Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e38392e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e38392e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          PlZIU90sDP+2JL+WITFMJp27raFr+STAAhe091/RPY4=
Subject key identifier:   D5:F7:BF:89:47:47:2E:96:06:AB:51:03:BD:CA:23:B5:E7:78:FE:53
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       0A6BADDD590273F2B1543E65F91B793AA3E56756
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e38392e302f32342d3234203d3e203137343531.roa
Signing time:             Mon 16 Aug 2021 01:58:42 +0000
ROA not before:           Mon 16 Aug 2021 01:53:42 +0000
ROA not after:            Tue 16 Aug 2022 01:58:42 +0000
asID:                     17451
IP address blocks:        182.253.89.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:6b:ad:dd:59:02:73:f2:b1:54:3e:65:f9:1b:79:3a:a3:e5:67:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Aug 16 01:53:42 2021 GMT
            Not After : Aug 16 01:58:42 2022 GMT
        Subject: CN=3082010A0282010100AE24829FB3E321A3E9F810CAEACEB7F72719A1485C05D5C77A64698FA8B6C91DF58E96B9F89933BAF1708EC75B53B2AA7423A149E8EF2F522E004BFDB88E33D93C51609AC58F88550FE51ED0A450F71D4707D9590CAE097055DBC51EC5DE7A4C930B381C4BA38896D5A2733882629505C407D99CB13339DDA7CA14B7782F82B1E56B4EE78E094748E0F4EBCC3504E27E9C02D490C22F5D25DCBCA78AAB0CECEBA05293E5D471D7BEE2122E6B0DEE8A351EE0BB60A897957EDA8E538B3A8496B01C71CD3BF10C9932C1BE34F0CDBD279B28596F8905228D08B55FECFCB09809F66B99633AE4AA23E5D876546F48368B22605B4F6FEB058BC25AB6E1D96A238C5D0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:24:82:9f:b3:e3:21:a3:e9:f8:10:ca:ea:ce:
                    b7:f7:27:19:a1:48:5c:05:d5:c7:7a:64:69:8f:a8:
                    b6:c9:1d:f5:8e:96:b9:f8:99:33:ba:f1:70:8e:c7:
                    5b:53:b2:aa:74:23:a1:49:e8:ef:2f:52:2e:00:4b:
                    fd:b8:8e:33:d9:3c:51:60:9a:c5:8f:88:55:0f:e5:
                    1e:d0:a4:50:f7:1d:47:07:d9:59:0c:ae:09:70:55:
                    db:c5:1e:c5:de:7a:4c:93:0b:38:1c:4b:a3:88:96:
                    d5:a2:73:38:82:62:95:05:c4:07:d9:9c:b1:33:39:
                    dd:a7:ca:14:b7:78:2f:82:b1:e5:6b:4e:e7:8e:09:
                    47:48:e0:f4:eb:cc:35:04:e2:7e:9c:02:d4:90:c2:
                    2f:5d:25:dc:bc:a7:8a:ab:0c:ec:eb:a0:52:93:e5:
                    d4:71:d7:be:e2:12:2e:6b:0d:ee:8a:35:1e:e0:bb:
                    60:a8:97:95:7e:da:8e:53:8b:3a:84:96:b0:1c:71:
                    cd:3b:f1:0c:99:32:c1:be:34:f0:cd:bd:27:9b:28:
                    59:6f:89:05:22:8d:08:b5:5f:ec:fc:b0:98:09:f6:
                    6b:99:63:3a:e4:aa:23:e5:d8:76:54:6f:48:36:8b:
                    22:60:5b:4f:6f:eb:05:8b:c2:5a:b6:e1:d9:6a:23:
                    8c:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:F7:BF:89:47:47:2E:96:06:AB:51:03:BD:CA:23:B5:E7:78:FE:53
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e38392e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:25:6d:96:d7:5e:e5:e3:34:58:8c:90:94:53:b9:f2:83:de:
         1a:5b:e6:52:50:43:b2:ff:a5:5d:08:81:f1:b8:e5:64:c3:d5:
         5e:7c:20:98:eb:67:da:21:fb:f0:a4:b6:90:55:a6:a8:46:63:
         62:52:7e:76:b2:52:ac:88:79:f5:dc:0c:2a:95:95:20:33:22:
         61:a7:8a:ba:98:44:d8:60:19:d0:42:00:a5:bc:de:86:a4:52:
         65:73:27:b7:3e:27:1b:f8:4b:b6:df:b5:76:2f:23:ff:43:b1:
         e9:80:3c:f3:29:c1:ea:54:2b:a4:29:f2:e8:a0:19:47:ec:19:
         57:95:19:5c:8a:82:62:b5:07:cb:fa:69:57:b3:7a:b9:64:e1:
         65:00:29:6c:96:58:0e:eb:8d:90:07:07:92:47:04:d1:d9:29:
         02:27:8b:3c:ae:86:82:2f:6a:79:2e:93:21:51:88:b3:a1:10:
         91:fc:65:b9:4a:85:c3:ce:b1:6e:38:10:9b:b9:03:29:5a:26:
         1f:e6:0c:65:55:21:42:9d:3d:c3:af:e5:70:34:94:b8:4d:fc:
         22:62:58:ee:5b:95:40:70:ee:97:28:87:45:2b:d7:39:22:88:
         04:78:69:0d:26:db:f6:c8:b4:19:07:99:3a:35:4e:34:40:e1:
         39:b1:66:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:03 2024 by rpki-client on console-fra.rpki-client.org