Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3230332e3134322e37302e302f32342d3234203d3e203338343832.roa
File:                     3230332e3134322e37302e302f32342d3234203d3e203338343832.roa (raw, json)
Hash identifier:          Lz9JD8joKQqx9zpVrHgR2S7x+7/JMgxbP3rC/QF2DO8=
Subject key identifier:   3E:BC:89:74:45:D6:5B:A4:D2:3A:22:3B:F7:CE:4D:AB:E2:5D:B3:09
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       032D6361B4A0C9FA0479EA7DED46399DAE97C7AC
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3230332e3134322e37302e302f32342d3234203d3e203338343832.roa
Signing time:             Fri 25 Feb 2022 09:43:22 +0000
ROA not before:           Fri 25 Feb 2022 09:38:22 +0000
ROA not after:            Sat 25 Feb 2023 09:43:22 +0000
asID:                     38482
IP address blocks:        203.142.70.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:2d:63:61:b4:a0:c9:fa:04:79:ea:7d:ed:46:39:9d:ae:97:c7:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Feb 25 09:38:22 2022 GMT
            Not After : Feb 25 09:43:22 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:75:e4:69:4c:6b:db:44:95:e2:13:d5:35:e5:
                    1c:8d:5a:45:70:37:31:96:02:8a:ce:73:f3:3d:ed:
                    16:ae:6d:5e:5c:4a:ff:13:e7:ac:cf:ac:f3:db:42:
                    ff:3e:19:23:f0:ff:a3:5a:ae:dd:a1:1e:5d:06:9f:
                    19:40:bb:bd:9f:93:57:c5:b7:b8:36:43:5e:48:9c:
                    d3:ac:9c:8c:b3:07:e8:07:d1:29:a2:cc:1d:38:b9:
                    cb:f9:f1:ba:fe:d1:21:14:3a:09:b8:1f:cb:9e:fb:
                    29:55:61:8a:b2:bb:e7:fc:61:14:73:bb:05:1f:bc:
                    43:77:0b:0e:70:e8:ec:b6:3b:38:78:e0:29:ed:a8:
                    8f:3f:99:a7:42:88:94:54:f7:d7:70:f2:40:99:6f:
                    e5:f2:a3:bd:7a:09:f6:ed:0e:77:04:73:68:cd:18:
                    d2:a7:5b:77:4e:d2:1c:d3:50:4d:a8:c4:2d:8f:59:
                    3a:db:ae:c1:b6:dc:0b:69:1d:bc:3f:be:30:b9:6d:
                    77:c7:0e:35:8f:f8:af:e3:1f:d4:39:1a:73:b0:77:
                    e2:3e:0e:63:8d:57:4f:7b:f4:03:67:57:77:96:3e:
                    ef:ba:04:ee:93:9f:ce:71:8f:68:2e:b7:5d:a8:98:
                    39:4a:74:96:53:8b:45:ae:30:cc:7e:9f:50:c8:ff:
                    6a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:BC:89:74:45:D6:5B:A4:D2:3A:22:3B:F7:CE:4D:AB:E2:5D:B3:09
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3230332e3134322e37302e302f32342d3234203d3e203338343832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.142.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:43:85:6e:6f:a4:fd:76:f8:7f:cc:1a:33:d3:6d:57:27:c6:
         a8:89:84:6b:eb:7b:8e:13:bc:d6:b4:d7:06:61:1e:b6:04:a4:
         dd:1d:ff:17:d9:20:21:02:d4:83:1a:9c:4e:64:c2:4d:64:84:
         91:3e:af:d2:51:11:2a:9b:97:91:c2:bf:c2:ab:29:7e:7c:63:
         47:e2:6f:0b:08:e7:c3:0b:91:c5:35:23:bb:6e:40:bf:9e:7b:
         11:e7:35:b0:a3:ad:5f:e8:a4:36:53:5d:20:b9:44:8a:6c:2d:
         a6:64:9f:d7:5b:3c:76:10:83:b0:5c:d7:1b:90:48:15:1c:ac:
         c8:95:74:e7:8a:ce:88:2a:0a:92:10:4d:00:aa:fd:b4:7f:cd:
         7f:b7:2a:82:9e:85:87:36:6f:41:6c:42:2b:9c:dd:7c:f1:0d:
         15:ec:21:2d:ee:66:3e:a9:8d:89:00:5a:04:8d:c1:d1:33:6a:
         01:6b:f2:eb:a8:a9:53:42:50:d0:5a:d9:62:92:e4:89:b9:76:
         ed:86:63:53:a9:ba:e3:86:09:e2:eb:a5:e9:84:5a:0c:fc:05:
         73:a7:7f:0c:c9:7e:27:7e:7b:9d:0b:63:fa:39:f8:cf:7d:e2:
         9d:59:e4:2b:a4:e3:dc:db:cb:34:1d:a1:42:75:47:a9:f2:51:
         bf:ee:78:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:38 2024 by rpki-client on console-ams.rpki-client.org