Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3230302e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e3230302e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          UPQ3TBBMi0fS02IYdHxsGPx3jiSJsx/QEb5dBfLCKPY=
Subject key identifier:   89:0C:6A:6E:C7:25:EB:17:C6:13:51:47:EC:51:11:51:5D:D8:2B:CF
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       643BBC08FAA18A29A58442651339D104C4AC8806
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3230302e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:55 +0000
ROA not before:           Wed 29 Sep 2021 23:55:55 +0000
ROA not after:            Fri 30 Sep 2022 00:00:55 +0000
asID:                     17451
IP address blocks:        182.253.200.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:3b:bc:08:fa:a1:8a:29:a5:84:42:65:13:39:d1:04:c4:ac:88:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:55 2021 GMT
            Not After : Sep 30 00:00:55 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:cc:bd:47:c6:c4:60:64:cc:f1:92:0c:6a:d3:
                    11:46:0c:7d:d1:08:29:ec:51:5d:0c:14:60:fd:57:
                    c9:e7:bc:cb:0a:5b:09:73:84:4a:8f:90:27:83:d2:
                    cb:0e:41:d7:5b:b5:85:90:15:39:df:6b:b2:22:4f:
                    b9:f4:74:2b:47:56:ae:84:50:03:45:a0:c0:ae:ec:
                    a1:97:c4:46:46:0d:fc:30:bb:b3:39:57:1e:25:82:
                    ee:38:b8:34:d0:36:ad:e1:8c:c6:75:9a:33:8f:80:
                    6b:32:3b:8f:d9:fa:d9:13:6b:23:f5:bb:2f:35:c1:
                    d8:50:fa:6b:83:de:11:1e:f1:8d:84:2b:64:3e:90:
                    4c:2a:87:68:9b:b4:3f:a4:a2:bf:e6:3c:e8:91:c4:
                    c7:17:62:7c:59:9c:63:04:ab:eb:cd:ba:5b:0f:56:
                    76:dd:d2:95:67:f8:ef:f8:4a:35:33:f9:de:f9:f4:
                    a9:fe:b1:45:8f:88:78:b1:61:1e:7f:99:b8:15:f1:
                    1c:01:be:4e:47:47:bd:e5:dd:41:6f:6b:39:50:23:
                    ac:aa:6f:5e:23:d0:12:86:26:7a:f9:82:88:af:98:
                    48:45:64:75:e0:af:71:19:6c:87:48:92:f3:76:cc:
                    6d:bf:b1:34:ce:ff:ed:8a:ee:35:70:f6:58:13:15:
                    f7:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:0C:6A:6E:C7:25:EB:17:C6:13:51:47:EC:51:11:51:5D:D8:2B:CF
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3230302e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:cd:7a:6a:f4:b7:1a:3b:7a:c7:d1:f7:87:77:38:7d:4e:84:
         45:94:06:f9:19:86:17:d4:cd:da:59:9d:27:24:50:f0:2e:31:
         f0:09:b4:0e:7e:a0:ac:4f:9c:89:70:39:e7:bb:04:4d:de:a6:
         e0:1f:4f:d2:51:65:a4:b4:75:c4:e3:f0:93:a3:be:cb:eb:47:
         c1:96:ff:70:ab:e6:17:2c:3b:e9:94:45:1e:bf:3d:69:1c:b5:
         bf:18:30:8a:9d:65:bf:0a:36:05:5d:5b:ab:43:31:75:10:4b:
         0b:16:62:b4:c3:8c:8b:1d:f8:ab:fa:27:95:0d:bc:15:f9:a1:
         41:aa:d9:1c:f0:87:95:12:29:e0:af:9e:05:23:95:c4:fe:ff:
         4d:53:18:1e:64:89:36:b3:72:c7:35:bd:ee:24:79:38:94:5c:
         67:16:ce:19:82:74:5c:5c:81:38:ad:10:19:1b:ab:d5:2d:a3:
         d1:43:e6:4b:28:12:ea:d1:a9:36:f6:66:7a:e6:c9:5e:89:13:
         a0:4b:e1:1e:9f:75:ea:e4:ec:e1:b8:56:05:6c:cb:27:e8:56:
         a3:ef:06:95:5d:2a:12:3e:79:30:82:8c:69:ff:8b:7f:a7:2a:
         4c:71:3a:c2:87:62:04:07:92:7b:e5:64:24:bf:7f:50:36:e1:
         a4:8f:b1:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:03 2024 by rpki-client on console-fra.rpki-client.org