Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e34342e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e34342e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          lHdD+PwoaepiheHTvySj/YwnBKHelgQdD0cbjLmvVR0=
Subject key identifier:   0C:62:14:C0:BC:35:FD:78:35:C8:9B:58:D1:2A:B8:AB:C5:8C:D4:71
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       3B1D5E22262940B1122478DF99D2E98FFB4B6EE2
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e34342e302f32342d3234203d3e203137343531.roa
Signing time:             Tue 14 Sep 2021 05:18:41 +0000
ROA not before:           Tue 14 Sep 2021 05:13:41 +0000
ROA not after:            Wed 14 Sep 2022 05:18:41 +0000
asID:                     17451
IP address blocks:        182.253.44.0/24 maxlen: 24
Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:1d:5e:22:26:29:40:b1:12:24:78:df:99:d2:e9:8f:fb:4b:6e:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 14 05:13:41 2021 GMT
            Not After : Sep 14 05:18:41 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:d1:84:66:f2:af:95:0c:eb:c2:20:b7:07:f4:
                    9f:64:5b:13:9e:01:2a:95:b0:22:27:09:76:33:fa:
                    f6:82:9c:57:ad:bb:84:ad:fd:38:f8:21:23:d9:93:
                    0e:8d:84:71:3f:d0:bb:ca:99:7c:f3:b0:86:55:6f:
                    67:ce:1e:40:16:ed:b9:d1:ed:8e:33:ec:70:e9:5a:
                    57:9f:b1:a3:52:a3:ef:7d:2b:2f:5e:5f:af:92:e2:
                    e4:91:d1:90:4f:53:66:c5:1e:f4:42:22:fd:2a:46:
                    3e:16:db:db:5f:b8:09:6e:50:6f:b9:c3:21:e6:78:
                    7e:72:12:52:9e:20:46:9c:36:7c:fd:33:a3:b6:0c:
                    f6:fd:ad:e3:28:24:f1:b1:17:e8:d9:00:58:fd:f3:
                    7b:0b:1d:c4:70:d0:b6:fa:d6:f4:71:cf:06:8d:d4:
                    ac:0e:71:9e:e0:bb:c5:16:ee:af:72:3a:24:7e:97:
                    f3:9c:49:19:31:6e:5c:a4:7f:29:55:6c:59:6a:f7:
                    e3:1f:53:33:5e:04:b1:09:56:6e:91:1c:c4:2a:ce:
                    30:89:d3:8b:93:8a:e9:3a:22:16:b7:9e:37:4c:09:
                    4c:e7:2a:52:22:7b:d6:2e:13:37:46:cb:66:64:50:
                    9c:05:fe:5e:ce:e4:46:c4:02:f9:e7:87:a6:de:e6:
                    ff:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:62:14:C0:BC:35:FD:78:35:C8:9B:58:D1:2A:B8:AB:C5:8C:D4:71
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e34342e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:20:7a:63:aa:47:4b:5e:14:81:10:b3:6f:40:cb:9a:3e:66:
         04:f7:e9:d4:6e:32:22:87:f9:7a:33:ad:32:f0:c8:b9:5c:80:
         5c:07:1a:20:b2:f6:60:04:f0:ed:12:94:d4:d4:6f:31:5e:41:
         10:24:fb:1a:5c:8e:7d:0d:b5:98:8a:4e:db:c4:11:be:e1:9f:
         71:7e:83:e2:ac:98:c6:18:70:7a:7c:1b:de:f7:86:b1:c7:d4:
         32:65:99:9b:76:5f:32:1e:dc:52:af:74:8e:a1:c5:30:e4:23:
         25:f9:aa:6a:4c:15:eb:1d:bd:4f:1f:5c:27:de:a7:15:6f:c1:
         dd:3d:d3:c7:0e:d8:de:7f:fd:94:7f:da:3f:32:5d:fb:6d:9a:
         bc:20:dd:b4:91:7a:3c:82:cf:95:b4:ab:62:63:7d:18:24:01:
         9b:e6:a1:c5:11:ad:8f:65:c0:d4:45:56:5a:ac:bb:93:62:a2:
         6f:e1:bc:fe:08:a3:11:d6:82:ef:6c:1c:21:a6:67:80:a9:df:
         38:e5:62:3c:ae:05:3c:83:bf:1b:29:78:45:46:9c:54:11:84:
         6e:28:8b:2e:f6:ae:64:bc:b0:51:04:c2:b2:fa:c5:2b:f7:6e:
         af:2a:3b:51:48:9c:c2:52:83:47:fd:c4:bf:b7:46:d6:2a:a9:
         cb:34:ec:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:33:25 2025 by rpki-client