Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a313032333a3a2f34382d3438203d3e203137343531.roa
File:                     323430343a383030303a313032333a3a2f34382d3438203d3e203137343531.roa (raw, json)
Hash identifier:          gryioTOB2Kii6fMXi5VvgeMDcRVedyrG7bqW+Srf9CI=
Subject key identifier:   74:E3:69:A2:9B:23:8C:C9:51:08:7E:09:9C:B8:14:BE:8E:18:70:8C
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       4C644D83EB27BEA9EBAD7B9A8B17399165363DA9
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a313032333a3a2f34382d3438203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:09 +0000
ROA not before:           Wed 29 Sep 2021 23:55:09 +0000
ROA not after:            Fri 30 Sep 2022 00:00:09 +0000
asID:                     17451
IP address blocks:        2404:8000:1023::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:64:4d:83:eb:27:be:a9:eb:ad:7b:9a:8b:17:39:91:65:36:3d:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:09 2021 GMT
            Not After : Sep 30 00:00:09 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a6:b3:42:df:3c:93:01:74:09:03:dc:8f:b2:
                    b0:ca:9f:6a:b2:b1:5f:b2:21:32:9a:9f:4d:1f:d1:
                    58:dc:29:29:90:dc:a6:f7:1f:0c:7c:d0:89:03:6a:
                    b6:47:f1:e1:da:fb:7d:d6:d3:4e:b7:17:7c:c7:15:
                    49:af:e5:37:c2:a4:c9:4b:58:52:4b:0c:59:2b:e8:
                    ad:e6:5f:f6:a5:d9:cb:57:3a:e5:ae:24:ef:82:04:
                    b5:f0:8f:dc:6c:4f:a0:a4:ac:23:8f:75:5c:0b:c7:
                    37:96:48:97:c6:51:2e:6d:6b:0d:dd:81:21:7a:a2:
                    2b:90:ed:28:8d:5a:e5:3b:41:32:d4:bf:64:51:94:
                    1a:0b:07:c2:22:44:de:a4:bb:20:bb:bc:cf:5f:c9:
                    f8:90:fd:e6:92:e7:00:53:1e:df:af:d3:31:26:21:
                    73:81:62:ba:26:56:9d:46:7b:fc:7a:86:8f:cf:dc:
                    6a:4c:a7:72:38:17:a6:9c:92:e7:6e:9f:0e:71:a1:
                    dd:bc:ef:8f:e3:65:31:5b:fc:65:28:ac:fc:22:72:
                    ff:5d:db:f9:f6:74:62:f4:6e:91:87:2d:5f:94:d4:
                    0f:ee:21:71:d9:f9:f9:e0:13:e6:0c:5c:01:fd:0a:
                    57:0a:6c:f5:fc:ce:b7:cd:17:e2:f7:91:9b:d0:4b:
                    04:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:E3:69:A2:9B:23:8C:C9:51:08:7E:09:9C:B8:14:BE:8E:18:70:8C
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a313032333a3a2f34382d3438203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:8000:1023::/48

    Signature Algorithm: sha256WithRSAEncryption
         72:b3:c3:2f:6e:b0:88:58:d1:ce:53:8c:63:c7:87:ea:51:05:
         a5:8b:e5:b3:35:b9:bc:85:4d:bb:8f:1e:7f:cc:09:c2:a1:b1:
         28:b9:80:b6:05:69:6c:82:92:41:65:d3:59:18:52:d2:61:83:
         c7:ab:07:74:c2:a9:13:f1:3d:01:b9:6a:94:57:08:55:e5:ad:
         2d:2f:24:91:87:0e:cf:6e:42:e3:7a:f4:3c:bb:75:5f:73:fc:
         3d:14:5d:cc:98:4d:0f:ee:00:95:e4:4d:8c:6b:1a:ca:bd:91:
         a3:bc:f1:14:29:b1:2b:d0:18:06:13:12:7e:31:a5:8f:ce:c8:
         e9:2e:49:9c:63:22:e7:a5:e4:6a:2f:5e:13:8e:ce:8d:8b:2e:
         f4:a5:2c:9e:13:62:df:8e:ad:47:c5:71:bd:58:73:37:49:da:
         bc:99:ca:cb:1a:d1:ac:fa:49:b6:fd:c9:fa:5d:b1:00:d7:06:
         e1:40:5d:32:af:34:6f:0b:cf:de:cf:60:e1:51:1e:d4:c8:9e:
         74:e6:47:6f:db:92:1e:eb:f5:b6:01:bf:a8:38:93:c5:fe:97:
         ed:7f:02:7f:ee:00:af:b8:8d:cd:48:07:d1:71:d6:ec:39:60:
         20:8b:3e:ee:d4:4c:fb:f1:9d:e7:cf:53:53:fe:eb:2e:f2:ea:
         0d:df:4d:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:38 2024 by rpki-client on console-ams.rpki-client.org