Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3230322e3136392e34312e302f32342d3234203d3e203137343531.roa
File:                     3230322e3136392e34312e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          037KwfsX5lOnFgzWDZnZ1PDiKBa5dREB3RNKpiAXb9k=
Subject key identifier:   CD:15:3E:39:BE:C8:22:A5:9D:CD:16:0D:4F:CB:12:91:68:9F:1E:0F
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       60C5B5C602B673BAAD4AAD7BF075D7584C5F1E37
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3230322e3136392e34312e302f32342d3234203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:29 +0000
ROA not before:           Wed 29 Sep 2021 23:55:29 +0000
ROA not after:            Fri 30 Sep 2022 00:00:29 +0000
asID:                     17451
IP address blocks:        202.169.41.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:c5:b5:c6:02:b6:73:ba:ad:4a:ad:7b:f0:75:d7:58:4c:5f:1e:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:29 2021 GMT
            Not After : Sep 30 00:00:29 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f7:fd:57:a1:7f:8d:9b:d6:44:f4:60:fd:f7:
                    4c:60:70:cb:28:ee:71:66:b0:ac:f0:5b:0b:2f:fa:
                    b4:26:2c:cb:f9:96:e3:46:92:88:15:ef:df:21:91:
                    d9:98:47:33:cc:ec:f4:b2:d9:3b:6c:bf:34:64:c0:
                    70:45:98:b4:11:da:ca:c2:a3:44:ca:f4:fe:68:8e:
                    3b:52:29:b7:54:02:90:b8:9a:48:f1:57:ad:7a:90:
                    64:53:e4:ec:cf:fe:43:bd:0f:3d:f4:03:f2:2c:ef:
                    35:8d:89:a5:e0:9b:45:e6:3a:07:d1:a3:34:9c:13:
                    57:be:e2:7f:bb:14:0c:8b:35:1d:5a:6d:81:d2:11:
                    0e:74:e1:a2:1d:9f:8f:db:0b:76:63:44:23:5a:ba:
                    4b:5d:c4:ec:1d:b1:dc:89:06:90:32:05:7c:e7:1d:
                    db:ed:81:9e:a4:e4:0f:5e:06:cb:6a:d1:c7:95:20:
                    94:77:0a:f2:f6:22:cf:b5:3a:4a:8f:4c:67:ae:dc:
                    8b:f1:ad:36:34:47:bc:6e:1c:da:00:2f:29:35:9d:
                    70:7b:53:c0:09:64:9e:26:66:d0:b5:ae:02:ab:cb:
                    56:40:e4:44:32:87:f7:df:65:2d:26:01:e0:83:dc:
                    f5:5f:22:91:30:63:7d:d5:3a:8a:fc:cf:79:84:f5:
                    52:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:15:3E:39:BE:C8:22:A5:9D:CD:16:0D:4F:CB:12:91:68:9F:1E:0F
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3230322e3136392e34312e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.169.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:7d:bb:e9:2a:18:b9:1f:eb:ff:35:94:c0:cb:99:81:db:f7:
         01:d8:8d:39:8e:ae:bf:00:82:33:54:7a:54:f5:34:04:4a:a3:
         73:49:63:98:84:fa:23:76:f2:6a:6a:84:2e:eb:12:0a:97:5d:
         bb:dd:bf:53:9d:1f:be:40:45:26:24:2a:01:94:e8:78:48:e9:
         56:28:b7:6f:13:31:55:27:d4:94:8e:32:0a:43:ce:07:a0:da:
         be:de:8e:8f:cc:fb:98:15:92:7e:f5:27:94:63:81:1e:15:88:
         22:c4:35:44:0f:79:03:be:71:61:53:cf:ff:79:27:51:5f:60:
         70:02:5f:23:2c:4b:86:5d:44:00:ed:3d:cc:d1:b4:e0:39:28:
         eb:df:b4:d0:3e:10:3b:71:9f:0b:44:46:5c:79:f8:ee:5c:2a:
         29:56:f7:f6:64:8d:d6:d6:6b:91:21:a1:99:be:10:e5:63:9a:
         3e:98:05:a4:79:b1:ee:c2:2d:3b:b3:09:1b:1b:7b:d2:5c:ef:
         08:de:93:dd:f3:8f:21:54:29:54:43:4a:06:11:bb:23:2f:0d:
         59:7a:f0:90:cf:e2:4c:e0:c7:ab:25:3b:53:72:96:30:8a:7a:
         94:ac:4e:2a:79:42:cd:39:21:3e:4d:17:d9:df:fe:b1:00:e1:
         9c:81:6b:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:03 2024 by rpki-client on console-fra.rpki-client.org