Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a313030363a3a2f34382d3438203d3e203137343531.roa
File:                     323430343a383030303a313030363a3a2f34382d3438203d3e203137343531.roa (raw, json)
Hash identifier:          Ye8Dc0tn4BmrPq/O7FHlhdPCECTkBtVB5elIuVu3M0g=
Subject key identifier:   BF:1E:0B:5D:16:11:3C:61:5C:AA:D0:99:E5:C0:1C:95:76:4B:2D:0C
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       5DB455BBD7FD0FE86EF77F8C450347AE136A5CDA
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a313030363a3a2f34382d3438203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:58 +0000
ROA not before:           Wed 29 Sep 2021 23:55:58 +0000
ROA not after:            Fri 30 Sep 2022 00:00:58 +0000
asID:                     17451
IP address blocks:        2404:8000:1006::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:b4:55:bb:d7:fd:0f:e8:6e:f7:7f:8c:45:03:47:ae:13:6a:5c:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:58 2021 GMT
            Not After : Sep 30 00:00:58 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:e7:65:6a:23:a9:59:d0:ab:c1:f6:49:0f:13:
                    bf:9b:06:67:13:74:f4:05:1f:47:42:88:95:8f:65:
                    c0:2f:55:4f:3c:90:ca:03:f8:1d:7f:42:ea:90:d2:
                    62:c0:d5:ea:92:a4:b2:a4:4f:ed:39:65:8b:b1:81:
                    0f:28:33:68:92:7b:32:f0:5e:5a:87:d6:c5:e9:85:
                    67:3e:27:7c:4a:2a:8d:ff:1d:b9:0b:2d:a8:75:a2:
                    39:8b:ab:92:17:08:d7:46:1c:96:fe:01:e4:9c:02:
                    35:61:44:39:46:51:06:af:2c:d8:34:be:54:7f:93:
                    79:ae:85:8a:2c:2c:2b:a1:fc:ba:e1:a3:8a:3d:fa:
                    ec:30:a1:69:05:ff:12:ee:6b:01:2a:02:b2:d5:6e:
                    68:d7:88:f3:a7:35:80:f7:f5:08:89:9e:4e:35:f2:
                    22:93:2f:10:b7:8d:8b:b2:9f:25:a2:f4:e5:16:37:
                    0a:6f:42:48:50:b0:e8:c5:bf:32:18:26:02:7b:2b:
                    58:bb:e5:3f:5d:89:f4:2c:a5:6e:73:d3:64:4b:f9:
                    75:12:47:05:ed:29:ff:60:e9:2d:1b:6b:3c:3a:0b:
                    e7:3d:e2:ed:18:03:b7:e6:bb:bc:81:be:c6:31:7f:
                    bf:c3:df:6a:b3:b6:25:49:d2:c1:c0:f4:fb:01:7e:
                    ab:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:1E:0B:5D:16:11:3C:61:5C:AA:D0:99:E5:C0:1C:95:76:4B:2D:0C
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a313030363a3a2f34382d3438203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:8000:1006::/48

    Signature Algorithm: sha256WithRSAEncryption
         66:d3:26:59:50:16:ce:58:95:09:fd:69:9c:d8:89:d3:a4:af:
         54:9c:fe:da:8e:d8:cb:73:43:5c:41:da:b1:18:a1:7c:63:24:
         25:94:45:8e:d2:92:ff:d3:36:af:e1:d8:eb:79:40:6d:b4:3d:
         2f:6f:74:fb:21:e2:27:7c:e7:91:e7:93:c9:24:a1:b3:3d:a4:
         09:2a:e6:ea:45:57:84:f8:a7:33:e6:a4:28:25:24:f1:05:4f:
         1e:29:f6:0c:54:80:02:c3:e2:7b:86:c3:1c:5d:c8:b9:e2:f9:
         e4:d5:46:5b:9a:98:f9:07:db:3f:52:87:7a:cb:71:67:f6:c7:
         60:87:0a:6d:b5:e4:75:f3:ed:6c:1f:a8:03:38:86:e6:89:94:
         79:0b:91:b3:59:e3:56:be:3b:69:3b:51:b9:6b:32:17:92:ef:
         ac:0b:e0:6a:25:d4:fe:09:b2:ff:5d:df:3f:72:de:45:9c:c8:
         e4:75:82:97:4b:1e:99:95:b3:0e:c3:d4:5b:67:1b:b8:67:12:
         95:0b:94:e6:18:fa:62:5f:40:0b:18:07:1e:fd:1b:97:d1:4f:
         ac:15:dc:eb:c8:06:e4:cc:6d:cc:cc:f4:c1:02:74:d0:4c:60:
         f8:91:d0:5d:82:bb:7f:16:96:12:c2:8a:4b:97:16:d7:6f:56:
         97:56:ac:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:38 2024 by rpki-client on console-ams.rpki-client.org