Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a313030343a3a2f34382d3438203d3e203137343531.roa
File:                     323430343a383030303a313030343a3a2f34382d3438203d3e203137343531.roa (raw, json)
Hash identifier:          WMDvRIRRCYmsXIoQJuYB5cA9X/scKFn1WGtxiQ6Yw78=
Subject key identifier:   A7:36:0A:E7:62:FE:60:7F:60:AE:20:CE:D8:93:B9:86:CB:3F:F4:D9
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       62D581DC981D31148AC835CF0972D207556D010E
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a313030343a3a2f34382d3438203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:40 +0000
ROA not before:           Wed 29 Sep 2021 23:55:40 +0000
ROA not after:            Fri 30 Sep 2022 00:00:40 +0000
asID:                     17451
IP address blocks:        2404:8000:1004::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:d5:81:dc:98:1d:31:14:8a:c8:35:cf:09:72:d2:07:55:6d:01:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:40 2021 GMT
            Not After : Sep 30 00:00:40 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a6:f5:da:dc:91:8f:1d:cd:b9:70:a1:88:53:
                    6b:16:0b:43:e1:e3:a7:c3:85:fa:e5:36:79:4a:bf:
                    d7:50:42:ca:09:a4:2c:14:60:cb:46:61:9e:f4:4f:
                    4b:7e:21:b7:2e:73:39:eb:0c:83:39:d8:a0:43:58:
                    cc:f6:16:da:26:fa:5c:0f:4f:0c:b7:65:c5:a0:6c:
                    7c:f5:ff:c2:54:3b:4d:39:14:84:17:40:c0:ff:a5:
                    54:6a:61:06:c1:c3:cd:21:5c:4f:c8:13:c1:c2:84:
                    4f:75:c1:dd:76:e9:69:9a:0f:3c:9d:33:4b:41:1c:
                    23:25:8a:3b:37:f0:e2:9a:a1:48:6d:fb:82:97:e7:
                    8f:ff:7d:f3:ab:0a:82:62:c9:26:96:b2:fd:ac:04:
                    e4:57:5c:80:2d:e9:60:78:3b:9b:6b:59:1c:f1:70:
                    a7:18:94:a9:ff:b0:fd:57:a3:01:91:ce:2e:8a:7b:
                    bc:75:0f:9c:f7:d1:d6:be:3e:2a:b4:d7:30:5f:19:
                    09:6d:11:3c:0f:d8:32:70:0f:ae:4d:fd:05:d1:a9:
                    51:1c:7b:4c:7b:ea:1c:d6:08:a6:2c:e7:72:f0:8d:
                    e7:53:3e:c5:ac:26:23:39:26:48:5d:a9:88:d1:a8:
                    2d:89:79:3f:ac:b2:db:27:ac:3f:02:3e:e8:6a:2a:
                    f6:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:36:0A:E7:62:FE:60:7F:60:AE:20:CE:D8:93:B9:86:CB:3F:F4:D9
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a313030343a3a2f34382d3438203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:8000:1004::/48

    Signature Algorithm: sha256WithRSAEncryption
         21:81:74:98:0b:b1:e9:02:3b:91:b7:91:19:64:65:22:ba:cc:
         1f:c4:69:ef:49:f0:f1:db:84:76:5d:d3:d6:9f:01:0b:9e:7d:
         2d:3f:36:a4:35:8b:11:9e:7c:a8:b3:b6:fd:ce:f6:12:44:08:
         17:ad:4a:fb:aa:78:01:a5:71:72:dc:63:d7:51:10:bb:ea:92:
         64:42:89:8e:2c:32:99:7c:45:0c:7b:55:c4:39:f0:65:39:44:
         00:bb:f3:1c:55:1e:9b:a4:e8:2c:72:4b:5e:b0:8c:e2:5d:6a:
         21:3c:39:32:e6:34:2b:74:78:05:7f:84:72:fc:2a:bb:10:40:
         7a:07:ed:75:9a:7a:18:75:35:58:9f:9f:b1:a7:28:4a:44:b6:
         ed:fc:d1:fe:ea:e9:2c:8b:30:af:4c:a3:df:5a:6e:af:e9:cb:
         68:4e:24:0e:d7:2c:1d:31:0d:07:aa:73:75:96:77:4b:76:da:
         84:f4:43:ac:d2:65:61:c3:5a:31:52:1b:b1:fc:13:00:2e:40:
         27:c9:cb:0b:60:ee:95:07:7c:ac:d4:dd:aa:9f:34:16:32:ca:
         e4:c9:52:10:22:14:bf:4a:8f:00:b1:86:14:89:ad:5b:1e:af:
         e7:da:23:db:04:c6:6d:ea:4a:47:85:80:72:98:7f:3d:44:45:
         89:ec:e9:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:38 2024 by rpki-client on console-ams.rpki-client.org