Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a313031373a3a2f34382d3438203d3e203137343531.roa
File:                     323430343a383030303a313031373a3a2f34382d3438203d3e203137343531.roa (raw, json)
Hash identifier:          x5eUsuiUzNt1kKPHNOSvYBOEXPlDGgitbof6ojDAqaM=
Subject key identifier:   D2:38:84:08:29:17:41:E7:23:72:B5:FC:0A:EE:7A:15:AE:5A:55:B5
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       3369C8BFFB055B8686B22901A88F166A1837607E
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a313031373a3a2f34382d3438203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:01:13 +0000
ROA not before:           Wed 29 Sep 2021 23:56:13 +0000
ROA not after:            Fri 30 Sep 2022 00:01:13 +0000
asID:                     17451
IP address blocks:        2404:8000:1017::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:69:c8:bf:fb:05:5b:86:86:b2:29:01:a8:8f:16:6a:18:37:60:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:56:13 2021 GMT
            Not After : Sep 30 00:01:13 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:b9:29:40:89:ec:dc:0b:4a:a4:22:d7:71:8b:
                    c2:7b:94:a9:d4:d9:f6:c7:77:eb:80:d1:43:c8:84:
                    50:77:19:d3:f9:19:ff:66:4a:e7:21:9b:82:dc:10:
                    25:b9:61:99:9a:ae:6f:9e:f6:4b:69:4c:04:4c:d5:
                    de:85:d3:7c:cd:89:cd:95:33:fe:c6:a1:75:77:a4:
                    c2:63:ee:4b:25:92:ff:b5:e0:46:49:61:d1:75:aa:
                    a9:ff:59:cb:e3:fd:ce:c2:25:01:a5:e1:9e:c2:10:
                    3b:1e:c3:07:e6:df:e5:e0:71:4c:cf:9c:69:5e:a7:
                    04:c0:90:ca:6c:1c:57:65:ec:55:8f:05:09:59:2f:
                    cf:e3:0d:9e:8e:f6:2c:e8:3d:cc:68:11:71:6b:8f:
                    3c:d9:73:23:44:df:b2:79:72:f9:7c:ec:47:47:ab:
                    2c:1c:39:10:93:6f:0d:22:db:df:d5:41:4f:39:59:
                    24:59:cb:c5:0a:f8:22:bb:cd:f3:cd:b2:fb:a5:c3:
                    a2:ee:1f:d3:6f:aa:cd:3c:fd:8c:68:f1:96:52:b3:
                    2d:32:84:14:dd:d9:db:bf:47:73:06:0d:42:7e:40:
                    7b:96:c7:ff:72:3c:b5:e6:4e:42:78:3a:5a:d0:d1:
                    15:8f:34:b0:a0:2d:b5:d0:3d:70:c6:46:d1:40:ce:
                    17:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:38:84:08:29:17:41:E7:23:72:B5:FC:0A:EE:7A:15:AE:5A:55:B5
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a313031373a3a2f34382d3438203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:8000:1017::/48

    Signature Algorithm: sha256WithRSAEncryption
         7a:18:fc:96:81:df:06:ad:90:97:3f:b7:55:df:30:f1:46:dd:
         51:89:ba:f8:15:79:77:72:dc:11:5c:34:be:3a:0a:14:9b:ab:
         fe:fd:f8:e9:80:06:6b:45:c0:77:40:6c:2b:b3:fb:21:28:2a:
         5e:13:ab:b0:22:05:8d:1b:88:b5:d4:77:d2:eb:43:fa:27:e0:
         6a:14:fe:21:40:12:fd:ee:3b:00:90:a3:fc:38:a6:de:85:58:
         08:06:90:63:d1:1d:62:17:38:04:83:03:d8:e6:08:44:af:13:
         7b:c1:f1:37:98:b6:4f:30:ed:71:a7:b0:2c:91:2f:17:db:de:
         97:5d:62:6e:ac:42:14:aa:c2:60:3a:17:30:da:ed:91:56:be:
         ca:92:45:a0:5c:3b:03:35:50:a2:cd:7a:49:5d:34:48:43:27:
         63:47:a1:f2:aa:75:39:9f:17:42:e6:b2:0e:17:59:18:2c:2e:
         b7:cb:4b:38:5f:7c:ca:a7:72:87:ec:aa:f7:3e:43:13:f7:97:
         e4:8e:d9:bd:57:f6:e0:7f:63:31:e6:7c:53:0f:fd:09:82:c9:
         bc:e5:a1:b0:ff:15:e4:9d:84:a7:f0:7e:5b:b9:b8:ec:7e:c3:
         fc:a2:1d:4e:59:38:2b:29:a1:e0:9d:ee:e1:08:d9:03:40:65:
         57:cd:e3:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:05 2024 by rpki-client on console-fra.rpki-client.org