Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3230322e3136392e34312e302f32342d3234203d3e203338343832.roa
File:                     3230322e3136392e34312e302f32342d3234203d3e203338343832.roa (raw, json)
Hash identifier:          eCNMKK+4Uh66zXP26MJAWlad3w6NdnXIEjqLNK1GW9o=
Subject key identifier:   D7:B7:5A:D6:3B:94:3F:13:BD:18:18:62:D3:38:D0:3E:EB:04:1E:57
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       120913C1ECC200C1A45DB2872B26F2EA6A66BB38
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3230322e3136392e34312e302f32342d3234203d3e203338343832.roa
Signing time:             Thu 04 Nov 2021 05:18:33 +0000
ROA not before:           Thu 04 Nov 2021 05:13:33 +0000
ROA not after:            Fri 04 Nov 2022 05:18:33 +0000
asID:                     38482
IP address blocks:        202.169.41.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:09:13:c1:ec:c2:00:c1:a4:5d:b2:87:2b:26:f2:ea:6a:66:bb:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Nov  4 05:13:33 2021 GMT
            Not After : Nov  4 05:18:33 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:78:1b:96:bd:41:44:04:ee:75:93:22:41:bf:
                    60:f8:e1:9d:58:59:e4:eb:fe:45:7c:7f:4f:4a:53:
                    eb:14:8e:9a:04:ab:82:2a:11:0a:25:55:0b:f9:12:
                    4b:70:b2:71:7c:48:e7:43:08:01:8e:3a:20:f0:6b:
                    b5:25:dd:35:59:b6:8b:f2:84:ed:b2:46:bd:46:db:
                    4d:8e:81:4b:b7:07:8a:fc:71:d5:0f:a3:24:00:76:
                    0d:c7:25:59:f5:38:25:15:0e:54:d3:23:ab:0c:ac:
                    ab:70:22:ff:ea:aa:e7:b8:bb:04:b2:4a:49:99:4a:
                    66:6d:3a:5d:a2:4d:5a:17:c6:c0:d9:62:81:60:b2:
                    25:39:b4:17:0d:f9:d1:66:61:e3:c4:89:62:2c:d6:
                    20:5d:a7:c3:d5:0d:06:e0:a6:d3:f3:e4:e4:3c:bd:
                    e7:ab:ca:6f:9f:54:69:70:a0:06:9f:48:fd:3d:2c:
                    0c:bf:31:02:52:4e:3f:d7:ff:cc:e7:83:8f:ab:ed:
                    6a:3c:f1:d9:4c:80:be:b9:ef:24:82:ad:ff:70:da:
                    b0:a2:40:e4:f4:0c:94:1a:19:57:64:9f:4d:87:44:
                    7b:e5:cc:96:65:af:69:c6:8b:43:0a:e1:f1:f8:28:
                    32:e7:78:85:2f:0a:92:fd:5a:65:67:aa:10:97:0e:
                    59:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:B7:5A:D6:3B:94:3F:13:BD:18:18:62:D3:38:D0:3E:EB:04:1E:57
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3230322e3136392e34312e302f32342d3234203d3e203338343832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.169.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:3b:a7:1f:26:5b:d1:b0:e6:43:db:c5:0d:16:d2:93:f9:61:
         9d:a6:b0:46:94:6d:c6:9d:4d:70:1b:81:fc:02:a3:fd:b9:01:
         89:6b:3d:bd:8e:6d:c5:6f:c2:82:7b:f8:eb:1c:bd:12:b5:dd:
         b1:5c:7e:81:40:d8:8a:ff:8d:30:40:b1:34:d6:03:8e:3f:b2:
         75:fd:a1:ef:4a:76:f8:86:7b:6c:7b:24:b3:e6:74:84:29:07:
         36:fe:b0:9a:30:5b:4a:5b:c2:b4:5e:cb:4d:29:0d:29:db:91:
         bb:f3:99:33:f9:37:87:8a:50:3a:2b:60:ae:de:e2:33:65:25:
         a2:f4:ec:66:bb:21:04:b3:da:ed:38:91:0d:bc:a1:6e:8f:d7:
         43:ef:b2:5b:a4:30:7a:1d:25:2d:9f:83:3d:15:70:91:a1:c0:
         45:3d:32:8d:2d:d2:9a:59:b2:60:ed:57:c9:f7:91:c0:0c:1d:
         ca:93:b6:03:3f:79:02:c8:d7:c2:7a:fc:7c:fa:6f:2a:b6:9c:
         7a:7e:7e:61:c2:6d:86:64:a5:fd:23:3e:0c:36:0c:f1:b3:ac:
         50:77:1a:00:31:75:a3:ec:2c:0a:5f:43:e7:7f:a9:32:18:a3:
         a4:8c:34:c2:4a:59:3d:f9:d9:d5:b8:50:4e:bb:2a:b0:60:4d:
         31:51:43:6e
-----BEGIN CERTIFICATE-----
MIIHJDCCBgygAwIBAgIUEgkTwezCAMGkXbKHKyby6mpmuzgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJBNDE3
RjcyOERCRjAeFw0yMTExMDQwNTEzMzNaFw0yMjExMDQwNTE4MzNaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDE3ODFCOTZCRDQxNDQwNEVF
NzU5MzIyNDFCRjYwRjhFMTlENTg1OUU0RUJGRTQ1N0M3RjRGNEE1M0VCMTQ4RTlB
MDRBQjgyMkExMTBBMjU1NTBCRjkxMjRCNzBCMjcxN0M0OEU3NDMwODAxOEUzQTIw
RjA2QkI1MjVERDM1NTlCNjhCRjI4NEVEQjI0NkJENDZEQjREOEU4MTRCQjcwNzhB
RkM3MUQ1MEZBMzI0MDA3NjBEQzcyNTU5RjUzODI1MTUwRTU0RDMyM0FCMENBQ0FC
NzAyMkZGRUFBQUU3QjhCQjA0QjI0QTQ5OTk0QTY2NkQzQTVEQTI0RDVBMTdDNkMw
RDk2MjgxNjBCMjI1MzlCNDE3MERGOUQxNjY2MUUzQzQ4OTYyMkNENjIwNURBN0Mz
RDUwRDA2RTBBNkQzRjNFNEU0M0NCREU3QUJDQTZGOUY1NDY5NzBBMDA2OUY0OEZE
M0QyQzBDQkYzMTAyNTI0RTNGRDdGRkNDRTc4MzhGQUJFRDZBM0NGMUQ5NEM4MEJF
QjlFRjI0ODJBREZGNzBEQUIwQTI0MEU0RjQwQzk0MUExOTU3NjQ5RjREODc0NDdC
RTVDQzk2NjVBRjY5QzY4QjQzMEFFMUYxRjgyODMyRTc3ODg1MkYwQTkyRkQ1QTY1
NjdBQTEwOTcwRTU5NTMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA0Xgblr1BRATudZMiQb9g+OGdWFnk6/5FfH9PSlPrFI6aBKuCKhEK
JVUL+RJLcLJxfEjnQwgBjjog8Gu1Jd01WbaL8oTtska9RttNjoFLtweK/HHVD6Mk
AHYNxyVZ9TglFQ5U0yOrDKyrcCL/6qrnuLsEskpJmUpmbTpdok1aF8bA2WKBYLIl
ObQXDfnRZmHjxIliLNYgXafD1Q0G4KbT8+TkPL3nq8pvn1RpcKAGn0j9PSwMvzEC
Uk4/1//M54OPq+1qPPHZTIC+ue8kgq3/cNqwokDk9AyUGhlXZJ9Nh0R75cyWZa9p
xotDCuHx+Cgy53iFLwqS/VplZ6oQlw5ZUwIDAQABo4ICMjCCAi4wHQYDVR0OBBYE
FNe3WtY7lD8TvRgYYtM40D7rBB5XMB8GA1UdIwQYMBaAFKxVVEe6YsORB/Fr9XL4
KkF/co2/MA4GA1UdDwEB/wQEAwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzk5M2YzNTAtYjc1Ni00OTE2LThk
ODQtNDg0ZjAyNWRmZmNjLzAvQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJB
NDE3RjcyOERCRi5jcmwwdAYIKwYBBQUHAQEEaDBmMGQGCCsGAQUFBzAChlhyc3lu
YzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8yL0FDNTU1NDQ3
QkE2MkMzOTEwN0YxNkJGNTcyRjgyQTQxN0Y3MjhEQkYuY2VyMIGiBggrBgEFBQcB
CwSBlTCBkjCBjwYIKwYBBQUHMAuGgYJyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby8zOTkzZjM1MC1iNzU2LTQ5MTYtOGQ4NC00ODRmMDI1ZGZmY2MvMC8z
MjMwMzIyZTMxMzYzOTJlMzQzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMzMzgz
NDM4MzIucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBADKqSkwDQYJKoZIhvcNAQELBQADggEBAAY7px8mW9Gw
5kPbxQ0W0pP5YZ2msEaUbcadTXAbgfwCo/25AYlrPb2ObcVvwoJ7+OscvRK13bFc
foFA2Ir/jTBAsTTWA44/snX9oe9KdviGe2x7JLPmdIQpBzb+sJowW0pbwrRey00p
DSnbkbvzmTP5N4eKUDorYK7e4jNlJaL07Ga7IQSz2u04kQ28oW6P10PvslukMHod
JS2fgz0VcJGhwEU9Mo0t0ppZsmDtV8n3kcAMHcqTtgM/eQLI18J6/Hz6byq2nHp+
fmHCbYZkpf0jPgw2DPGzrFB3GgAxdaPsLApfQ+d/qTIYo6SMNMJKWT352dW4UE67
KrBgTTFRQ24=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:03 2024 by rpki-client on console-fra.rpki-client.org