Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e33372e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e33372e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          F/Wy9FurYzwxbXyjuG9SQe6K2QJ3b4z8Yu8HunLV4zw=
Subject key identifier:   9D:C3:42:63:25:16:65:D7:EA:82:D1:31:20:7B:60:89:82:85:2D:5C
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       52936ABC4B42C4AA5417266DCB822C867B153B69
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e33372e302f32342d3234203d3e203137343531.roa
Signing time:             Tue 14 Sep 2021 05:18:34 +0000
ROA not before:           Tue 14 Sep 2021 05:13:34 +0000
ROA not after:            Wed 14 Sep 2022 05:18:34 +0000
asID:                     17451
IP address blocks:        182.253.37.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:93:6a:bc:4b:42:c4:aa:54:17:26:6d:cb:82:2c:86:7b:15:3b:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 14 05:13:34 2021 GMT
            Not After : Sep 14 05:18:34 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:69:26:11:31:4d:31:22:a2:87:4c:63:93:08:
                    8a:ae:a4:c3:6c:14:55:9d:54:5d:78:7a:30:a0:07:
                    71:d2:79:dc:52:aa:48:08:6a:2c:40:59:8b:54:52:
                    50:3b:6c:3e:4e:cb:fe:6f:cc:2b:e0:25:94:ea:d6:
                    93:e6:14:f0:08:ce:b4:d8:0c:06:70:2c:82:b9:db:
                    20:67:c8:00:75:55:8d:c9:36:ff:da:03:c7:c7:f7:
                    ef:2d:4e:f4:63:d1:7a:7a:d2:1a:5d:d8:91:08:69:
                    ff:10:6d:a8:3c:52:09:18:ac:02:50:8e:ed:0b:d4:
                    fd:4e:f1:29:95:a0:f3:9b:a9:80:a2:2f:5a:bd:89:
                    19:32:54:97:a8:8d:cc:db:7b:a3:55:63:96:0e:a0:
                    c8:0e:5a:05:24:e7:7e:fc:d6:79:7b:ff:6d:d1:1e:
                    71:0d:1f:84:a0:44:cd:ed:22:b1:68:4c:30:54:52:
                    0b:49:c3:9b:09:51:8b:0f:e3:7c:ef:24:ea:de:4c:
                    07:9a:df:f1:1b:23:3e:32:31:e3:bf:2b:e2:be:35:
                    e5:77:a4:50:b1:83:bc:aa:97:1f:f9:b4:09:46:f3:
                    ab:0f:44:0e:8d:be:cc:9e:1a:92:b8:3a:c4:99:39:
                    2e:bc:63:25:c1:9a:84:0b:76:29:b6:b8:2d:9f:7a:
                    23:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:C3:42:63:25:16:65:D7:EA:82:D1:31:20:7B:60:89:82:85:2D:5C
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e33372e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:0a:f6:05:ef:ee:4a:ae:a3:15:a5:a3:c0:fc:ac:bc:2a:5e:
         20:a3:de:a7:05:5a:a5:43:73:42:23:e7:ba:a5:56:a4:1c:71:
         81:21:ad:43:f5:0a:be:fc:3d:9e:7f:a4:ad:23:3e:02:ba:35:
         c8:0d:19:0a:85:26:fe:12:d0:43:db:3a:81:d8:67:b8:d5:c6:
         ba:e4:84:a4:2b:b7:f6:b9:0d:5e:87:2b:63:b7:7a:13:80:c0:
         23:0c:57:70:df:d8:10:0a:48:35:2d:84:ef:e0:2b:a7:67:1b:
         e1:bf:40:d0:8f:e9:91:6a:e8:9a:c6:6e:f8:59:c4:c3:54:7b:
         15:f5:ec:31:8b:6b:08:52:2f:fe:cf:51:63:78:ac:8f:42:a0:
         e4:27:5a:32:b7:8b:22:34:ac:4a:d7:d8:4b:01:ef:4d:b3:fa:
         18:37:03:80:69:0d:d4:60:a4:5d:89:21:0f:96:1a:c3:57:81:
         3e:01:5c:9f:d7:80:e0:d8:6f:fc:01:7e:2d:84:1d:64:1b:12:
         e9:70:5e:e8:2c:78:73:5c:09:14:a6:c9:d9:8b:08:18:e0:e6:
         2f:4d:38:fd:7e:33:b4:ff:97:d7:05:57:d5:a4:d2:b1:60:2d:
         6a:83:56:36:14:6e:85:73:c1:63:6e:38:68:92:5e:4b:c9:86:
         ce:dd:31:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:03 2024 by rpki-client on console-fra.rpki-client.org