Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3233372e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e3233372e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          fE5ExoCwQIScIyHrW6Tg6hMF0fjl3TGMLCR6bvUJbcY=
Subject key identifier:   6E:AF:01:3F:52:E7:5A:09:B5:BB:37:69:E4:0B:E9:0F:8F:46:E6:77
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       399262A53E0AE500FA7A27CED49C9C4BC4DBACCB
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3233372e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:58 +0000
ROA not before:           Wed 29 Sep 2021 23:55:58 +0000
ROA not after:            Fri 30 Sep 2022 00:00:58 +0000
asID:                     17451
IP address blocks:        182.253.237.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:92:62:a5:3e:0a:e5:00:fa:7a:27:ce:d4:9c:9c:4b:c4:db:ac:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:58 2021 GMT
            Not After : Sep 30 00:00:58 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:f1:f3:e6:55:cb:9f:b7:f7:58:95:39:df:95:
                    33:1d:bc:bd:ae:a3:20:c7:cc:99:cb:c5:ac:88:e9:
                    73:3c:77:2f:5b:fc:75:da:2e:7b:45:e6:03:d2:3f:
                    ae:51:95:f7:98:a0:cf:37:46:94:8a:17:cf:c0:09:
                    91:3e:00:d2:28:ad:aa:e9:1b:17:d1:c9:95:54:2a:
                    57:e6:5d:c3:0d:d3:df:86:82:5f:84:27:6d:e5:40:
                    2a:a1:fc:fa:7b:d9:c1:24:0f:44:60:ed:24:c3:7c:
                    5d:97:dc:ae:49:6b:2f:ea:9e:6a:73:48:d4:2b:3a:
                    dc:93:4c:72:60:1e:70:92:26:e1:b8:7e:3a:30:c5:
                    db:e3:eb:13:1b:c7:ff:cc:99:47:e7:12:c5:0a:d2:
                    fd:65:f5:fc:30:b7:7f:04:b2:2b:3a:64:00:66:1f:
                    4f:8a:0f:f1:2e:c2:a2:bd:78:85:d9:23:b5:fb:04:
                    35:d3:67:b9:45:6b:2c:fd:65:4f:35:11:55:bf:00:
                    2e:05:00:ea:d2:1c:4b:b2:3c:e9:64:23:e6:b4:9e:
                    9f:fb:0c:ea:25:22:8f:47:38:49:49:d3:d0:ef:6d:
                    d9:8d:0e:c8:db:8f:e1:8b:23:6c:07:bb:a2:91:3e:
                    4b:96:f9:89:53:bd:f6:90:1d:d0:c6:83:77:2d:1a:
                    51:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:AF:01:3F:52:E7:5A:09:B5:BB:37:69:E4:0B:E9:0F:8F:46:E6:77
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3233372e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:3c:0e:8f:b4:db:c3:94:15:0d:03:d3:4c:2a:79:44:a4:ea:
         38:ff:b0:ae:b1:78:f7:4b:19:0a:eb:06:be:68:c6:cf:61:fb:
         83:3d:76:30:da:05:a8:e3:a4:94:ec:2e:50:9f:06:8d:ed:db:
         81:72:4c:f4:18:87:80:39:97:6a:eb:41:96:d1:c6:ed:d0:7c:
         28:b4:eb:61:e7:fa:1f:03:5d:3d:d4:33:9c:3e:8a:b1:40:b3:
         9f:a6:e0:56:c3:0a:fa:78:0d:b5:78:45:71:9b:52:33:3e:60:
         31:71:2a:a3:b8:46:2b:48:ed:75:68:43:a8:7b:3c:74:c2:90:
         f0:9e:f7:9a:d4:4e:ec:85:84:de:c5:5a:2e:f4:79:99:97:67:
         6d:6d:c0:fc:89:22:c7:8c:ae:29:f9:5e:9b:9c:31:b6:bc:c4:
         8f:c5:9c:8a:70:7f:c6:a2:9c:fd:67:a6:bf:39:8e:c8:7b:ce:
         74:a5:02:94:3b:fc:5a:4c:a3:8a:61:f7:bd:82:3b:12:31:76:
         8e:ec:0d:a6:88:02:86:7b:f4:ea:e0:c8:65:9b:75:3c:b0:61:
         aa:d0:49:eb:13:8f:92:3e:2c:18:09:19:34:7d:b4:34:06:67:
         6f:df:d8:e3:aa:46:14:09:fd:a0:32:b5:47:26:9e:fe:44:d4:
         69:e8:4c:3b
-----BEGIN CERTIFICATE-----
MIIHJjCCBg6gAwIBAgIUOZJipT4K5QD6eifO1JycS8TbrMswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJBNDE3
RjcyOERCRjAeFw0yMTA5MjkyMzU1NThaFw0yMjA5MzAwMDAwNThaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRkFGMUYzRTY1NUNCOUZCN0Y3
NTg5NTM5REY5NTMzMURCQ0JEQUVBMzIwQzdDQzk5Q0JDNUFDODhFOTczM0M3NzJG
NUJGQzc1REEyRTdCNDVFNjAzRDIzRkFFNTE5NUY3OThBMENGMzc0Njk0OEExN0NG
QzAwOTkxM0UwMEQyMjhBREFBRTkxQjE3RDFDOTk1NTQyQTU3RTY1REMzMEREM0RG
ODY4MjVGODQyNzZERTU0MDJBQTFGQ0ZBN0JEOUMxMjQwRjQ0NjBFRDI0QzM3QzVE
OTdEQ0FFNDk2QjJGRUE5RTZBNzM0OEQ0MkIzQURDOTM0QzcyNjAxRTcwOTIyNkUx
Qjg3RTNBMzBDNURCRTNFQjEzMUJDN0ZGQ0M5OTQ3RTcxMkM1MEFEMkZENjVGNUZD
MzBCNzdGMDRCMjJCM0E2NDAwNjYxRjRGOEEwRkYxMkVDMkEyQkQ3ODg1RDkyM0I1
RkIwNDM1RDM2N0I5NDU2QjJDRkQ2NTRGMzUxMTU1QkYwMDJFMDUwMEVBRDIxQzRC
QjIzQ0U5NjQyM0U2QjQ5RTlGRkIwQ0VBMjUyMjhGNDczODQ5NDlEM0QwRUY2REQ5
OEQwRUM4REI4RkUxOEIyMzZDMDdCQkEyOTEzRTRCOTZGOTg5NTNCREY2OTAxREQw
QzY4Mzc3MkQxQTUxMzUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA+vHz5lXLn7f3WJU535UzHby9rqMgx8yZy8WsiOlzPHcvW/x12i57
ReYD0j+uUZX3mKDPN0aUihfPwAmRPgDSKK2q6RsX0cmVVCpX5l3DDdPfhoJfhCdt
5UAqofz6e9nBJA9EYO0kw3xdl9yuSWsv6p5qc0jUKzrck0xyYB5wkibhuH46MMXb
4+sTG8f/zJlH5xLFCtL9ZfX8MLd/BLIrOmQAZh9Pig/xLsKivXiF2SO1+wQ102e5
RWss/WVPNRFVvwAuBQDq0hxLsjzpZCPmtJ6f+wzqJSKPRzhJSdPQ723ZjQ7I24/h
iyNsB7uikT5LlvmJU732kB3QxoN3LRpRNQIDAQABo4ICNDCCAjAwHQYDVR0OBBYE
FG6vAT9S51oJtbs3aeQL6Q+PRuZ3MB8GA1UdIwQYMBaAFKxVVEe6YsORB/Fr9XL4
KkF/co2/MA4GA1UdDwEB/wQEAwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzk5M2YzNTAtYjc1Ni00OTE2LThk
ODQtNDg0ZjAyNWRmZmNjLzAvQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJB
NDE3RjcyOERCRi5jcmwwdAYIKwYBBQUHAQEEaDBmMGQGCCsGAQUFBzAChlhyc3lu
YzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8yL0FDNTU1NDQ3
QkE2MkMzOTEwN0YxNkJGNTcyRjgyQTQxN0Y3MjhEQkYuY2VyMIGkBggrBgEFBQcB
CwSBlzCBlDCBkQYIKwYBBQUHMAuGgYRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby8zOTkzZjM1MC1iNzU2LTQ5MTYtOGQ4NC00ODRmMDI1ZGZmY2MvMC8z
MTM4MzIyZTMyMzUzMzJlMzIzMzM3MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEz
NzM0MzUzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEALb97TANBgkqhkiG9w0BAQsFAAOCAQEAZjwOj7Tb
w5QVDQPTTCp5RKTqOP+wrrF490sZCusGvmjGz2H7gz12MNoFqOOklOwuUJ8Gje3b
gXJM9BiHgDmXautBltHG7dB8KLTrYef6HwNdPdQznD6KsUCzn6bgVsMK+ngNtXhF
cZtSMz5gMXEqo7hGK0jtdWhDqHs8dMKQ8J73mtRO7IWE3sVaLvR5mZdnbW3A/Iki
x4yuKflem5wxtrzEj8WcinB/xqKc/WemvzmOyHvOdKUClDv8WkyjimH3vYI7EjF2
juwNpogChnv06uDIZZt1PLBhqtBJ6xOPkj4sGAkZNH20NAZnb9/Y46pGFAn9oDK1
Ryae/kTUaehMOw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:03 2024 by rpki-client on console-fra.rpki-client.org