Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e37312e302f32342d3234203d3e203338343832.roa
File:                     3138322e3235332e37312e302f32342d3234203d3e203338343832.roa (raw, json)
Hash identifier:          j8EuupiD5lFgRqKOQ3jhDCnEH6LFvDeK68IQV68Q8Nc=
Subject key identifier:   54:DF:E4:5C:79:48:56:DD:05:E0:9E:37:41:34:27:30:25:E8:C9:A1
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       497E472362B40956DD08B977018383F4FF291E75
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e37312e302f32342d3234203d3e203338343832.roa
Signing time:             Fri 04 Feb 2022 08:00:54 +0000
ROA not before:           Fri 04 Feb 2022 07:55:54 +0000
ROA not after:            Sat 04 Feb 2023 08:00:54 +0000
asID:                     38482
IP address blocks:        182.253.71.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:7e:47:23:62:b4:09:56:dd:08:b9:77:01:83:83:f4:ff:29:1e:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Feb  4 07:55:54 2022 GMT
            Not After : Feb  4 08:00:54 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:5e:69:6d:ee:a7:e5:0e:09:be:9c:62:fb:d0:
                    f7:02:07:c7:c2:bf:de:99:1f:d0:72:6a:87:c0:93:
                    c0:8d:04:d3:d0:68:a8:8c:bb:7d:08:42:40:df:c0:
                    88:67:d1:2d:2d:cb:12:4c:b5:72:15:6e:6d:f7:1b:
                    89:41:1c:68:1a:9a:b5:89:d2:1e:26:49:8a:f9:cc:
                    2b:e2:88:37:05:0a:29:a2:3b:ae:98:80:a2:a6:4f:
                    f0:27:06:da:47:52:6d:83:5a:9d:76:81:f8:9c:e6:
                    3c:20:db:7c:ad:8a:aa:96:9e:26:23:27:79:71:94:
                    09:29:61:d6:42:6e:83:f2:83:d2:75:22:21:3c:95:
                    d3:f6:63:87:51:63:73:f7:76:67:e4:9c:0e:34:33:
                    28:a3:7a:c8:91:dc:39:5e:70:b0:30:c5:cb:82:f8:
                    35:c0:2c:03:67:67:cc:18:3c:07:c0:45:bc:e5:95:
                    8f:70:0a:21:1a:1f:22:e9:6d:9f:59:36:7d:63:81:
                    05:76:55:36:ae:ef:cf:02:70:ac:ec:35:7e:6e:f4:
                    7b:87:07:5b:67:12:74:89:dc:99:fa:22:b1:b8:f1:
                    ea:04:bd:77:b0:7d:7e:10:db:65:c0:1b:3d:bb:50:
                    5b:f0:f8:f9:0c:ad:b5:97:ad:e3:69:01:93:87:63:
                    5a:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:DF:E4:5C:79:48:56:DD:05:E0:9E:37:41:34:27:30:25:E8:C9:A1
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e37312e302f32342d3234203d3e203338343832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         63:48:fa:9b:63:39:cc:c6:07:47:06:39:60:cf:7c:35:4c:fd:
         7f:70:06:e9:ec:cd:0d:46:38:b1:04:37:64:86:17:eb:c6:c2:
         d3:23:c5:55:1f:ff:ac:63:fe:69:ef:d5:59:8d:28:30:26:fd:
         2f:11:df:40:ab:1d:9b:35:5a:db:8c:e2:a0:01:5b:d9:34:7e:
         7f:f7:88:5c:a8:58:e7:44:e2:40:07:5c:2a:08:f4:b5:b3:b5:
         76:9e:9a:95:e8:4c:5e:94:38:cc:72:06:1d:bb:6c:00:5f:bc:
         ed:be:b2:73:0f:b0:e7:7f:92:3d:3f:eb:8a:56:7c:ce:42:ea:
         90:75:71:a2:8c:44:63:6e:41:29:a5:db:38:49:89:e9:4c:48:
         aa:82:8d:8c:ca:ed:3a:39:42:fb:37:60:60:38:fb:7d:9e:f1:
         2e:7b:c5:c4:7e:6c:40:f8:c8:45:08:18:96:05:5a:68:67:32:
         67:3a:a0:05:8f:88:10:5b:b7:7f:36:66:47:b3:aa:25:61:6e:
         28:7b:d0:39:8b:33:7a:48:a7:6f:b1:38:a9:72:ee:3c:34:96:
         e5:98:8a:67:eb:52:d4:6f:af:67:37:b6:4c:77:20:71:ef:7e:
         2a:cb:0f:ec:ed:bb:ab:ae:3f:9b:78:2d:64:20:c8:32:0b:f7:
         ea:ef:0f:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:03 2024 by rpki-client on console-fra.rpki-client.org