Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e38372e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e38372e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          zkk0v6cLYfYWLVoGDRYRP4GIci62xeits6/fz1+h6so=
Subject key identifier:   6A:0D:AA:0F:10:D2:36:5E:3E:70:32:FE:41:B2:BD:65:24:A0:09:13
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       5C16D9FA907DB9184DBFEF9BB6C9F70746B52E1B
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e38372e302f32342d3234203d3e203137343531.roa
Signing time:             Wed 18 Aug 2021 03:02:04 +0000
ROA not before:           Wed 18 Aug 2021 02:57:04 +0000
ROA not after:            Thu 18 Aug 2022 03:02:04 +0000
asID:                     17451
IP address blocks:        182.253.87.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:16:d9:fa:90:7d:b9:18:4d:bf:ef:9b:b6:c9:f7:07:46:b5:2e:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Aug 18 02:57:04 2021 GMT
            Not After : Aug 18 03:02:04 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:c9:86:42:b4:d1:6e:ba:b5:e1:1b:ff:ab:e9:
                    c3:7e:a8:82:c6:3a:94:0e:ee:1b:91:e4:bc:0a:ca:
                    78:0a:2c:d9:c9:d1:be:7c:df:3e:f1:3c:2c:30:98:
                    32:67:34:95:9b:0a:c7:72:a2:f6:77:53:b0:2f:57:
                    44:cd:08:0a:55:05:ae:c5:32:80:62:ac:7e:cf:2a:
                    95:28:c1:8a:5d:ce:55:07:16:e3:4a:2a:d3:e1:9e:
                    c5:a1:21:5c:4e:ba:f7:98:b5:76:e9:ab:29:eb:47:
                    4b:07:dc:2d:65:d7:9f:4c:ea:87:64:b0:25:ef:78:
                    0f:2c:ae:a4:a7:c9:5b:3a:80:b3:71:c4:df:3d:cd:
                    77:e8:01:01:66:f5:a7:35:af:64:0f:27:96:8f:b2:
                    fd:1b:44:30:ca:7a:8f:96:61:59:a6:4d:3b:28:6c:
                    0b:8d:57:d7:9c:40:6e:3f:42:2e:14:4f:73:e8:eb:
                    50:6f:cf:3f:04:dc:b7:a7:03:db:dd:a2:48:49:c0:
                    42:40:1e:a9:29:99:23:19:56:e6:32:f2:17:8a:31:
                    12:31:92:18:bb:62:d4:25:17:97:71:e2:44:8c:ef:
                    d4:39:3f:82:3b:fc:b3:dc:d0:c6:e8:d6:17:52:7b:
                    34:73:52:01:e9:64:20:02:02:99:3d:e5:f7:5c:c0:
                    5c:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:0D:AA:0F:10:D2:36:5E:3E:70:32:FE:41:B2:BD:65:24:A0:09:13
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e38372e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:13:30:40:c8:d2:38:e3:79:4a:7b:bb:a4:01:17:db:51:ea:
         5a:e7:64:47:dc:00:ef:ec:c4:69:fb:e7:eb:20:72:76:81:91:
         11:cd:fb:d0:29:a1:20:86:27:6f:a8:c6:8b:d8:82:e7:3f:40:
         dc:cc:97:52:ba:4b:a6:33:4d:68:dd:70:50:1b:f0:9d:ae:b5:
         77:d1:b3:e9:c1:24:c7:3c:f0:cc:24:3a:e6:4b:5b:e2:9f:10:
         15:d7:82:38:cc:7b:19:e0:60:04:e5:06:72:16:5d:a9:11:e8:
         1c:e5:98:55:24:c8:82:7e:ce:ca:9f:bf:6c:f1:94:61:97:86:
         a5:53:7b:f8:eb:b6:b9:1f:65:bb:33:4a:6b:fd:5c:13:3c:16:
         39:6e:13:da:bf:8b:b7:cb:9d:86:b6:5d:57:ea:5d:28:53:a4:
         60:d2:24:d0:28:ef:c1:96:39:2a:ce:93:47:de:64:b3:89:d2:
         c6:65:e4:ca:d7:b7:90:b1:8e:4e:25:35:6f:cd:a8:7c:ad:cf:
         fb:1c:ee:78:21:4a:0f:a7:e9:42:2b:a6:d6:13:8e:40:42:70:
         fb:2a:90:5f:f9:cb:b4:7c:45:e5:ef:81:77:b8:bf:80:80:69:
         51:1f:0d:54:91:cc:ee:e4:33:60:d7:1f:79:d0:b7:c2:f8:2d:
         4f:95:d2:8e
-----BEGIN CERTIFICATE-----
MIIHJDCCBgygAwIBAgIUXBbZ+pB9uRhNv++btsn3B0a1LhswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJBNDE3
RjcyOERCRjAeFw0yMTA4MTgwMjU3MDRaFw0yMjA4MTgwMzAyMDRaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQ0ZDOTg2NDJCNEQxNkVCQUI1
RTExQkZGQUJFOUMzN0VBODgyQzYzQTk0MEVFRTFCOTFFNEJDMEFDQTc4MEEyQ0Q5
QzlEMUJFN0NERjNFRjEzQzJDMzA5ODMyNjczNDk1OUIwQUM3NzJBMkY2Nzc1M0Iw
MkY1NzQ0Q0QwODBBNTUwNUFFQzUzMjgwNjJBQzdFQ0YyQTk1MjhDMThBNURDRTU1
MDcxNkUzNEEyQUQzRTE5RUM1QTEyMTVDNEVCQUY3OThCNTc2RTlBQjI5RUI0NzRC
MDdEQzJENjVENzlGNENFQTg3NjRCMDI1RUY3ODBGMkNBRUE0QTdDOTVCM0E4MEIz
NzFDNERGM0RDRDc3RTgwMTAxNjZGNUE3MzVBRjY0MEYyNzk2OEZCMkZEMUI0NDMw
Q0E3QThGOTY2MTU5QTY0RDNCMjg2QzBCOEQ1N0Q3OUM0MDZFM0Y0MjJFMTQ0Rjcz
RThFQjUwNkZDRjNGMDREQ0I3QTcwM0RCRERBMjQ4NDlDMDQyNDAxRUE5Mjk5OTIz
MTk1NkU2MzJGMjE3OEEzMTEyMzE5MjE4QkI2MkQ0MjUxNzk3NzFFMjQ0OENFRkQ0
MzkzRjgyM0JGQ0IzRENEMEM2RThENjE3NTI3QjM0NzM1MjAxRTk2NDIwMDIwMjk5
M0RFNUY3NUNDMDVDOEYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAz8mGQrTRbrq14Rv/q+nDfqiCxjqUDu4bkeS8Csp4CizZydG+fN8+
8TwsMJgyZzSVmwrHcqL2d1OwL1dEzQgKVQWuxTKAYqx+zyqVKMGKXc5VBxbjSirT
4Z7FoSFcTrr3mLV26asp60dLB9wtZdefTOqHZLAl73gPLK6kp8lbOoCzccTfPc13
6AEBZvWnNa9kDyeWj7L9G0QwynqPlmFZpk07KGwLjVfXnEBuP0IuFE9z6OtQb88/
BNy3pwPb3aJIScBCQB6pKZkjGVbmMvIXijESMZIYu2LUJReXceJEjO/UOT+CO/yz
3NDG6NYXUns0c1IB6WQgAgKZPeX3XMBcjwIDAQABo4ICMjCCAi4wHQYDVR0OBBYE
FGoNqg8Q0jZePnAy/kGyvWUkoAkTMB8GA1UdIwQYMBaAFKxVVEe6YsORB/Fr9XL4
KkF/co2/MA4GA1UdDwEB/wQEAwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzk5M2YzNTAtYjc1Ni00OTE2LThk
ODQtNDg0ZjAyNWRmZmNjLzAvQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJB
NDE3RjcyOERCRi5jcmwwdAYIKwYBBQUHAQEEaDBmMGQGCCsGAQUFBzAChlhyc3lu
YzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8yL0FDNTU1NDQ3
QkE2MkMzOTEwN0YxNkJGNTcyRjgyQTQxN0Y3MjhEQkYuY2VyMIGiBggrBgEFBQcB
CwSBlTCBkjCBjwYIKwYBBQUHMAuGgYJyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby8zOTkzZjM1MC1iNzU2LTQ5MTYtOGQ4NC00ODRmMDI1ZGZmY2MvMC8z
MTM4MzIyZTMyMzUzMzJlMzgzNzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzcz
NDM1MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBAC2/VcwDQYJKoZIhvcNAQELBQADggEBAFwTMEDI0jjj
eUp7u6QBF9tR6lrnZEfcAO/sxGn75+sgcnaBkRHN+9ApoSCGJ2+oxovYguc/QNzM
l1K6S6YzTWjdcFAb8J2utXfRs+nBJMc88MwkOuZLW+KfEBXXgjjMexngYATlBnIW
XakR6BzlmFUkyIJ+zsqfv2zxlGGXhqVTe/jrtrkfZbszSmv9XBM8FjluE9q/i7fL
nYa2XVfqXShTpGDSJNAo78GWOSrOk0feZLOJ0sZl5MrXt5Cxjk4lNW/NqHytz/sc
7nghSg+n6UIrptYTjkBCcPsqkF/5y7R8ReXvgXe4v4CAaVEfDVSRzO7kM2DXH3nQ
t8L4LU+V0o4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:03 2024 by rpki-client on console-fra.rpki-client.org