Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e32392e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e32392e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          aS8/KTiavmZV3oin9LQ5PS5J9i0KrZp9YzNKPxZFNG0=
Subject key identifier:   3B:A6:12:11:A7:75:7B:CA:C6:87:56:48:32:0A:E3:F0:20:07:9E:AE
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       763DA9F7B60D94FACAEDB3249E3DBC415FA4DFA3
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e32392e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:01:04 +0000
ROA not before:           Wed 29 Sep 2021 23:56:04 +0000
ROA not after:            Fri 30 Sep 2022 00:01:04 +0000
asID:                     17451
IP address blocks:        182.253.29.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:3d:a9:f7:b6:0d:94:fa:ca:ed:b3:24:9e:3d:bc:41:5f:a4:df:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:56:04 2021 GMT
            Not After : Sep 30 00:01:04 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:6a:29:45:20:c8:15:52:3c:bf:bb:33:46:a6:
                    32:c1:f2:93:fa:18:86:59:2b:37:3f:06:ad:21:8a:
                    5e:86:e6:70:90:9c:58:5a:ad:af:85:1c:aa:4f:96:
                    bd:f7:ba:a6:04:4d:b6:a6:f7:66:aa:71:59:b4:16:
                    e5:59:a1:b5:c3:00:ee:17:86:f2:d9:a0:ab:eb:4e:
                    1f:cc:92:4b:eb:19:d9:56:c6:81:44:57:27:40:d1:
                    b9:c3:c9:37:49:fc:46:f7:4f:80:0d:9e:aa:96:f3:
                    be:7f:cc:5c:8b:38:ac:11:9e:6a:8b:37:30:a5:60:
                    c3:9d:df:8f:a1:b2:2e:2a:75:79:1a:a3:f8:15:fb:
                    db:25:b3:32:bd:4c:5e:40:f7:bc:c9:43:c8:4f:c9:
                    9a:82:e8:97:9e:76:92:ec:e1:7b:a4:17:15:d5:49:
                    34:31:f0:20:15:49:c4:af:cd:46:9b:3c:81:94:15:
                    b0:24:69:fc:b5:b6:80:1c:8f:ce:62:8f:5b:a4:fa:
                    79:0b:25:43:0c:b4:c0:a2:e6:e2:c8:1d:4a:e5:40:
                    e4:55:9c:d0:48:2d:73:22:e9:d6:4a:15:40:cb:ff:
                    5c:bf:4d:91:29:33:2b:2f:7f:35:f4:99:ba:a8:60:
                    fc:21:c4:6c:49:a7:25:db:cc:0f:a4:e6:6d:17:5f:
                    9e:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:A6:12:11:A7:75:7B:CA:C6:87:56:48:32:0A:E3:F0:20:07:9E:AE
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e32392e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.29.0/24

    Signature Algorithm: sha256WithRSAEncryption
         aa:23:1d:68:c5:00:2d:9b:0b:ad:30:1a:27:a9:b8:ed:e1:68:
         56:0f:a2:b8:28:32:54:76:9c:7e:7e:71:8c:0c:63:7d:33:e6:
         f1:df:0f:dd:d8:ff:04:ce:f8:30:2a:66:22:30:96:cd:c4:aa:
         6d:fd:36:4e:42:e3:58:f6:e0:62:46:d2:0e:0b:2a:09:4c:7a:
         87:98:22:af:b7:ef:42:0b:60:5d:0a:28:1d:c3:48:e5:d7:ae:
         c7:8e:16:40:a8:b9:4f:c7:51:6b:e3:d4:7f:3f:c1:5a:9d:79:
         95:c9:5d:16:92:21:cf:30:3b:10:d6:65:3c:5f:e2:0a:9c:ba:
         29:22:a7:c5:cd:57:ca:c7:33:71:3f:95:4d:9b:7b:6a:1e:4f:
         43:e0:31:a5:e3:d8:17:1a:fa:9c:9b:89:bd:5c:7b:68:75:b9:
         7e:67:3e:2d:63:fb:0f:97:52:b8:b8:e1:ab:96:bd:03:6a:51:
         f0:4f:29:35:d6:c8:78:53:52:52:39:c0:45:7e:a6:09:54:4f:
         67:7d:c5:3d:48:16:e4:f4:37:23:b0:5a:bb:4b:06:e6:27:aa:
         bb:80:4f:5b:93:5e:ac:6d:8b:1c:0f:7a:bd:ed:93:46:44:d2:
         15:4b:66:3b:f6:4a:80:bd:d6:ec:4c:dd:fa:31:7a:cd:8b:bf:
         cf:9e:8a:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:03 2024 by rpki-client on console-fra.rpki-client.org