Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3230382e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e3230382e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          fKRi1HseeXqx2bX2XNjIFyqVIa7d3NnSkiWmckHPvGM=
Subject key identifier:   9B:A0:AD:D2:A8:48:4F:55:70:F6:5E:5C:38:B6:0B:EE:75:FE:CF:DA
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       4B96A3C1E8479928ED9963C515C44B8CEB2B1A16
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3230382e302f32342d3234203d3e203137343531.roa
Signing time:             Tue 14 Sep 2021 05:17:42 +0000
ROA not before:           Tue 14 Sep 2021 05:12:42 +0000
ROA not after:            Wed 14 Sep 2022 05:17:42 +0000
asID:                     17451
IP address blocks:        182.253.208.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:96:a3:c1:e8:47:99:28:ed:99:63:c5:15:c4:4b:8c:eb:2b:1a:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 14 05:12:42 2021 GMT
            Not After : Sep 14 05:17:42 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ee:97:77:0c:21:c1:bb:0b:fa:c8:8a:1a:23:
                    4b:46:ad:13:59:e5:5f:98:4b:e6:dd:74:8a:9c:9c:
                    ee:50:9e:54:6b:74:67:32:8d:a9:f8:36:f5:02:a5:
                    f2:9e:cc:46:85:f3:9b:39:4a:a1:1f:3d:d5:bc:de:
                    89:18:07:e4:a9:5c:91:5d:de:08:0e:9d:84:d8:01:
                    ed:c3:e0:bb:34:7d:3e:94:97:26:0a:19:ea:c0:b4:
                    15:43:44:6b:03:fc:60:29:aa:76:ad:8f:65:a7:94:
                    4b:53:11:a3:ea:bd:b3:ec:9a:a3:5b:16:6d:40:02:
                    ff:ae:64:88:13:07:dc:be:dc:1e:cb:d7:cd:4c:6c:
                    10:e7:7d:20:6e:9a:05:eb:e4:5c:54:3b:d9:e8:a6:
                    33:98:a5:84:57:da:bc:a2:93:2e:e1:75:9a:e1:89:
                    91:1d:9c:07:e7:21:f8:e4:12:28:52:5b:fe:57:65:
                    70:8a:c0:14:e4:f7:e2:56:ee:0c:75:b5:ec:a7:b7:
                    0a:ee:88:08:2a:47:d2:4e:74:cd:b7:b9:c1:5d:34:
                    f7:ba:12:84:29:cf:cc:0d:0f:32:b9:32:9b:55:fc:
                    aa:bd:44:85:2d:58:37:d5:ab:21:d0:23:87:a8:0f:
                    ab:e7:47:ef:14:dd:53:88:4f:52:60:16:33:08:cf:
                    03:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:A0:AD:D2:A8:48:4F:55:70:F6:5E:5C:38:B6:0B:EE:75:FE:CF:DA
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3230382e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:06:a0:47:d0:7b:27:67:33:c1:19:ca:5d:68:eb:70:be:72:
         56:ae:7d:4b:4e:f9:40:b8:0f:2d:76:24:11:e7:27:e5:30:28:
         f3:29:01:84:89:96:33:a0:a8:37:cd:39:7b:14:73:66:a3:47:
         ba:5e:75:d7:9e:09:a9:ad:3d:9b:3e:e7:5a:c2:9c:25:34:e1:
         94:30:26:20:21:81:27:1a:2a:1d:e0:b7:3d:e0:89:6c:f9:3a:
         5d:05:c3:84:5d:de:49:f1:3a:39:b8:ee:93:d5:18:57:d7:f1:
         02:f1:24:9b:a3:ae:b1:61:ed:fb:e2:69:7c:44:1d:7d:bb:87:
         24:9a:70:61:72:e7:4b:bb:1f:66:da:18:ee:36:d1:a0:ee:c4:
         bb:57:75:f3:81:82:b6:4a:c9:0b:d9:e0:6a:ef:a8:1c:c8:6b:
         46:51:d9:e1:73:51:32:6f:4f:85:82:f9:64:6f:8a:47:06:ac:
         bf:36:68:4b:c3:0b:26:f1:4b:a7:a6:1c:a1:c7:32:fb:3a:be:
         e3:19:37:cb:0c:e4:36:ea:e4:86:ac:b3:f9:6f:ff:f1:3e:e8:
         4c:75:8b:4e:94:e2:fc:90:b3:eb:6c:12:31:8d:32:da:95:48:
         b8:66:54:c0:15:27:a9:3b:0f:7c:ad:03:6c:32:6d:6a:6a:60:
         1f:31:7c:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:03 2024 by rpki-client on console-fra.rpki-client.org