Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3231352e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e3231352e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          Yt2qgFO4NFdJcJ/3zdzPXeM2rtvAZoKe9blG5Li1LHY=
Subject key identifier:   AE:B8:99:52:AB:2A:18:F1:42:66:96:4F:02:94:20:73:73:AD:D5:EE
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       4EA5BF558530E921DC5BF2D62FCFCC290779F8F0
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3231352e302f32342d3234203d3e203137343531.roa
Signing time:             Tue 14 Sep 2021 05:18:04 +0000
ROA not before:           Tue 14 Sep 2021 05:13:04 +0000
ROA not after:            Wed 14 Sep 2022 05:18:04 +0000
asID:                     17451
IP address blocks:        182.253.215.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:a5:bf:55:85:30:e9:21:dc:5b:f2:d6:2f:cf:cc:29:07:79:f8:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 14 05:13:04 2021 GMT
            Not After : Sep 14 05:18:04 2022 GMT
        Subject: CN=3082010A0282010100B31EC6D852DE92BEAB5317DD64387C8370D41FB0F04EFBCF12B3103EF53EF97151E9B79426F670C1BC39462DFD402327A99B04F34B1A46C8D9205A3FEC65AB4CCEF932F8B5294454F4C128F71778FE8AF21066D6D0E30863E30451CE77A82E59131B5A170CE6B5D43B26BA5214DD2CAB10846106598628FC0105523992D77895F5F52D54EC9FBA934BBF33BF8AB3D158AF2F1B5BE741978DCF558F8F17C1B8D11B37B18369352D3065F0EC76561247627391D6A005061ECB95CF3EAB4549DAC55C2D927FCC5386F473D90580074B762CE368C4A3B54DF6A2BBD3AFC260CB753A8871E9A8FBAD3B87C4E79CE68FBDB340392D253645C9148C1DA2DEA7657EAD750203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:1e:c6:d8:52:de:92:be:ab:53:17:dd:64:38:
                    7c:83:70:d4:1f:b0:f0:4e:fb:cf:12:b3:10:3e:f5:
                    3e:f9:71:51:e9:b7:94:26:f6:70:c1:bc:39:46:2d:
                    fd:40:23:27:a9:9b:04:f3:4b:1a:46:c8:d9:20:5a:
                    3f:ec:65:ab:4c:ce:f9:32:f8:b5:29:44:54:f4:c1:
                    28:f7:17:78:fe:8a:f2:10:66:d6:d0:e3:08:63:e3:
                    04:51:ce:77:a8:2e:59:13:1b:5a:17:0c:e6:b5:d4:
                    3b:26:ba:52:14:dd:2c:ab:10:84:61:06:59:86:28:
                    fc:01:05:52:39:92:d7:78:95:f5:f5:2d:54:ec:9f:
                    ba:93:4b:bf:33:bf:8a:b3:d1:58:af:2f:1b:5b:e7:
                    41:97:8d:cf:55:8f:8f:17:c1:b8:d1:1b:37:b1:83:
                    69:35:2d:30:65:f0:ec:76:56:12:47:62:73:91:d6:
                    a0:05:06:1e:cb:95:cf:3e:ab:45:49:da:c5:5c:2d:
                    92:7f:cc:53:86:f4:73:d9:05:80:07:4b:76:2c:e3:
                    68:c4:a3:b5:4d:f6:a2:bb:d3:af:c2:60:cb:75:3a:
                    88:71:e9:a8:fb:ad:3b:87:c4:e7:9c:e6:8f:bd:b3:
                    40:39:2d:25:36:45:c9:14:8c:1d:a2:de:a7:65:7e:
                    ad:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:B8:99:52:AB:2A:18:F1:42:66:96:4F:02:94:20:73:73:AD:D5:EE
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3231352e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.215.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:af:41:5b:16:2c:ac:b1:8f:e5:6a:a1:ae:b4:90:47:ac:0c:
         80:e0:ad:50:09:88:d9:12:34:e6:8e:13:4e:6b:0a:72:8d:56:
         ff:c5:24:64:07:72:b0:5b:dc:86:48:69:3d:ce:2a:44:89:76:
         7d:95:03:da:b5:54:bb:26:cd:70:97:fe:99:05:a5:bf:eb:d3:
         92:3c:3c:b9:80:e4:ef:37:81:50:38:d5:ba:ea:e8:80:1c:02:
         a7:a4:13:53:ed:b6:9e:a4:46:d4:15:06:ad:65:64:15:d4:10:
         91:0d:1c:19:9a:c8:c5:fe:f1:8f:23:2a:39:68:00:63:f6:66:
         b2:d3:7c:dd:d6:6c:74:ba:07:44:87:c7:cc:f9:19:04:6f:af:
         80:34:9d:80:76:c7:90:bd:d5:89:2b:c6:1d:6e:b6:24:aa:b6:
         62:d1:b2:1a:28:da:18:da:c0:bd:7f:9f:65:00:f1:f1:3a:69:
         9e:4b:a5:44:2e:a6:a8:14:9e:4b:ba:8b:3b:12:de:75:ee:09:
         1d:12:3d:63:89:e5:a5:e9:ce:74:1a:fa:a1:64:42:4c:31:40:
         82:1c:ab:8c:80:df:19:e0:0e:fc:6d:97:73:5f:b5:2d:16:13:
         5b:de:8a:f2:ab:cb:5d:13:6c:80:4a:c3:67:4a:7a:c3:c9:b8:
         cb:a7:24:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:03 2024 by rpki-client on console-fra.rpki-client.org