Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3233322e302f32322d3232203d3e203137343531.roa
File:                     3138322e3235332e3233322e302f32322d3232203d3e203137343531.roa (raw, json)
Hash identifier:          AV42pLz2X04RQjJx65Wfzw+7moVJPb1Gg2BHh2OISL8=
Subject key identifier:   AB:1A:06:A9:F4:79:C9:00:00:56:9B:CD:82:C2:9E:16:2A:FF:AA:5A
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       797C0BF1905222DC27147A91B2C83F53656B4778
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3233322e302f32322d3232203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:46 +0000
ROA not before:           Wed 29 Sep 2021 23:55:46 +0000
ROA not after:            Fri 30 Sep 2022 00:00:46 +0000
asID:                     17451
IP address blocks:        182.253.232.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:7c:0b:f1:90:52:22:dc:27:14:7a:91:b2:c8:3f:53:65:6b:47:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:46 2021 GMT
            Not After : Sep 30 00:00:46 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:b9:a3:1a:c4:1b:80:3b:77:8b:a2:27:43:ac:
                    af:a8:55:a1:37:6e:93:dc:1c:76:e2:34:ce:34:a8:
                    fa:9b:9b:53:19:1b:a6:22:35:a6:0a:c3:c7:d9:e4:
                    2a:95:b2:da:76:b1:ae:10:02:01:4c:de:08:6b:61:
                    9d:7a:40:66:5f:fd:13:8a:3f:a0:57:4a:ea:c3:0d:
                    a8:fc:ea:02:8e:b8:c1:d4:80:e0:58:e3:70:3c:11:
                    50:0a:54:e7:4f:71:94:05:f6:47:76:a2:eb:75:0a:
                    13:16:bd:86:42:27:d1:eb:f0:5f:d9:17:e6:73:6f:
                    32:62:63:5d:f8:45:75:23:6f:52:0b:86:e1:0a:fd:
                    16:7c:56:42:77:8f:a3:11:63:ee:2c:6e:99:a7:b2:
                    ac:00:4d:87:02:91:b0:77:b2:c3:9d:72:93:e7:ac:
                    1e:5d:50:b5:82:c3:f1:ab:cb:c6:21:c4:a7:5f:d8:
                    2c:87:fc:48:59:1f:02:3b:fe:af:26:2a:7a:bf:58:
                    10:28:cb:e9:28:34:2c:23:ba:02:22:51:cf:e8:e9:
                    6a:c7:fd:97:53:31:4b:26:b9:b4:ea:8a:8a:65:1e:
                    3b:a8:7d:5b:48:ae:08:6b:56:90:e9:11:30:23:c6:
                    ba:0d:5f:c8:3e:94:7a:a8:2c:be:0f:6b:f4:75:e8:
                    3e:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:1A:06:A9:F4:79:C9:00:00:56:9B:CD:82:C2:9E:16:2A:FF:AA:5A
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3233322e302f32322d3232203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         14:47:e0:43:93:1c:bc:cd:7e:15:3d:2d:89:34:8c:a1:6d:a5:
         09:ba:7f:f2:b8:0e:45:19:fc:33:22:38:50:12:f1:83:96:33:
         9d:82:60:80:78:f0:40:73:61:3c:cb:54:aa:e5:0a:28:e6:2e:
         48:61:42:fc:57:c9:8f:dc:1b:b3:d4:94:d7:e7:7b:e5:8b:e5:
         71:85:21:59:26:c2:b4:ab:05:39:78:de:62:0c:6a:aa:c8:48:
         7d:c1:f7:88:22:4c:ef:0c:c8:1b:11:5b:4a:67:7d:e9:a7:7a:
         7d:3e:5f:71:07:8c:b1:90:5c:51:32:c6:07:62:12:5a:ee:c5:
         e3:30:64:d2:8e:64:6d:09:f6:cf:0a:01:da:49:42:8f:75:27:
         ac:9e:fc:15:8b:ba:03:c9:e2:3c:6d:3f:87:44:fe:ac:c6:67:
         38:cc:57:95:9f:89:12:bc:04:06:c0:3b:5a:01:18:45:28:5f:
         d7:d4:99:09:cc:5f:b4:e4:2d:98:51:ce:b2:c1:1b:5b:13:f5:
         da:f0:41:84:0d:13:da:9b:f8:bf:f0:aa:f9:1a:30:33:94:2d:
         86:1c:72:bd:b2:72:f1:e0:bd:10:b1:a2:cf:80:0d:79:85:86:
         15:4e:93:bf:a6:a5:a6:a1:bd:73:a2:d7:db:1c:c2:63:57:fd:
         e7:ce:64:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:03 2024 by rpki-client on console-fra.rpki-client.org