Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3230322e3136392e33332e302f32342d3234203d3e203137343531.roa
File:                     3230322e3136392e33332e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          pbM8HLWK+mZnpoeD4uzfX7u/cCeG4zy5NdewPUN9sGc=
Subject key identifier:   CE:5D:1E:27:1D:6A:99:7F:F0:29:9B:72:5C:B1:08:DD:A8:AB:CC:A3
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       22ECE8ACC43BD1B38DC6A3D66428A577F532B391
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3230322e3136392e33332e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:44 +0000
ROA not before:           Wed 29 Sep 2021 23:55:44 +0000
ROA not after:            Fri 30 Sep 2022 00:00:44 +0000
asID:                     17451
IP address blocks:        202.169.33.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:ec:e8:ac:c4:3b:d1:b3:8d:c6:a3:d6:64:28:a5:77:f5:32:b3:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:44 2021 GMT
            Not After : Sep 30 00:00:44 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:b9:aa:85:ca:ed:b6:5c:82:b2:03:75:2f:56:
                    56:5d:5e:6f:71:ea:75:43:f7:49:40:67:03:2b:20:
                    47:e9:87:c1:43:85:d0:b5:b7:10:ef:cb:52:e9:6e:
                    92:61:11:08:85:e8:a9:d4:de:23:93:33:df:df:d6:
                    b6:64:95:c7:31:db:11:ca:71:66:95:2c:55:12:cc:
                    c1:aa:4f:2a:ec:25:d3:de:e7:bc:ef:92:f9:8d:d9:
                    8c:bb:9b:ff:58:9b:b1:56:f5:44:35:39:d0:3d:1c:
                    04:c2:d3:88:fa:f0:cc:97:72:e8:1c:dd:f3:31:5d:
                    f7:70:4f:f7:59:82:cd:33:62:99:6a:90:ec:b3:63:
                    cb:c8:bd:6d:cd:a3:98:86:cd:1a:b8:d2:20:15:d9:
                    d7:ba:0a:8b:e4:21:14:97:0a:ec:a6:19:c7:ba:0b:
                    3d:52:a7:d2:64:7d:73:fc:f3:37:88:59:c9:15:f5:
                    5f:ea:7a:34:9a:e6:c2:e6:25:ac:60:e3:1e:e8:43:
                    97:20:c2:f1:1f:ea:3f:eb:90:a6:e5:08:51:00:cf:
                    3c:d7:cc:c4:0e:a4:9e:ed:63:d1:c8:c7:28:8b:1f:
                    a2:d0:f3:de:f5:95:b4:35:86:85:96:61:bb:62:26:
                    5a:7e:1b:2e:08:3d:8a:cb:0a:a8:75:16:4a:f5:bd:
                    f4:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:5D:1E:27:1D:6A:99:7F:F0:29:9B:72:5C:B1:08:DD:A8:AB:CC:A3
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3230322e3136392e33332e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.169.33.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:01:ff:b4:cd:85:0d:38:5d:b9:77:5a:86:67:28:f1:49:8e:
         0e:11:0c:94:aa:fd:02:51:7e:64:d2:67:ce:9a:27:99:50:a4:
         4f:a2:c2:93:4a:bc:6a:4f:34:26:ae:45:19:32:29:16:09:80:
         97:ee:36:38:93:39:58:b0:df:1c:f2:19:3a:8d:2b:27:67:18:
         00:2a:40:60:e6:62:c6:23:da:3e:22:56:85:92:99:69:26:3d:
         91:d3:67:75:a6:70:36:e3:57:73:60:7f:9c:df:4e:df:61:0e:
         43:3b:73:fe:57:0a:11:f5:9e:ad:b6:a7:be:6f:0a:6b:3e:a7:
         9c:d2:f4:63:44:a0:b6:f6:78:19:a4:e2:3b:fa:d7:46:20:62:
         b5:80:72:f9:88:6b:61:27:de:bc:70:41:1d:09:1c:2e:48:b1:
         e4:5c:80:91:19:40:b2:c4:3a:8b:b6:d3:60:91:fa:8e:61:e2:
         b9:a8:0a:c9:5d:5a:08:ac:28:2c:14:ae:5d:66:59:c8:b6:6a:
         bf:53:c2:ee:92:1a:29:60:c1:6a:3a:c6:84:ef:c0:4c:98:30:
         40:4c:94:28:14:5c:4a:4a:99:7c:d3:d5:33:f7:b9:d8:8b:3b:
         ca:2d:77:24:8e:d1:dc:c0:10:e7:80:2d:24:8e:84:7f:b0:7b:
         18:30:93:da
-----BEGIN CERTIFICATE-----
MIIHJDCCBgygAwIBAgIUIuzorMQ70bONxqPWZCild/Uys5EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJBNDE3
RjcyOERCRjAeFw0yMTA5MjkyMzU1NDRaFw0yMjA5MzAwMDAwNDRaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkVCOUFBODVDQUVEQjY1Qzgy
QjIwMzc1MkY1NjU2NUQ1RTZGNzFFQTc1NDNGNzQ5NDA2NzAzMkIyMDQ3RTk4N0Mx
NDM4NUQwQjVCNzEwRUZDQjUyRTk2RTkyNjExMTA4ODVFOEE5RDRERTIzOTMzM0RG
REZENkI2NjQ5NUM3MzFEQjExQ0E3MTY2OTUyQzU1MTJDQ0MxQUE0RjJBRUMyNUQz
REVFN0JDRUY5MkY5OEREOThDQkI5QkZGNTg5QkIxNTZGNTQ0MzUzOUQwM0QxQzA0
QzJEMzg4RkFGMENDOTc3MkU4MUNEREYzMzE1REY3NzA0RkY3NTk4MkNEMzM2Mjk5
NkE5MEVDQjM2M0NCQzhCRDZEQ0RBMzk4ODZDRDFBQjhEMjIwMTVEOUQ3QkEwQThC
RTQyMTE0OTcwQUVDQTYxOUM3QkEwQjNENTJBN0QyNjQ3RDczRkNGMzM3ODg1OUM5
MTVGNTVGRUE3QTM0OUFFNkMyRTYyNUFDNjBFMzFFRTg0Mzk3MjBDMkYxMUZFQTNG
RUI5MEE2RTUwODUxMDBDRjNDRDdDQ0M0MEVBNDlFRUQ2M0QxQzhDNzI4OEIxRkEy
RDBGM0RFRjU5NUI0MzU4Njg1OTY2MUJCNjIyNjVBN0UxQjJFMDgzRDhBQ0IwQUE4
NzUxNjRBRjVCREY0OTcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAvrmqhcrttlyCsgN1L1ZWXV5vcep1Q/dJQGcDKyBH6YfBQ4XQtbcQ
78tS6W6SYREIheip1N4jkzPf39a2ZJXHMdsRynFmlSxVEszBqk8q7CXT3ue875L5
jdmMu5v/WJuxVvVENTnQPRwEwtOI+vDMl3LoHN3zMV33cE/3WYLNM2KZapDss2PL
yL1tzaOYhs0auNIgFdnXugqL5CEUlwrsphnHugs9UqfSZH1z/PM3iFnJFfVf6no0
mubC5iWsYOMe6EOXIMLxH+o/65Cm5QhRAM8818zEDqSe7WPRyMcoix+i0PPe9ZW0
NYaFlmG7YiZafhsuCD2KywqodRZK9b30lwIDAQABo4ICMjCCAi4wHQYDVR0OBBYE
FM5dHicdapl/8CmbclyxCN2oq8yjMB8GA1UdIwQYMBaAFKxVVEe6YsORB/Fr9XL4
KkF/co2/MA4GA1UdDwEB/wQEAwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzk5M2YzNTAtYjc1Ni00OTE2LThk
ODQtNDg0ZjAyNWRmZmNjLzAvQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJB
NDE3RjcyOERCRi5jcmwwdAYIKwYBBQUHAQEEaDBmMGQGCCsGAQUFBzAChlhyc3lu
YzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8yL0FDNTU1NDQ3
QkE2MkMzOTEwN0YxNkJGNTcyRjgyQTQxN0Y3MjhEQkYuY2VyMIGiBggrBgEFBQcB
CwSBlTCBkjCBjwYIKwYBBQUHMAuGgYJyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby8zOTkzZjM1MC1iNzU2LTQ5MTYtOGQ4NC00ODRmMDI1ZGZmY2MvMC8z
MjMwMzIyZTMxMzYzOTJlMzMzMzJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzcz
NDM1MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBADKqSEwDQYJKoZIhvcNAQELBQADggEBAD4B/7TNhQ04
Xbl3WoZnKPFJjg4RDJSq/QJRfmTSZ86aJ5lQpE+iwpNKvGpPNCauRRkyKRYJgJfu
NjiTOViw3xzyGTqNKydnGAAqQGDmYsYj2j4iVoWSmWkmPZHTZ3WmcDbjV3Ngf5zf
Tt9hDkM7c/5XChH1nq22p75vCms+p5zS9GNEoLb2eBmk4jv610YgYrWAcvmIa2En
3rxwQR0JHC5IseRcgJEZQLLEOou202CR+o5h4rmoCsldWgisKCwUrl1mWci2ar9T
wu6SGilgwWo6xoTvwEyYMEBMlCgUXEpKmXzT1TP3udiLO8otdySO0dzAEOeALSSO
hH+wexgwk9o=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:03 2024 by rpki-client on console-fra.rpki-client.org