Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e34362e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e34362e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          WwM6QKm44HOXEbR/hMLIRvg6tcG3Bh+lZSuTIzWbBSA=
Subject key identifier:   A1:2B:5E:56:1C:10:2F:80:B5:B3:F3:78:63:76:0D:83:1B:C9:EA:BF
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       5BCBB6F385173E08611556719AF88C1655988F7E
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e34362e302f32342d3234203d3e203137343531.roa
Signing time:             Tue 14 Sep 2021 05:18:49 +0000
ROA not before:           Tue 14 Sep 2021 05:13:49 +0000
ROA not after:            Wed 14 Sep 2022 05:18:49 +0000
asID:                     17451
IP address blocks:        182.253.46.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:cb:b6:f3:85:17:3e:08:61:15:56:71:9a:f8:8c:16:55:98:8f:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 14 05:13:49 2021 GMT
            Not After : Sep 14 05:18:49 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:91:96:77:27:02:c7:c0:6e:76:63:4e:04:54:
                    1a:c6:10:b1:96:61:39:55:77:5d:b1:cf:a7:b7:b7:
                    50:d1:fc:fb:34:af:88:e7:0a:06:ed:5f:a5:f2:c2:
                    e9:54:88:02:02:66:33:30:8e:7f:80:00:b0:3e:c8:
                    29:93:19:97:a0:a8:62:0e:9c:c5:a1:1f:3c:0e:bb:
                    25:77:35:0e:ff:82:3c:ec:51:67:09:3e:b2:9b:85:
                    c6:bd:0c:97:93:a6:eb:ef:74:7c:68:71:77:43:7c:
                    74:ef:22:f2:6d:67:cc:0a:0d:dc:11:7a:34:a4:3a:
                    1f:08:b0:43:c1:68:33:40:19:60:ed:e8:dc:69:5b:
                    60:b6:70:be:47:42:28:1d:a4:ea:67:86:fe:87:4a:
                    eb:13:b0:bf:16:36:51:29:8e:f6:cc:ac:06:90:8b:
                    90:38:e3:a4:95:cb:ae:7c:4d:46:ad:f4:06:68:b8:
                    5b:71:e6:1a:4d:46:b4:93:84:48:12:3a:a7:c3:56:
                    f1:0f:c3:8c:2c:4e:cf:b0:e7:1a:29:57:d3:f3:59:
                    c9:3f:e8:7a:5f:47:58:4c:28:42:e8:ea:51:85:10:
                    9a:92:73:ed:7b:c9:46:0f:79:dc:d8:cc:f9:ba:e0:
                    ab:26:14:71:2a:08:78:c4:39:66:b1:04:1a:53:8f:
                    1d:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:2B:5E:56:1C:10:2F:80:B5:B3:F3:78:63:76:0D:83:1B:C9:EA:BF
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e34362e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:11:6a:83:a7:94:c9:ae:07:1f:9d:92:3c:d5:2b:f9:0a:15:
         01:94:0d:48:19:d9:cb:16:8a:ff:75:75:28:ce:e2:58:0c:6b:
         d2:f6:a3:1f:76:3e:df:91:de:1e:7a:7b:59:11:1f:e9:db:84:
         44:56:18:a2:93:99:51:da:6d:64:94:b7:2e:cf:a2:34:10:3a:
         8e:e9:5d:e6:ae:c4:7b:36:f5:2b:d7:25:95:dd:9c:e7:f1:18:
         87:52:94:22:f3:e1:8c:d4:86:b2:76:31:38:2a:97:8c:29:cf:
         3f:95:6c:8b:cc:0e:98:66:db:19:be:4e:61:5f:47:72:e2:2a:
         af:18:48:62:74:3c:d3:9c:2e:9f:61:77:18:29:f7:fc:e5:1a:
         4d:8a:06:0f:f0:8b:c1:b0:6d:f2:27:37:58:f7:d9:b1:b9:0d:
         93:c5:82:2d:2a:04:f6:d5:20:d4:48:05:c2:61:82:b6:f3:8a:
         ec:2e:96:35:88:24:df:93:cb:51:47:41:89:89:09:e3:75:88:
         8f:99:5e:29:1b:d9:87:f3:cc:cd:fe:98:65:24:50:35:c8:14:
         ba:3a:ec:3b:6b:27:83:82:c6:22:38:3e:be:66:86:e0:c2:b4:
         4d:5a:cc:e7:65:a5:b9:31:54:96:69:0e:7f:bf:62:ce:b4:c2:
         ad:88:c6:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:03 2024 by rpki-client on console-fra.rpki-client.org