Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e31392e302f32342d3234203d3e203338343832.roa
File:                     3138322e3235332e31392e302f32342d3234203d3e203338343832.roa (raw, json)
Hash identifier:          eSHWidE5/Zb2jyKfADK+pr1HeesmiLNIiir3yW9fRNA=
Subject key identifier:   BE:0A:C3:93:CA:9B:04:04:0C:AB:EE:D6:E8:93:F6:D4:D5:1E:6C:35
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       74D4786D9DE3980A80720C371966D5EA8A50E892
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e31392e302f32342d3234203d3e203338343832.roa
Signing time:             Mon 07 Feb 2022 03:51:26 +0000
ROA not before:           Mon 07 Feb 2022 03:46:26 +0000
ROA not after:            Tue 07 Feb 2023 03:51:26 +0000
asID:                     38482
IP address blocks:        182.253.19.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:d4:78:6d:9d:e3:98:0a:80:72:0c:37:19:66:d5:ea:8a:50:e8:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Feb  7 03:46:26 2022 GMT
            Not After : Feb  7 03:51:26 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:27:39:f9:4f:43:70:77:b4:a1:1a:4f:a8:17:
                    a4:d8:0d:5d:26:7b:6a:ca:f1:45:44:e4:3b:4c:24:
                    39:45:42:7a:aa:af:0a:41:63:11:08:42:ac:29:f2:
                    d0:7d:51:2f:43:7a:2c:3b:16:3f:c4:3e:ca:5b:58:
                    21:4b:84:75:88:7b:8d:4f:e1:08:b1:1c:fc:6c:e2:
                    eb:b2:4e:d7:9c:b9:70:8f:35:e0:6e:97:4e:93:e1:
                    25:a3:7d:9d:ae:97:08:fc:3a:e5:97:1b:00:61:e3:
                    bf:0e:1d:35:8d:25:34:c2:51:0d:67:dd:6c:50:1d:
                    e5:1f:d3:f4:cc:03:ef:d2:23:a6:fd:83:40:6d:09:
                    25:6c:c2:26:f4:de:df:45:a9:ab:22:e6:6d:8e:be:
                    d5:13:99:bf:3e:3e:22:6f:59:bb:a8:33:6e:dd:69:
                    ec:d9:73:45:48:7c:b4:95:12:5d:a8:9a:6f:fd:da:
                    31:1d:eb:4a:8c:45:8e:c2:dc:7e:10:c4:b3:8c:51:
                    67:9f:b2:0e:da:28:a5:03:80:04:9d:5c:c5:d3:be:
                    ea:b5:ff:67:f5:bd:20:c7:52:89:90:90:aa:12:d6:
                    ce:58:b3:37:db:a3:eb:92:2d:52:c0:d1:87:7e:00:
                    b2:80:d8:5d:8c:12:f5:7f:fa:1f:03:5a:4a:d8:c9:
                    9f:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:0A:C3:93:CA:9B:04:04:0C:AB:EE:D6:E8:93:F6:D4:D5:1E:6C:35
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e31392e302f32342d3234203d3e203338343832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.19.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:69:e9:93:2e:60:02:fa:89:3d:93:34:5b:d8:90:4f:dd:1c:
         b9:19:e8:b4:72:90:d6:0b:da:c3:52:1e:9c:31:7b:9b:b2:ca:
         34:47:8e:2c:fa:d3:5e:2c:4d:9c:a2:51:ef:1b:e2:93:da:a1:
         ca:3c:9c:e4:12:6c:ef:83:65:b0:6c:30:16:6f:97:32:cc:c0:
         28:be:73:3f:a1:ec:e6:1f:05:d2:b1:fd:0d:42:bc:9d:f8:06:
         a8:06:05:14:07:15:84:61:38:3c:8f:a6:6e:8f:66:4f:ac:9d:
         0f:04:74:98:65:ec:8f:bb:d4:2a:0f:0e:b3:5d:48:9e:0e:3c:
         4d:89:b0:6a:80:ee:83:b4:f9:8c:f0:fa:30:90:29:40:f0:ef:
         f7:c0:46:3e:89:78:95:3b:61:9d:5c:36:e6:b0:ec:49:2f:6d:
         a2:ae:c9:e0:57:c8:ad:32:4d:c6:88:7e:4e:f6:68:ad:d1:e5:
         6f:c3:d6:ff:61:9d:3b:2c:7c:0d:69:7e:cb:4a:4f:db:13:8c:
         fe:93:7e:30:ce:69:fb:3f:13:a0:51:74:8e:aa:97:3c:60:33:
         d5:5d:41:85:b4:80:cc:6e:f1:e4:f0:ad:59:39:69:7b:1d:4d:
         03:ef:b1:96:85:a2:6c:bb:8f:af:32:71:6d:4b:29:69:92:b5:
         ed:10:db:9a
-----BEGIN CERTIFICATE-----
MIIHJDCCBgygAwIBAgIUdNR4bZ3jmAqAcgw3GWbV6opQ6JIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJBNDE3
RjcyOERCRjAeFw0yMjAyMDcwMzQ2MjZaFw0yMzAyMDcwMzUxMjZaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjgyNzM5Rjk0RjQzNzA3N0I0
QTExQTRGQTgxN0E0RDgwRDVEMjY3QjZBQ0FGMTQ1NDRFNDNCNEMyNDM5NDU0MjdB
QUFBRjBBNDE2MzExMDg0MkFDMjlGMkQwN0Q1MTJGNDM3QTJDM0IxNjNGQzQzRUNB
NUI1ODIxNEI4NDc1ODg3QjhENEZFMTA4QjExQ0ZDNkNFMkVCQjI0RUQ3OUNCOTcw
OEYzNUUwNkU5NzRFOTNFMTI1QTM3RDlEQUU5NzA4RkMzQUU1OTcxQjAwNjFFM0JG
MEUxRDM1OEQyNTM0QzI1MTBENjdERDZDNTAxREU1MUZEM0Y0Q0MwM0VGRDIyM0E2
RkQ4MzQwNkQwOTI1NkNDMjI2RjRERURGNDVBOUFCMjJFNjZEOEVCRUQ1MTM5OUJG
M0UzRTIyNkY1OUJCQTgzMzZFREQ2OUVDRDk3MzQ1NDg3Q0I0OTUxMjVEQTg5QTZG
RkREQTMxMURFQjRBOEM0NThFQzJEQzdFMTBDNEIzOEM1MTY3OUZCMjBFREEyOEE1
MDM4MDA0OUQ1Q0M1RDNCRUVBQjVGRjY3RjVCRDIwQzc1Mjg5OTA5MEFBMTJENkNF
NThCMzM3REJBM0VCOTIyRDUyQzBEMTg3N0UwMEIyODBEODVEOEMxMkY1N0ZGQTFG
MDM1QTRBRDhDOTlGQzUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAuCc5+U9DcHe0oRpPqBek2A1dJntqyvFFROQ7TCQ5RUJ6qq8KQWMR
CEKsKfLQfVEvQ3osOxY/xD7KW1ghS4R1iHuNT+EIsRz8bOLrsk7XnLlwjzXgbpdO
k+Elo32drpcI/DrllxsAYeO/Dh01jSU0wlENZ91sUB3lH9P0zAPv0iOm/YNAbQkl
bMIm9N7fRamrIuZtjr7VE5m/Pj4ib1m7qDNu3Wns2XNFSHy0lRJdqJpv/doxHetK
jEWOwtx+EMSzjFFnn7IO2iilA4AEnVzF077qtf9n9b0gx1KJkJCqEtbOWLM326Pr
ki1SwNGHfgCygNhdjBL1f/ofA1pK2MmfxQIDAQABo4ICMjCCAi4wHQYDVR0OBBYE
FL4Kw5PKmwQEDKvu1uiT9tTVHmw1MB8GA1UdIwQYMBaAFKxVVEe6YsORB/Fr9XL4
KkF/co2/MA4GA1UdDwEB/wQEAwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzk5M2YzNTAtYjc1Ni00OTE2LThk
ODQtNDg0ZjAyNWRmZmNjLzAvQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJB
NDE3RjcyOERCRi5jcmwwdAYIKwYBBQUHAQEEaDBmMGQGCCsGAQUFBzAChlhyc3lu
YzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8yL0FDNTU1NDQ3
QkE2MkMzOTEwN0YxNkJGNTcyRjgyQTQxN0Y3MjhEQkYuY2VyMIGiBggrBgEFBQcB
CwSBlTCBkjCBjwYIKwYBBQUHMAuGgYJyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby8zOTkzZjM1MC1iNzU2LTQ5MTYtOGQ4NC00ODRmMDI1ZGZmY2MvMC8z
MTM4MzIyZTMyMzUzMzJlMzEzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMzMzgz
NDM4MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBAC2/RMwDQYJKoZIhvcNAQELBQADggEBAJlp6ZMuYAL6
iT2TNFvYkE/dHLkZ6LRykNYL2sNSHpwxe5uyyjRHjiz6014sTZyiUe8b4pPaoco8
nOQSbO+DZbBsMBZvlzLMwCi+cz+h7OYfBdKx/Q1CvJ34BqgGBRQHFYRhODyPpm6P
Zk+snQ8EdJhl7I+71CoPDrNdSJ4OPE2JsGqA7oO0+Yzw+jCQKUDw7/fARj6JeJU7
YZ1cNuaw7EkvbaKuyeBXyK0yTcaIfk72aK3R5W/D1v9hnTssfA1pfstKT9sTjP6T
fjDOafs/E6BRdI6qlzxgM9VdQYW0gMxu8eTwrVk5aXsdTQPvsZaFomy7j68ycW1L
KWmSte0Q25o=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:03 2024 by rpki-client on console-fra.rpki-client.org