Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3230322e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e3230322e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          mXXCyKtYtQ61z1twQ7xegVxZXeZ096LNL2zTbjmq+1U=
Subject key identifier:   6C:AA:CA:C0:35:02:50:B6:9F:D3:D1:55:4A:3A:01:9E:80:AA:59:48
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       26FAFE6FB5FD99E4DD90A4F4507BB80691FF2A6C
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3230322e302f32342d3234203d3e203137343531.roa
Signing time:             Tue 14 Sep 2021 05:17:23 +0000
ROA not before:           Tue 14 Sep 2021 05:12:23 +0000
ROA not after:            Wed 14 Sep 2022 05:17:23 +0000
asID:                     17451
IP address blocks:        182.253.202.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:fa:fe:6f:b5:fd:99:e4:dd:90:a4:f4:50:7b:b8:06:91:ff:2a:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 14 05:12:23 2021 GMT
            Not After : Sep 14 05:17:23 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:25:e2:28:0a:d2:95:89:f4:9a:84:80:00:4b:
                    65:3b:43:24:4b:60:ad:e4:7b:40:16:14:39:e2:f1:
                    67:c7:81:a6:31:2a:f8:50:c8:36:45:74:c5:c5:69:
                    86:4c:89:bb:fd:03:4c:60:3f:34:32:a2:d5:62:5e:
                    bd:c5:c0:a4:4a:af:65:75:77:22:a0:52:09:f3:ec:
                    56:fe:34:b9:77:cd:19:a5:c7:c6:c5:4f:38:af:7a:
                    af:37:1d:8a:0b:7b:ee:71:69:b3:e9:d9:81:6c:5e:
                    e5:be:c0:16:c9:47:cc:67:65:19:45:64:d1:d5:6d:
                    5d:70:fd:7b:11:1b:7c:a1:62:32:36:cd:d4:cc:5b:
                    8a:8e:e9:3f:91:f6:85:98:9e:0e:85:3d:61:5c:de:
                    54:b3:4e:58:e0:6f:87:d5:dc:39:32:2c:da:6e:1c:
                    8a:1b:c3:47:4c:b5:1e:ac:a8:0c:82:b8:1e:c0:ab:
                    66:4d:a4:0b:d7:18:f3:86:07:18:59:30:4e:6f:cf:
                    d3:0f:10:fa:d9:3a:49:72:4e:55:bf:af:07:61:f5:
                    de:4f:d1:8e:05:c4:30:bb:6f:70:ea:3a:af:dc:02:
                    2b:c0:08:06:b7:41:56:31:cf:a5:fb:13:41:26:b6:
                    58:49:b5:fc:d8:91:34:c3:7f:02:86:7f:d2:9f:25:
                    80:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:AA:CA:C0:35:02:50:B6:9F:D3:D1:55:4A:3A:01:9E:80:AA:59:48
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3230322e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:85:82:98:fc:36:93:6a:ae:be:68:61:cf:4e:b6:6f:11:26:
         a0:f8:f8:ba:a7:76:4e:ee:22:6a:01:13:c0:b8:4e:16:b9:82:
         96:63:46:ee:26:19:cf:69:ed:90:b9:e5:f2:69:80:aa:f0:f2:
         f8:81:7f:ba:b8:17:cf:7a:06:9d:a6:4d:db:7c:1b:a2:5d:4d:
         fd:23:3c:86:64:bc:fb:e9:fe:be:d5:08:3e:eb:37:b3:70:e9:
         11:7c:18:22:46:fe:90:1d:6f:d8:45:a6:66:71:c7:02:5a:0f:
         d1:e1:13:a7:d9:9c:52:10:79:d3:b4:15:74:56:ff:7f:5d:52:
         62:a9:c0:9f:26:de:7a:8c:99:fb:de:0d:ba:17:32:07:bc:4e:
         fd:13:2d:d7:49:86:6b:8d:87:f4:5b:73:5c:d9:c3:b2:3f:86:
         94:69:95:7a:25:18:02:33:28:b9:41:a2:ea:a4:31:20:e2:d9:
         40:1b:64:7b:e6:9d:8b:57:a1:a7:15:94:af:c6:f0:97:c6:d7:
         b6:26:fe:b5:8a:3b:f2:17:78:72:e1:cd:92:ac:28:6f:39:ce:
         81:2b:e2:f1:ab:0d:a6:6d:14:54:23:3b:83:98:ea:d0:d8:80:
         59:c3:0d:8a:f1:6b:76:24:b5:d2:3a:f7:12:f3:45:59:f7:7b:
         44:af:d5:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:03 2024 by rpki-client on console-fra.rpki-client.org