Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e38382e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e38382e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          DxjizZgBairkm2SYkNa3B5GPCVZUSbz6K5YR6GDKaXg=
Subject key identifier:   E1:6D:06:4B:B0:CD:F3:CE:12:ED:B1:E7:64:90:D8:F6:AE:31:09:9D
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       2F3D15C2BCA9A566B6B66F70D09AB4C711ACBCA9
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e38382e302f32342d3234203d3e203137343531.roa
Signing time:             Mon 16 Aug 2021 01:58:19 +0000
ROA not before:           Mon 16 Aug 2021 01:53:19 +0000
ROA not after:            Tue 16 Aug 2022 01:58:19 +0000
asID:                     17451
IP address blocks:        182.253.88.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:3d:15:c2:bc:a9:a5:66:b6:b6:6f:70:d0:9a:b4:c7:11:ac:bc:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Aug 16 01:53:19 2021 GMT
            Not After : Aug 16 01:58:19 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ab:fa:ca:7f:ea:44:59:a4:41:8c:5b:44:80:
                    c9:5e:e9:e0:04:1c:22:c3:10:f8:d5:4e:2d:9d:67:
                    ee:ca:49:61:ab:f7:3d:ab:c5:ab:d5:d9:50:1b:b1:
                    06:f9:d1:a8:43:de:8d:c5:64:db:02:4a:4d:bb:ee:
                    f3:5e:37:7f:f2:13:71:92:39:69:f0:26:fc:af:f0:
                    d6:cb:50:06:78:e9:6b:de:03:17:f3:86:0e:67:8c:
                    55:b1:27:7f:63:b1:20:cc:c9:3e:95:ca:28:6c:2c:
                    67:9e:1c:1b:a5:4a:c8:23:c5:d1:5e:aa:e8:be:ba:
                    23:27:92:cb:8a:7a:5b:17:2b:6d:d3:3d:9b:4c:9c:
                    1f:e7:e6:a7:63:ca:a3:f7:42:de:6e:7e:1d:43:19:
                    4c:e2:93:2a:9a:65:cb:aa:22:d5:39:3b:03:31:76:
                    2a:ea:af:95:2b:a7:07:e1:4c:32:c3:c0:d4:59:84:
                    11:c0:22:e1:40:8e:b4:5e:0c:7a:3b:5e:eb:e6:e0:
                    f9:ce:41:dc:7c:34:f9:94:7d:71:0c:ff:38:5b:ee:
                    81:c1:e9:cf:2b:3c:28:3f:cf:9c:83:cf:eb:9c:40:
                    ca:4b:01:51:d9:06:90:98:13:3c:4b:4e:78:ea:1d:
                    ea:1c:1f:71:79:82:cf:58:22:20:cb:8d:3b:b2:e4:
                    82:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:6D:06:4B:B0:CD:F3:CE:12:ED:B1:E7:64:90:D8:F6:AE:31:09:9D
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e38382e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:f9:86:6e:fc:2c:c5:94:e3:d3:3f:1e:9b:b3:1b:08:3b:d8:
         eb:f8:3c:cb:8d:f6:af:c7:ca:f6:c7:3a:1d:88:e2:6b:5f:3d:
         2b:75:e0:35:13:8e:a8:f5:bf:02:51:d8:af:a0:d0:c6:7b:75:
         53:32:c4:d4:f0:ab:d6:5e:2d:89:57:fd:68:6b:98:50:08:c7:
         bc:4c:6b:09:d5:73:ee:42:72:da:ec:11:c9:fd:b5:60:59:a8:
         50:f0:0f:8a:18:c5:79:f4:34:17:cd:17:19:e4:49:b7:50:0b:
         32:5b:47:d7:ad:22:f2:b5:60:b4:35:2b:51:07:51:d8:9f:41:
         8f:9b:17:e7:f3:eb:a2:ea:be:43:5f:16:a8:5f:4f:42:8e:40:
         84:f4:c4:f1:57:b9:7a:ea:ff:c9:b4:4a:e6:6d:7a:a3:a2:21:
         be:73:2f:92:bf:15:d3:77:35:7a:0a:57:ff:c6:99:cc:ca:60:
         e3:4f:e6:5c:49:42:07:6e:ce:8a:3d:f2:4c:f3:82:25:05:b5:
         59:ef:a4:f5:06:16:55:a0:a9:37:22:2c:50:5d:81:7a:bb:96:
         2c:2c:f4:1a:b1:3f:b5:87:8d:a2:24:f9:0e:cf:44:cf:5c:3b:
         6f:b0:5a:55:43:f6:29:a1:5c:c8:3a:51:7c:24:8f:77:43:29:
         01:51:ce:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:03 2024 by rpki-client on console-fra.rpki-client.org