Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a313032633a3a2f34382d3438203d3e203137343531.roa
File:                     323430343a383030303a313032633a3a2f34382d3438203d3e203137343531.roa (raw, json)
Hash identifier:          YEZduCipwyR04VmfAb5FWLxmjsVI0GBotry4HQVolZY=
Subject key identifier:   5B:90:57:EC:D5:FB:19:DB:B0:D6:CE:69:0D:21:3E:FA:59:40:41:30
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       024AB369CA825FD5A204BA32F19E5C281F4D7C93
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a313032633a3a2f34382d3438203d3e203137343531.roa
Signing time:             Wed 29 Dec 2021 08:15:43 +0000
ROA not before:           Wed 29 Dec 2021 08:10:43 +0000
ROA not after:            Thu 29 Dec 2022 08:15:43 +0000
asID:                     17451
IP address blocks:        2404:8000:102c::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:4a:b3:69:ca:82:5f:d5:a2:04:ba:32:f1:9e:5c:28:1f:4d:7c:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Dec 29 08:10:43 2021 GMT
            Not After : Dec 29 08:15:43 2022 GMT
        Subject: CN=3082010A0282010100FA0346FC5A176F94EB9896FCA43382DE02D20F6D2A876934E61D2944B654AFB2562E535282C2FA400F127539EB2C2E14D1B3185C7CB60D3F380BE434A31669CF2CECBF1DC15FF9C292210F47FAEB89B6273BEAC041F806615799A1368E834ABBF9BF3FFA0FADF46A7EFAE1F2BC3DF3F7266339B8A0D97535646A0A7B2FDB5ED5791388711E2EB4A71E31A900C4220B612E84F54673C76A34654B527744F461B1E080729471D0B9F5C606952ACD958D7817D623620C4C8FECF537D6D93480C0C25347C15ECCDCCC9400FBF31F901B40D514F03933C888C811B84DF04E2DEEA652E9C67FD9E3967E138AE763FCBF916156EA1702C5AC736A1494AC2811358784DF0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:03:46:fc:5a:17:6f:94:eb:98:96:fc:a4:33:
                    82:de:02:d2:0f:6d:2a:87:69:34:e6:1d:29:44:b6:
                    54:af:b2:56:2e:53:52:82:c2:fa:40:0f:12:75:39:
                    eb:2c:2e:14:d1:b3:18:5c:7c:b6:0d:3f:38:0b:e4:
                    34:a3:16:69:cf:2c:ec:bf:1d:c1:5f:f9:c2:92:21:
                    0f:47:fa:eb:89:b6:27:3b:ea:c0:41:f8:06:61:57:
                    99:a1:36:8e:83:4a:bb:f9:bf:3f:fa:0f:ad:f4:6a:
                    7e:fa:e1:f2:bc:3d:f3:f7:26:63:39:b8:a0:d9:75:
                    35:64:6a:0a:7b:2f:db:5e:d5:79:13:88:71:1e:2e:
                    b4:a7:1e:31:a9:00:c4:22:0b:61:2e:84:f5:46:73:
                    c7:6a:34:65:4b:52:77:44:f4:61:b1:e0:80:72:94:
                    71:d0:b9:f5:c6:06:95:2a:cd:95:8d:78:17:d6:23:
                    62:0c:4c:8f:ec:f5:37:d6:d9:34:80:c0:c2:53:47:
                    c1:5e:cc:dc:cc:94:00:fb:f3:1f:90:1b:40:d5:14:
                    f0:39:33:c8:88:c8:11:b8:4d:f0:4e:2d:ee:a6:52:
                    e9:c6:7f:d9:e3:96:7e:13:8a:e7:63:fc:bf:91:61:
                    56:ea:17:02:c5:ac:73:6a:14:94:ac:28:11:35:87:
                    84:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:90:57:EC:D5:FB:19:DB:B0:D6:CE:69:0D:21:3E:FA:59:40:41:30
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a313032633a3a2f34382d3438203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:8000:102c::/48

    Signature Algorithm: sha256WithRSAEncryption
         95:ac:54:76:b3:8d:1b:bc:cd:2e:6b:61:02:07:ff:b0:f5:b5:
         f9:81:c6:f9:58:13:cb:3f:12:21:05:d2:b9:a4:67:51:17:3c:
         7e:3b:1e:e6:bb:5a:04:9a:bf:de:85:5e:88:03:d2:5f:5b:d5:
         43:c4:99:86:81:61:f6:bf:38:93:65:8e:9e:24:e3:df:d5:62:
         49:7d:a1:62:0b:63:b8:e7:31:24:76:12:28:7b:e9:7e:22:26:
         c5:cb:5b:ea:1d:fc:1d:01:2a:d2:b2:4f:24:fe:6e:2d:2e:e6:
         2e:a5:7e:fc:29:89:94:f6:98:a6:d2:28:30:bb:1f:ec:6b:d5:
         2d:f4:5e:09:de:14:7b:c8:b6:8e:3f:22:f5:77:fb:e5:f8:54:
         1f:48:6e:cd:58:e0:ca:21:74:e0:e9:a7:af:ac:ef:3b:a5:43:
         1b:77:25:2b:e2:9e:5e:92:40:19:4a:06:2a:56:a3:e3:55:d2:
         27:6c:f9:29:95:82:1c:3d:37:5c:77:4f:ca:c4:58:31:80:6c:
         4f:f7:bf:67:2e:64:47:f5:3b:80:f2:8f:9f:c2:cd:2c:61:6d:
         a5:88:90:0a:95:5f:67:fd:2a:07:95:dd:6f:2b:2c:b5:71:db:
         7c:5b:c6:f1:3b:e2:8b:93:db:4b:48:d9:49:7b:17:d0:e6:dc:
         43:45:dd:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:05 2024 by rpki-client on console-fra.rpki-client.org