Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a313032353a3a2f34382d3438203d3e203137343531.roa
File:                     323430343a383030303a313032353a3a2f34382d3438203d3e203137343531.roa (raw, json)
Hash identifier:          PglSlprXGPMjMEGN6/LZsdpWNAJi73xaIrBAUPTmug0=
Subject key identifier:   ED:A6:E4:55:AE:52:E1:47:24:55:4C:08:98:28:22:6B:B8:D5:F9:B9
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       599D38AE2BD38BEAF3E4ABA5E90DC02C1FBF4B9E
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a313032353a3a2f34382d3438203d3e203137343531.roa
Signing time:             Mon 13 Dec 2021 05:08:54 +0000
ROA not before:           Mon 13 Dec 2021 05:03:54 +0000
ROA not after:            Tue 13 Dec 2022 05:08:54 +0000
asID:                     17451
IP address blocks:        2404:8000:1025::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:9d:38:ae:2b:d3:8b:ea:f3:e4:ab:a5:e9:0d:c0:2c:1f:bf:4b:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Dec 13 05:03:54 2021 GMT
            Not After : Dec 13 05:08:54 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:6b:98:a1:57:3b:60:8d:2a:d6:92:c4:6d:32:
                    0c:10:26:ee:af:1e:31:7b:e4:7e:74:9b:69:67:dd:
                    57:40:91:ce:17:ad:31:d4:cd:2d:5c:49:3d:42:00:
                    64:8b:e2:9d:71:b6:ec:93:fc:a2:b2:38:b1:07:dc:
                    62:08:d2:4c:f7:9d:05:1e:e9:13:b5:bf:0b:3e:5c:
                    f8:45:ee:1c:87:f3:ad:d7:11:b2:b9:4a:a2:c2:85:
                    f7:2c:7a:57:ae:bd:f0:57:1f:55:18:78:71:3d:bc:
                    d4:0a:c3:a2:9d:62:7b:d7:a7:a8:72:8d:db:41:5d:
                    bc:d4:43:55:20:48:58:63:a8:78:3f:3f:57:7c:10:
                    21:96:4b:fa:e9:6a:7d:5c:fa:32:69:ee:4e:d4:df:
                    0b:7b:d4:72:2a:ff:d1:1a:b6:f1:f9:73:80:45:c3:
                    0c:5b:86:f5:28:23:ca:64:fd:df:0c:2e:b5:aa:20:
                    22:91:f7:30:f6:e0:44:66:2a:99:52:9d:03:10:08:
                    0a:5c:01:3e:dd:06:bd:e7:ab:d7:e6:04:2b:e8:c9:
                    ef:b4:cd:c8:79:09:40:18:93:68:cb:01:9b:0c:2b:
                    16:f1:6f:16:a7:2e:2b:5a:3b:1a:a0:ad:2f:a8:fd:
                    d2:e5:c2:55:90:1e:4a:28:b3:ea:48:e8:70:8f:3d:
                    07:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:A6:E4:55:AE:52:E1:47:24:55:4C:08:98:28:22:6B:B8:D5:F9:B9
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a313032353a3a2f34382d3438203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:8000:1025::/48

    Signature Algorithm: sha256WithRSAEncryption
         8a:fe:0c:1f:d7:59:97:5f:45:cb:5a:4e:68:2b:65:e1:48:63:
         e6:39:f9:b7:5c:34:45:2f:56:c8:91:41:1b:2e:e3:eb:db:dc:
         b9:f6:13:18:7e:2e:58:6c:ab:9c:20:c6:22:d6:7c:19:ce:cc:
         be:03:d0:ad:4a:74:a8:c6:7d:4f:5d:5a:3a:28:5a:bb:da:99:
         3d:03:53:79:b1:fc:2c:eb:03:04:65:98:4e:f5:a2:fe:7b:d5:
         23:a8:b2:ec:5e:b2:b9:a7:22:68:62:40:c1:d8:ff:26:bc:ce:
         5b:4b:d6:f8:17:c1:10:98:92:d8:8f:bc:b6:6f:2e:cc:f7:7e:
         a2:07:79:76:ef:bd:4e:0a:16:1e:ac:0c:41:c1:06:8b:08:fb:
         ce:fb:20:d2:b2:26:19:0e:2c:b6:75:79:8a:6c:63:2d:ee:25:
         47:99:c1:fe:6e:6f:3a:72:61:98:ab:47:4c:2b:5e:d9:fb:62:
         14:bd:1f:6f:45:d0:e9:15:48:c6:af:c2:e4:81:38:69:a4:d6:
         58:4e:26:0f:77:09:60:c4:f5:f9:ce:15:0c:d5:e3:7a:c7:c6:
         1f:b1:eb:d7:37:db:6c:d0:ad:57:8f:bc:bb:2f:19:0d:19:6d:
         a7:2b:cb:83:a6:d8:6a:c3:b6:59:1c:5d:66:b9:52:3c:fb:ee:
         b4:bd:55:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:38 2024 by rpki-client on console-ams.rpki-client.org