Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e39392e302f32342d3234203d3e203137343531.roa
File:                     3138322e3235332e39392e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          E4YSsdFNC81RL/M90Uyu9amU/HL2sxi4rM8+Wl8GTHM=
Subject key identifier:   C8:F2:C1:1D:E0:61:BB:5A:62:59:76:88:9B:0D:A1:D7:69:47:64:FD
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       52F89E5DFE2AEDB433DE4713FA7FD6F431EFFA44
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e39392e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:01:11 +0000
ROA not before:           Wed 29 Sep 2021 23:56:11 +0000
ROA not after:            Fri 30 Sep 2022 00:01:11 +0000
asID:                     17451
IP address blocks:        182.253.99.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:f8:9e:5d:fe:2a:ed:b4:33:de:47:13:fa:7f:d6:f4:31:ef:fa:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:56:11 2021 GMT
            Not After : Sep 30 00:01:11 2022 GMT
        Subject: CN=3082010A0282010100CB314A912AD96B2E0D109CC0215D1800485B8EDDA1FA1EEBED30B7FC8824803A1FF13824682264302E515207EE73BFC9987231527FBC943E6477D0DB864A1F65EA82CF6D197B1F705FC82832FA69F8C1E132BD8C816CE1BD247EC8563E3764A45FE85D38B856CA7E2005D344D67113D68A72F163E1304B91E457542080FD8CA68B0FAED6B83E226333CC289B68E3793DB67C6531167D7FCBB6BCA88E1C80A2BC457B06604CAA963C20E1CA48E076B2FE4412E50E923FA8F66519248A362F8C27B19BC57F9662E447AFED60204504869732B0084594D63D9EC90B836AE08CDA0FB7C2F58D88ED1978E812955945B03D888F302FF518D07211300A08148EEE47F10203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:31:4a:91:2a:d9:6b:2e:0d:10:9c:c0:21:5d:
                    18:00:48:5b:8e:dd:a1:fa:1e:eb:ed:30:b7:fc:88:
                    24:80:3a:1f:f1:38:24:68:22:64:30:2e:51:52:07:
                    ee:73:bf:c9:98:72:31:52:7f:bc:94:3e:64:77:d0:
                    db:86:4a:1f:65:ea:82:cf:6d:19:7b:1f:70:5f:c8:
                    28:32:fa:69:f8:c1:e1:32:bd:8c:81:6c:e1:bd:24:
                    7e:c8:56:3e:37:64:a4:5f:e8:5d:38:b8:56:ca:7e:
                    20:05:d3:44:d6:71:13:d6:8a:72:f1:63:e1:30:4b:
                    91:e4:57:54:20:80:fd:8c:a6:8b:0f:ae:d6:b8:3e:
                    22:63:33:cc:28:9b:68:e3:79:3d:b6:7c:65:31:16:
                    7d:7f:cb:b6:bc:a8:8e:1c:80:a2:bc:45:7b:06:60:
                    4c:aa:96:3c:20:e1:ca:48:e0:76:b2:fe:44:12:e5:
                    0e:92:3f:a8:f6:65:19:24:8a:36:2f:8c:27:b1:9b:
                    c5:7f:96:62:e4:47:af:ed:60:20:45:04:86:97:32:
                    b0:08:45:94:d6:3d:9e:c9:0b:83:6a:e0:8c:da:0f:
                    b7:c2:f5:8d:88:ed:19:78:e8:12:95:59:45:b0:3d:
                    88:8f:30:2f:f5:18:d0:72:11:30:0a:08:14:8e:ee:
                    47:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:F2:C1:1D:E0:61:BB:5A:62:59:76:88:9B:0D:A1:D7:69:47:64:FD
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e39392e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.253.99.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:09:6e:bc:27:0f:e8:a7:bb:3e:71:25:f2:4b:9b:73:8f:a8:
         83:fe:97:09:d4:83:25:9b:ae:0c:27:2f:84:26:7d:e8:9e:b0:
         b1:3c:4a:ca:fa:6f:43:22:7d:b2:f8:10:6f:70:11:eb:c1:ea:
         b9:19:cd:c3:02:1a:1c:b4:03:6b:90:97:3e:bc:92:ff:2e:e1:
         ca:f6:5b:3f:b2:31:0a:1b:9b:c6:e4:c3:ba:e5:1a:0b:da:99:
         7b:65:e9:fc:f3:c1:5a:bd:7c:4d:33:1d:bc:df:fa:0a:9e:1e:
         96:a4:48:10:bb:64:a2:96:b0:ac:1f:44:fd:01:cc:2e:97:97:
         68:a2:53:51:01:84:84:82:a4:cd:3c:45:db:18:d7:0d:3a:ae:
         1e:82:62:e4:dc:14:db:73:0b:49:e9:65:ce:f4:0d:24:80:e9:
         44:54:af:fb:4e:ee:0b:fc:34:65:d0:4e:97:34:7b:53:91:bc:
         11:09:74:1b:1a:19:83:38:24:fc:99:b9:59:fb:93:67:19:2c:
         d6:25:80:49:e1:8c:ac:30:6f:19:91:aa:42:3f:56:52:0e:69:
         a6:39:95:df:3e:2f:02:54:6b:36:3f:20:1e:d4:63:89:d1:45:
         33:7c:eb:c6:af:54:3a:d8:0d:14:32:10:1e:65:43:ea:a3:8e:
         43:84:de:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:03 2024 by rpki-client on console-fra.rpki-client.org