:26:
                    96:2b:2c:83:61:72:17:e1:80:fe:ca:4d:27:08:e0:
                    a2:a5:ca:18:9e:fb:f6:42:8c:90:f1:6d:5c:1c:f9:
                    3d:34:2f:bd:3a:5c:64:92:a2:fd:79:c3:32:17:ce:
                    98:ec:0e:e0:b7:93:78:a6:6f:1e:0d:33:15:36:a2:
                    56:b4:73:a7:91:e1:f1:14:81:7a:42:10:82:62:73:
                    33:50:7b:e8:09:dc:9a:b2:24:7c:d8:d6:bd:f1:dd:
                    1d:ea:33:66:96:e6:36:63:f0:56:8a:e2:c6:12:f3:
                    2e:b7:44:58:b6:e3:0c:d6:0a:00:82:67:4b:6d:5e:
                    6c:00:e5:b8:78:a9:1c:e5:c6:59:0a:f1:d3:45:7d:
                    67:d0:db:f1:8c:d8:bb:5e:56:14:c2:a0:3b:a8:60:
                    e6:7f:08:74:f8:4c:7a:15:68:41:b3:1f:d2:fe:50:
                    25:df:c8:08:f7:03:32:8b:11:20:e2:ef:24:c1:aa:
                    8b:5c:fc:5a:6b:4c:59:db:99:b5:3f:e8:31:e1:15:
                    79:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:D1:91:1A:49:7D:5B:2A:58:D8:E2:01:20:2C:83:C0:38:B2:3E:1E
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3136382e302f32322d3232203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.168.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9d:78:bf:f0:be:c9:7c:ef:a6:50:80:a1:00:fb:ae:ad:7d:c5:
         0b:05:1b:70:5a:bc:69:e9:ef:96:7f:32:4f:99:57:73:d6:7f:
         67:d7:3f:9f:83:39:69:02:f6:a8:67:8b:45:b5:99:fd:3f:1a:
         d4:5b:2b:99:8f:99:22:7a:e1:89:ae:b0:98:8c:6c:65:3e:8f:
         7a:84:08:98:56:13:33:de:d0:79:17:63:59:02:51:89:2c:d2:
         38:78:00:30:aa:3e:a7:c4:fa:4d:58:8f:7d:d4:2b:4d:0f:93:
         09:2a:a4:23:e3:6b:14:3c:51:36:cf:00:2d:01:45:44:b6:e1:
         a3:8c:41:6b:ea:26:34:79:a2:d5:8f:71:3b:df:24:67:04:61:
         f1:cd:fe:c8:ba:0f:78:bf:62:11:11:bb:d2:8e:db:37:d4:1d:
         ea:60:8d:49:02:f6:8e:b5:80:a8:72:12:09:4d:e9:de:bd:e5:
         bd:48:de:28:7e:e6:66:fd:4f:c7:35:9b:19:1a:27:0e:0f:ac:
         9f:94:84:dd:b6:88:75:6a:9b:42:b1:30:7d:cf:24:e8:91:39:
         95:b7:ff:86:9e:17:27:75:a8:19:83:04:4a:85:3d:af:68:0a:
         1b:2d:18:f0:66:21:eb:7a:24:9d:f4:a5:f2:05:0c:51:70:9c:
         0f:4e:ea:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:03 2024 by rpki-client on console-fra.rpki-client.org