Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a313032383a3a2f34382d3438203d3e203137343531.roa
File:                     323430343a383030303a313032383a3a2f34382d3438203d3e203137343531.roa (raw, json)
Hash identifier:          OVSsJrFgo6jOqzRbCYvKgOSLDEYhAA6wkT2TIh+98dU=
Subject key identifier:   68:59:DA:93:71:C8:05:DD:3A:43:36:99:8F:DD:01:73:F3:E0:21:7D
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       46F9FEFF3E93E968988412B05816EB1CEFCEA85C
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a313032383a3a2f34382d3438203d3e203137343531.roa
Signing time:             Mon 13 Dec 2021 05:09:26 +0000
ROA not before:           Mon 13 Dec 2021 05:04:26 +0000
ROA not after:            Tue 13 Dec 2022 05:09:26 +0000
asID:                     17451
IP address blocks:        2404:8000:1028::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:f9:fe:ff:3e:93:e9:68:98:84:12:b0:58:16:eb:1c:ef:ce:a8:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Dec 13 05:04:26 2021 GMT
            Not After : Dec 13 05:09:26 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:70:29:dc:9d:68:02:81:7d:b3:ba:36:12:88:
                    ab:e0:96:a2:6c:44:12:d0:5a:b8:d1:92:ce:c6:8c:
                    05:07:3e:c5:1f:7f:91:4e:73:32:fb:fb:e0:e0:69:
                    07:27:8e:25:64:67:ac:aa:67:ae:b3:9d:71:b6:26:
                    b4:d1:f3:2e:72:ee:4d:b1:85:b9:88:54:ec:84:e3:
                    8a:3e:c9:89:64:2f:7f:ec:27:6e:78:02:cf:8b:21:
                    78:00:ec:fe:7d:df:2b:b0:ec:9a:8d:f7:a8:a9:18:
                    3d:7f:11:a5:d1:06:3f:e8:c6:1b:48:4e:54:fa:e7:
                    13:30:db:58:bc:65:6a:72:a3:3d:db:5f:a8:11:d5:
                    bf:5e:a3:ff:c4:a7:8e:cd:87:15:12:a3:cb:9a:11:
                    b5:98:31:fb:a4:c5:78:8f:72:6b:9f:5b:ab:86:37:
                    8b:42:52:ff:a2:b5:17:e6:5c:78:e2:c1:db:47:93:
                    aa:b2:38:7c:b0:fd:c9:69:b2:b0:b9:d2:19:07:1e:
                    b3:88:80:c4:2b:82:1b:c8:41:26:51:3b:55:ad:33:
                    d3:7f:c2:c3:b4:8a:52:42:15:14:46:7c:3b:d6:d3:
                    8e:6d:1a:59:ac:16:bb:74:53:3a:89:46:9d:95:8b:
                    0e:f5:b6:85:3f:c9:13:7f:a1:9c:cb:95:31:e7:d0:
                    98:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:59:DA:93:71:C8:05:DD:3A:43:36:99:8F:DD:01:73:F3:E0:21:7D
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a313032383a3a2f34382d3438203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:8000:1028::/48

    Signature Algorithm: sha256WithRSAEncryption
         6b:a6:df:49:ef:77:c0:09:18:bd:fd:37:06:30:70:5f:b9:a4:
         90:19:63:46:a4:a1:5f:1c:1a:f1:21:47:3f:51:5a:24:fc:51:
         33:27:89:b2:ac:d1:f9:09:55:2a:b0:30:fd:3d:e1:80:7c:a5:
         19:81:82:ad:a2:61:db:57:9f:1d:27:7a:97:ad:a4:93:5a:b6:
         2c:ff:31:bc:42:e3:fd:6b:f3:16:d5:1e:e3:89:88:8c:70:18:
         ae:19:0b:56:ed:a2:ad:ac:00:94:2c:97:4a:88:8d:24:3a:0a:
         2d:e8:0f:6d:6a:48:af:8b:c4:d1:b8:8e:9a:e4:db:3d:33:89:
         c5:4f:4b:25:7c:07:24:21:ba:b6:44:80:79:7d:da:56:44:05:
         d8:ec:9d:31:1c:11:b4:08:07:5f:63:0f:c8:15:de:99:58:81:
         bf:2a:23:86:06:8c:64:54:a6:99:6b:e0:9a:5e:03:76:e3:7d:
         bc:76:cc:98:e5:44:cd:62:69:70:f5:c9:5d:f2:83:c1:5b:7e:
         a3:cb:27:a5:bb:9c:6e:57:b9:80:97:43:7d:9f:3a:1c:26:75:
         d8:d4:27:50:f6:c9:3b:d4:e5:f1:ca:23:4e:db:5c:ac:83:e2:
         70:d7:9c:46:e5:9e:5a:f1:87:09:0f:57:98:46:15:f4:f3:8c:
         40:79:60:c8
-----BEGIN CERTIFICATE-----
MIIHLzCCBhegAwIBAgIURvn+/z6T6WiYhBKwWBbrHO/OqFwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJBNDE3
RjcyOERCRjAeFw0yMTEyMTMwNTA0MjZaFw0yMjEyMTMwNTA5MjZaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwREY3MDI5REM5RDY4MDI4MTdE
QjNCQTM2MTI4OEFCRTA5NkEyNkM0NDEyRDA1QUI4RDE5MkNFQzY4QzA1MDczRUM1
MUY3RjkxNEU3MzMyRkJGQkUwRTA2OTA3Mjc4RTI1NjQ2N0FDQUE2N0FFQjM5RDcx
QjYyNkI0RDFGMzJFNzJFRTREQjE4NUI5ODg1NEVDODRFMzhBM0VDOTg5NjQyRjdG
RUMyNzZFNzgwMkNGOEIyMTc4MDBFQ0ZFN0RERjJCQjBFQzlBOERGN0E4QTkxODNE
N0YxMUE1RDEwNjNGRThDNjFCNDg0RTU0RkFFNzEzMzBEQjU4QkM2NTZBNzJBMzNE
REI1RkE4MTFENUJGNUVBM0ZGQzRBNzhFQ0Q4NzE1MTJBM0NCOUExMUI1OTgzMUZC
QTRDNTc4OEY3MjZCOUY1QkFCODYzNzhCNDI1MkZGQTJCNTE3RTY1Qzc4RTJDMURC
NDc5M0FBQjIzODdDQjBGREM5NjlCMkIwQjlEMjE5MDcxRUIzODg4MEM0MkI4MjFC
Qzg0MTI2NTEzQjU1QUQzM0QzN0ZDMkMzQjQ4QTUyNDIxNTE0NDY3QzNCRDZEMzhF
NkQxQTU5QUMxNkJCNzQ1MzNBODk0NjlEOTU4QjBFRjVCNjg1M0ZDOTEzN0ZBMTlD
Q0I5NTMxRTdEMDk4RjEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA33Ap3J1oAoF9s7o2Eoir4JaibEQS0Fq40ZLOxowFBz7FH3+RTnMy
+/vg4GkHJ44lZGesqmeus51xtia00fMucu5NsYW5iFTshOOKPsmJZC9/7CdueALP
iyF4AOz+fd8rsOyajfeoqRg9fxGl0QY/6MYbSE5U+ucTMNtYvGVqcqM921+oEdW/
XqP/xKeOzYcVEqPLmhG1mDH7pMV4j3Jrn1urhjeLQlL/orUX5lx44sHbR5Oqsjh8
sP3JabKwudIZBx6ziIDEK4IbyEEmUTtVrTPTf8LDtIpSQhUURnw71tOObRpZrBa7
dFM6iUadlYsO9baFP8kTf6Gcy5Ux59CY8QIDAQABo4ICPTCCAjkwHQYDVR0OBBYE
FGhZ2pNxyAXdOkM2mY/dAXPz4CF9MB8GA1UdIwQYMBaAFKxVVEe6YsORB/Fr9XL4
KkF/co2/MA4GA1UdDwEB/wQEAwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzk5M2YzNTAtYjc1Ni00OTE2LThk
ODQtNDg0ZjAyNWRmZmNjLzAvQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJB
NDE3RjcyOERCRi5jcmwwdAYIKwYBBQUHAQEEaDBmMGQGCCsGAQUFBzAChlhyc3lu
YzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8yL0FDNTU1NDQ3
QkE2MkMzOTEwN0YxNkJGNTcyRjgyQTQxN0Y3MjhEQkYuY2VyMIGqBggrBgEFBQcB
CwSBnTCBmjCBlwYIKwYBBQUHMAuGgYpyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby8zOTkzZjM1MC1iNzU2LTQ5MTYtOGQ4NC00ODRmMDI1ZGZmY2MvMC8z
MjM0MzAzNDNhMzgzMDMwMzAzYTMxMzAzMjM4M2EzYTJmMzQzODJkMzQzODIwM2Qz
ZTIwMzEzNzM0MzUzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAiBggr
BgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQEgAAQKDANBgkqhkiG9w0BAQsFAAOC
AQEAa6bfSe93wAkYvf03BjBwX7mkkBljRqShXxwa8SFHP1FaJPxRMyeJsqzR+QlV
KrAw/T3hgHylGYGCraJh21efHSd6l62kk1q2LP8xvELj/WvzFtUe44mIjHAYrhkL
Vu2irawAlCyXSoiNJDoKLegPbWpIr4vE0biOmuTbPTOJxU9LJXwHJCG6tkSAeX3a
VkQF2OydMRwRtAgHX2MPyBXemViBvyojhgaMZFSmmWvgml4DduN9vHbMmOVEzWJp
cPXJXfKDwVt+o8snpbucble5gJdDfZ86HCZ12NQnUPbJO9Tl8cojTttcrIPicNec
RuWeWvGHCQ9XmEYV9POMQHlgyA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:05 2024 by rpki-client on console-fra.rpki-client.org