Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3230332e3134322e37392e302f32342d3234203d3e203137343531.roa
File:                     3230332e3134322e37392e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier:          TKBk4WSOVeexdcDlKpXzJbDjq9M9l/3f8GCwZRX8tJw=
Subject key identifier:   B5:78:7E:CF:B9:D7:96:73:8B:3A:C6:C7:1B:DC:81:53:5E:FF:8F:F9
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       621E56B4831978CA529E943270BB80365354AC43
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3230332e3134322e37392e302f32342d3234203d3e203137343531.roa
Signing time:             Wed 22 Sep 2021 02:07:27 +0000
ROA not before:           Wed 22 Sep 2021 02:02:27 +0000
ROA not after:            Thu 22 Sep 2022 02:07:27 +0000
asID:                     17451
IP address blocks:        203.142.79.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:1e:56:b4:83:19:78:ca:52:9e:94:32:70:bb:80:36:53:54:ac:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 22 02:02:27 2021 GMT
            Not After : Sep 22 02:07:27 2022 GMT
        Subject: CN=3082010A0282010100D60ADBD505B66A5DC399A62047AD3A91CADCF2BE70C411564531C5F982E8FC779293F75097053727D65D4A54B2A05A08C760C53236D87F8F6F2E33B0E3A6C8152D3FD4DBD8ECFF178B1E0A5C04114B1A99D22E50624616E754413419695AC3F7E1B488BAA42A9F3ACDCBB24876FBA8E2586EE6A43AD1F6D1E974615D234C7FB49019F19F79180D8EA7DC6589A781A87E4BA9FB1573E299E66C860960086B85F6DF4ED98904D924578486EB1D867796ED411D0653D939B665978123446AFDCD4007026AEE67B7119241D6A576DB869F680BC919649187A2C8A1F6F685BD7045DD25C576771C1BAEA643658D040F47AA6D9875C46B25392BEBB6D8F7DDCC248C430203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:0a:db:d5:05:b6:6a:5d:c3:99:a6:20:47:ad:
                    3a:91:ca:dc:f2:be:70:c4:11:56:45:31:c5:f9:82:
                    e8:fc:77:92:93:f7:50:97:05:37:27:d6:5d:4a:54:
                    b2:a0:5a:08:c7:60:c5:32:36:d8:7f:8f:6f:2e:33:
                    b0:e3:a6:c8:15:2d:3f:d4:db:d8:ec:ff:17:8b:1e:
                    0a:5c:04:11:4b:1a:99:d2:2e:50:62:46:16:e7:54:
                    41:34:19:69:5a:c3:f7:e1:b4:88:ba:a4:2a:9f:3a:
                    cd:cb:b2:48:76:fb:a8:e2:58:6e:e6:a4:3a:d1:f6:
                    d1:e9:74:61:5d:23:4c:7f:b4:90:19:f1:9f:79:18:
                    0d:8e:a7:dc:65:89:a7:81:a8:7e:4b:a9:fb:15:73:
                    e2:99:e6:6c:86:09:60:08:6b:85:f6:df:4e:d9:89:
                    04:d9:24:57:84:86:eb:1d:86:77:96:ed:41:1d:06:
                    53:d9:39:b6:65:97:81:23:44:6a:fd:cd:40:07:02:
                    6a:ee:67:b7:11:92:41:d6:a5:76:db:86:9f:68:0b:
                    c9:19:64:91:87:a2:c8:a1:f6:f6:85:bd:70:45:dd:
                    25:c5:76:77:1c:1b:ae:a6:43:65:8d:04:0f:47:aa:
                    6d:98:75:c4:6b:25:39:2b:eb:b6:d8:f7:dd:cc:24:
                    8c:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:78:7E:CF:B9:D7:96:73:8B:3A:C6:C7:1B:DC:81:53:5E:FF:8F:F9
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3230332e3134322e37392e302f32342d3234203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.142.79.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a6:69:6a:68:2f:e4:5e:ec:ac:bc:2c:33:38:e1:8d:93:f7:40:
         d1:8e:8c:4a:62:71:63:25:63:52:e9:37:ed:14:2c:20:2f:a7:
         c5:66:fe:6d:1f:d6:46:4f:88:ce:a3:c7:1b:bd:65:93:9d:11:
         ea:38:57:75:55:3a:43:e3:92:0f:be:b8:f8:3b:5b:ec:2b:37:
         f0:b4:e1:00:6f:33:a6:26:2a:3f:8c:4d:15:b0:e6:91:e2:42:
         49:52:8b:f1:92:3d:e2:33:7a:38:3e:58:d9:6c:29:a9:dc:2a:
         64:b8:2e:37:8c:8d:2e:09:3d:d5:0f:b1:7f:7d:ae:01:0e:ef:
         46:d1:9a:4f:d8:ca:01:dc:df:4e:c6:b7:0c:a0:df:f8:a6:aa:
         bf:77:20:a9:ec:d5:e5:f7:19:9b:56:67:c3:ec:c8:27:d4:cc:
         8b:71:8c:16:b7:37:98:8c:11:45:6f:9b:aa:1c:7e:f9:ac:86:
         78:cf:54:7f:ea:90:6f:80:df:18:34:7c:e5:90:be:63:5c:b2:
         9f:f3:75:f2:b3:44:34:a3:dc:9d:f5:50:13:06:b2:7d:4e:79:
         4c:19:1c:f5:d5:fa:ee:93:5a:89:49:46:87:5a:0d:4a:10:0d:
         cd:a4:ea:f9:23:39:81:38:37:6a:67:4d:9f:34:b4:81:2f:4b:
         dd:43:83:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:05 2024 by rpki-client on console-fra.rpki-client.org