Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3139352e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e3139352e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          DfJe9U5A0feMRUYi/o5wJxWERRkXpMpCjYydc51skmk=
Subject key identifier:   B9:36:91:DF:97:1C:65:13:5F:E1:D8:8D:0D:4F:7C:91:86:C8:F3:AB
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       483C4EE778950EA12DB595AC9CDB798536D90A78
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3139352e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:41 +0000
ROA not before:           Wed 29 Sep 2021 23:55:41 +0000
ROA not after:            Fri 30 Sep 2022 00:00:41 +0000
asID:                     17451
IP address blocks:        182.253.195.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:3c:4e:e7:78:95:0e:a1:2d:b5:95:ac:9c:db:79:85:36:d9:0a:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:41 2021 GMT
            Not After : Sep 30 00:00:41 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:e8:34:d1:a7:54:f5:d3:ef:34:33:94:6d:f4:
                    68:32:a1:28:31:f8:33:cf:92:0c:65:d4:5a:41:10:
                    f7:fb:5a:ab:1e:6a:ff:e2:2c:40:aa:c9:f6:3f:63:
                    e1:ed:61:1a:52:7d:ea:45:71:70:79:65:bf:84:6d:
                    9a:28:85:1f:7e:25:eb:b6:6e:87:81:fc:8e:9f:b1:
                    9d:aa:90:a4:2c:b9:9a:30:c3:88:f0:1d:a9:c0:82:
                    6f:8b:ef:c8:db:1b:d9:29:ea:92:10:23:89:4a:9c:
                    c8:3c:16:1a:b8:30:8f:02:fa:97:9d:b1:4c:cb:46:
                    d8:a2:55:31:c6:6c:0a:3e:f2:a5:d7:92:69:d4:d5:
                    5c:98:61:0b:d7:a1:fa:8c:5b:27:12:84:35:b9:90:
                    8a:99:5b:58:fc:dc:64:8e:31:cb:55:7d:cc:b2:e2:
                    04:5b:cc:5a:fb:20:45:e8:df:46:11:d6:1f:57:2b:
                    a7:bb:10:75:5b:ce:77:b9:85:63:1f:6e:ed:0f:76:
                    f2:18:9d:58:12:39:75:b7:59:4c:be:d3:7b:3e:66:
                    7c:4c:ee:59:52:f1:47:15:43:a8:d8:70:6e:0b:a4:
                    dc:77:f6:c5:1d:b0:26:5c:3c:82:8d:0b:2c:0a:41:
                    ee:80:53:f1:93:ce:0d:08:b1:e4:be:04:93:ec:04:
                    58:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:36:91:DF:97:1C:65:13:5F:E1:D8:8D:0D:4F:7C:91:86:C8:F3:AB
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3139352e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a0:0f:f6:12:c6:4b:83:65:14:23:e8:d1:f5:93:1d:14:4a:7f:
         7c:09:e3:e6:49:38:7a:ba:5e:dc:16:88:f0:ea:b3:e9:f5:f6:
         6d:3a:e7:45:40:7e:ee:b3:d0:35:36:f3:76:77:2e:9c:0c:7f:
         9b:71:c3:a9:41:14:6b:12:4d:47:72:65:b5:29:cb:e9:90:00:
         9a:bd:2d:08:53:43:8e:22:1b:57:bf:9d:81:62:77:08:49:4f:
         a7:67:c4:ae:2d:c8:ac:44:87:71:67:10:c1:8c:61:2a:88:d0:
         53:87:6f:09:56:a4:9b:e0:05:7f:a0:74:3f:54:e5:75:79:57:
         f0:9c:b8:26:22:0b:db:b5:fd:d0:24:68:d2:5e:d4:df:d4:97:
         98:42:3a:0a:bf:3e:0f:1c:79:c1:59:9f:00:5a:42:3b:1d:29:
         be:ee:b0:d2:9f:58:70:48:6b:4a:96:e2:51:36:82:98:ea:95:
         c4:58:f6:79:03:d7:71:8c:f2:cc:76:52:63:54:08:9c:01:ec:
         e3:5c:cc:4f:fa:5d:f6:00:13:b5:23:ba:8d:7e:ad:81:f8:73:
         76:71:41:c4:80:2c:e5:19:8e:78:2b:c1:07:8a:ce:0b:8f:f4:
         75:79:91:bc:80:c8:0a:7e:9d:13:df:0b:4b:07:8d:bd:bf:4d:
         36:85:fc:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:03 2024 by rpki-client on console-fra.rpki-client.org