Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e34392e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e34392e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          MZuIol9cVGB86xo+LKOYw1FJBByNS6Ody+6OYFuposs=
Subject key identifier:   D0:E1:1C:50:4D:2D:33:E9:66:97:06:EE:0B:21:B0:57:90:B9:0C:58
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       6098C88D6253D0C770158219637730F44403B4DB
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e34392e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:56 +0000
ROA not before:           Wed 29 Sep 2021 23:55:56 +0000
ROA not after:            Fri 30 Sep 2022 00:00:56 +0000
asID:                     17451
IP address blocks:        182.253.49.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:98:c8:8d:62:53:d0:c7:70:15:82:19:63:77:30:f4:44:03:b4:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:56 2021 GMT
            Not After : Sep 30 00:00:56 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:d4:12:bb:11:d6:65:ec:2a:73:b7:c3:b6:cb:
                    fd:7a:7e:3a:3e:88:b3:5e:00:86:5c:d3:0f:3b:52:
                    0b:b4:1d:d6:5d:9d:46:cb:67:b3:73:c3:aa:c0:f8:
                    bd:74:63:bd:3c:48:6f:1a:3d:36:1c:92:1f:bf:af:
                    da:58:00:46:77:71:dd:dc:35:5e:41:b8:29:7a:a0:
                    a9:54:56:19:0a:20:ef:66:9f:a1:fe:0b:5b:6c:6e:
                    d1:ef:f2:ac:c9:5d:6f:85:38:dc:30:e2:cd:8a:bf:
                    7c:ab:1d:5c:0e:e7:d7:42:df:28:de:d2:dd:ef:d4:
                    1c:3e:fa:9d:dc:9a:bd:a9:c6:b4:ae:88:ca:35:ba:
                    b1:b1:a4:62:47:d9:c9:bc:ad:c2:79:fa:e9:49:99:
                    ae:c7:f7:32:90:5e:af:7c:97:af:db:0b:a2:54:39:
                    b8:e1:7e:a4:e9:71:ff:5a:5c:fb:de:0a:93:60:6b:
                    45:65:f6:7a:d2:50:59:46:8a:a5:27:01:2c:57:5c:
                    c6:cd:24:9c:13:b9:fa:6f:7c:74:2b:cb:1c:82:1c:
                    b4:49:24:a8:fd:ec:ae:c8:e2:6a:32:4a:95:80:3c:
                    b7:1f:40:fe:ce:cc:43:21:e5:66:9d:0a:6f:05:49:
                    f5:df:f3:5e:6e:97:70:df:81:db:2d:30:15:80:5c:
                    bd:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:E1:1C:50:4D:2D:33:E9:66:97:06:EE:0B:21:B0:57:90:B9:0C:58
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e34392e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         18:d9:a9:fc:e6:b7:8f:b5:5b:a5:36:03:8b:db:df:8a:56:c7:
         99:e7:3b:e2:c4:a0:d2:3d:5a:8b:6a:5b:63:89:01:f5:d6:98:
         87:e8:4e:39:40:26:40:a0:8b:c0:ff:12:ca:1f:f7:8a:73:57:
         e4:9b:93:23:c4:75:da:ce:02:06:e7:53:fe:08:0f:c5:ce:f3:
         5c:6d:2a:3e:73:a5:6a:06:da:d4:63:b9:7c:99:04:ba:f2:0e:
         3b:95:31:eb:5f:4c:b6:6f:17:3f:67:de:df:57:ec:cd:7a:80:
         f9:a4:d8:80:71:8e:76:b3:1f:83:f1:53:86:ff:d9:38:dc:bf:
         f3:7c:5b:d5:c8:de:79:68:61:29:a1:ee:53:a1:49:33:5e:ae:
         da:65:2c:8f:57:cb:c9:7d:fe:6d:41:55:50:88:fa:bf:72:b1:
         09:10:b5:20:5e:dd:30:a1:20:45:7d:d0:03:e2:52:f7:6f:26:
         74:d4:45:f8:cd:f0:79:6e:3d:2d:ce:6e:f8:94:73:05:74:1d:
         48:30:2b:db:d8:01:33:29:59:1a:32:cf:8f:22:36:db:fc:d1:
         eb:9f:45:99:a2:54:7b:cd:ff:30:ba:fa:ac:26:6c:d0:9a:fb:
         f0:bf:dc:79:f1:96:75:26:e5:03:e3:e5:f1:cd:79:36:d7:79:
         c7:f6:b1:7f
-----BEGIN CERTIFICATE-----
MIIHJDCCBgygAwIBAgIUYJjIjWJT0MdwFYIZY3cw9EQDtNswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJBNDE3
RjcyOERCRjAeFw0yMTA5MjkyMzU1NTZaFw0yMjA5MzAwMDAwNTZaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRERENDEyQkIxMUQ2NjVFQzJB
NzNCN0MzQjZDQkZEN0E3RTNBM0U4OEIzNUUwMDg2NUNEMzBGM0I1MjBCQjQxREQ2
NUQ5RDQ2Q0I2N0IzNzNDM0FBQzBGOEJENzQ2M0JEM0M0ODZGMUEzRDM2MUM5MjFG
QkZBRkRBNTgwMDQ2Nzc3MUREREMzNTVFNDFCODI5N0FBMEE5NTQ1NjE5MEEyMEVG
NjY5RkExRkUwQjVCNkM2RUQxRUZGMkFDQzk1RDZGODUzOERDMzBFMkNEOEFCRjdD
QUIxRDVDMEVFN0Q3NDJERjI4REVEMkRERUZENDFDM0VGQTlEREM5QUJEQTlDNkI0
QUU4OENBMzVCQUIxQjFBNDYyNDdEOUM5QkNBREMyNzlGQUU5NDk5OUFFQzdGNzMy
OTA1RUFGN0M5N0FGREIwQkEyNTQzOUI4RTE3RUE0RTk3MUZGNUE1Q0ZCREUwQTkz
NjA2QjQ1NjVGNjdBRDI1MDU5NDY4QUE1MjcwMTJDNTc1Q0M2Q0QyNDlDMTNCOUZB
NkY3Qzc0MkJDQjFDODIxQ0I0NDkyNEE4RkRFQ0FFQzhFMjZBMzI0QTk1ODAzQ0I3
MUY0MEZFQ0VDQzQzMjFFNTY2OUQwQTZGMDU0OUY1REZGMzVFNkU5NzcwREY4MURC
MkQzMDE1ODA1Q0JEMTkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA3dQSuxHWZewqc7fDtsv9en46PoizXgCGXNMPO1ILtB3WXZ1Gy2ez
c8OqwPi9dGO9PEhvGj02HJIfv6/aWABGd3Hd3DVeQbgpeqCpVFYZCiDvZp+h/gtb
bG7R7/KsyV1vhTjcMOLNir98qx1cDufXQt8o3tLd79QcPvqd3Jq9qca0rojKNbqx
saRiR9nJvK3CefrpSZmux/cykF6vfJev2wuiVDm44X6k6XH/Wlz73gqTYGtFZfZ6
0lBZRoqlJwEsV1zGzSScE7n6b3x0K8scghy0SSSo/eyuyOJqMkqVgDy3H0D+zsxD
IeVmnQpvBUn13/Nebpdw34HbLTAVgFy9GQIDAQABo4ICMjCCAi4wHQYDVR0OBBYE
FNDhHFBNLTPpZpcG7gshsFeQuQxYMB8GA1UdIwQYMBaAFKxVVEe6YsORB/Fr9XL4
KkF/co2/MA4GA1UdDwEB/wQEAwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzk5M2YzNTAtYjc1Ni00OTE2LThk
ODQtNDg0ZjAyNWRmZmNjLzAvQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJB
NDE3RjcyOERCRi5jcmwwdAYIKwYBBQUHAQEEaDBmMGQGCCsGAQUFBzAChlhyc3lu
YzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8yL0FDNTU1NDQ3
QkE2MkMzOTEwN0YxNkJGNTcyRjgyQTQxN0Y3MjhEQkYuY2VyMIGiBggrBgEFBQcB
CwSBlTCBkjCBjwYIKwYBBQUHMAuGgYJyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby8zOTkzZjM1MC1iNzU2LTQ5MTYtOGQ4NC00ODRmMDI1ZGZmY2MvMC8z
MTM4MzIyZTMyMzUzMzJlMzQzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzcz
NDM1MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBAC2/TEwDQYJKoZIhvcNAQELBQADggEBABjZqfzmt4+1
W6U2A4vb34pWx5nnO+LEoNI9WotqW2OJAfXWmIfoTjlAJkCgi8D/Esof94pzV+Sb
kyPEddrOAgbnU/4ID8XO81xtKj5zpWoG2tRjuXyZBLryDjuVMetfTLZvFz9n3t9X
7M16gPmk2IBxjnazH4PxU4b/2Tjcv/N8W9XI3nloYSmh7lOhSTNertplLI9Xy8l9
/m1BVVCI+r9ysQkQtSBe3TChIEV90APiUvdvJnTURfjN8HluPS3ObviUcwV0HUgw
K9vYATMpWRoyz48iNtv80eufRZmiVHvN/zC6+qwmbNCa+/C/3HnxlnUm5QPj5fHN
eTbXecf2sX8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:03 2024 by rpki-client on console-fra.rpki-client.org