Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3230332e3134322e38312e302f32342d3234203d3e203338343832.roa
File:                     3230332e3134322e38312e302f32342d3234203d3e203338343832.roa (raw, json)
Hash identifier:          2T3OCKClOuei1m+UpTqs+wmmNkeyHnMddpJpf3q+RVs=
Subject key identifier:   08:57:44:D1:79:5D:E4:8F:CB:0F:62:C3:E5:C1:71:66:19:CE:8E:28
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       1457828774977C2F9D8318AEE09A21747D19ECED
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3230332e3134322e38312e302f32342d3234203d3e203338343832.roa
Signing time:             Mon 21 Feb 2022 08:44:42 +0000
ROA not before:           Mon 21 Feb 2022 08:39:42 +0000
ROA not after:            Tue 21 Feb 2023 08:44:42 +0000
asID:                     38482
IP address blocks:        203.142.81.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:57:82:87:74:97:7c:2f:9d:83:18:ae:e0:9a:21:74:7d:19:ec:ed
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Feb 21 08:39:42 2022 GMT
            Not After : Feb 21 08:44:42 2023 GMT
        Subject: CN=3082010A0282010100DB1315D5CF60F0C735D883ADC29F91935382BAF7BC26BEDF1B9BF547D27D38052F04167A0A707E1DE7D831FF6DFBD56AF90A8A9C6B95D41DD112AF31136483DC66B10C8BC1DCCEF2A88EE52DFD61AC8DB0CC6BF5A4B76977A4AEB454DE6A2280EFCC8BB8885CFC6EE73ED7B0778330AE5452806E4255B88EB83F21EDFDCEE4C8B84C9C103C0596FF1856DCA51D43121D522F2543BE7C043DF1F0F92AE597AEACD85A6C95B2C200AA0F4FDAF2B4032DD8B8CAF22653EC8626113653A158D42E9DFA2F2938C9A39F04625DED8E57102A4134269CF65ECF1CC3DF259728389FC409ABAA6403213B27615EE5104D4300EC7D4E60EAC722F7D9141E88B0E0368841BD0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:13:15:d5:cf:60:f0:c7:35:d8:83:ad:c2:9f:
                    91:93:53:82:ba:f7:bc:26:be:df:1b:9b:f5:47:d2:
                    7d:38:05:2f:04:16:7a:0a:70:7e:1d:e7:d8:31:ff:
                    6d:fb:d5:6a:f9:0a:8a:9c:6b:95:d4:1d:d1:12:af:
                    31:13:64:83:dc:66:b1:0c:8b:c1:dc:ce:f2:a8:8e:
                    e5:2d:fd:61:ac:8d:b0:cc:6b:f5:a4:b7:69:77:a4:
                    ae:b4:54:de:6a:22:80:ef:cc:8b:b8:88:5c:fc:6e:
                    e7:3e:d7:b0:77:83:30:ae:54:52:80:6e:42:55:b8:
                    8e:b8:3f:21:ed:fd:ce:e4:c8:b8:4c:9c:10:3c:05:
                    96:ff:18:56:dc:a5:1d:43:12:1d:52:2f:25:43:be:
                    7c:04:3d:f1:f0:f9:2a:e5:97:ae:ac:d8:5a:6c:95:
                    b2:c2:00:aa:0f:4f:da:f2:b4:03:2d:d8:b8:ca:f2:
                    26:53:ec:86:26:11:36:53:a1:58:d4:2e:9d:fa:2f:
                    29:38:c9:a3:9f:04:62:5d:ed:8e:57:10:2a:41:34:
                    26:9c:f6:5e:cf:1c:c3:df:25:97:28:38:9f:c4:09:
                    ab:aa:64:03:21:3b:27:61:5e:e5:10:4d:43:00:ec:
                    7d:4e:60:ea:c7:22:f7:d9:14:1e:88:b0:e0:36:88:
                    41:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:57:44:D1:79:5D:E4:8F:CB:0F:62:C3:E5:C1:71:66:19:CE:8E:28
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3230332e3134322e38312e302f32342d3234203d3e203338343832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.142.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:f7:9c:e5:1d:19:38:b5:c7:59:73:7d:f2:db:3b:13:57:67:
         f4:8a:b5:98:1c:35:e1:7e:d3:45:76:44:ac:d4:1e:e6:40:8e:
         f1:6d:4d:d4:25:bc:10:c9:2f:05:45:c6:04:c6:d2:7c:f5:32:
         6e:87:15:27:e6:e6:36:e9:23:5e:d4:e4:f4:db:7e:48:ef:12:
         ae:c7:8b:ee:5a:16:27:66:a7:4a:c7:9f:47:8e:d3:96:7e:2d:
         86:aa:a9:97:db:4b:50:fb:b7:8b:cc:a5:85:87:75:9b:c4:7f:
         03:da:db:b2:ac:3a:21:e0:12:09:62:dc:17:ea:d1:63:90:17:
         c6:61:bb:8f:ca:4e:5d:52:f3:eb:df:68:2c:d3:b6:86:7e:5f:
         a0:18:bf:6f:71:ea:7a:ac:04:3f:0d:d7:67:42:7a:23:f0:67:
         ad:f2:34:17:fa:bc:45:4c:3e:34:d2:19:e4:74:6d:13:d2:c7:
         11:df:c4:a6:ce:bf:57:4c:9f:d2:97:cf:38:e9:2f:8c:07:e8:
         f2:06:3d:64:4a:4c:c8:e9:1b:4a:2a:1e:69:61:c8:da:f1:6d:
         dd:fa:93:1c:51:63:b3:75:d2:95:7c:30:49:14:df:32:d7:cc:
         61:01:b5:c9:44:13:fd:b3:a6:6d:a8:24:9b:11:53:eb:7b:35:
         6a:62:b5:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:38 2024 by rpki-client on console-ams.rpki-client.org