Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a313032643a3a2f34382d3438203d3e203137343531.roa
File:                     323430343a383030303a313032643a3a2f34382d3438203d3e203137343531.roa (raw, json)
Hash identifier:          s85Eu5XWIzNP1SdQ06KvX17jm2kgKSB0xkJMUKMVuVY=
Subject key identifier:   1C:8D:7A:1B:7E:63:FE:5B:16:CE:0C:BB:ED:5B:59:1D:6D:74:6B:FA
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       3F9588BEBB64DE463196B296A5DC2CB25BF13BB6
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a313032643a3a2f34382d3438203d3e203137343531.roa
Signing time:             Wed 29 Dec 2021 08:16:38 +0000
ROA not before:           Wed 29 Dec 2021 08:11:38 +0000
ROA not after:            Thu 29 Dec 2022 08:16:38 +0000
asID:                     17451
IP address blocks:        2404:8000:102d::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:95:88:be:bb:64:de:46:31:96:b2:96:a5:dc:2c:b2:5b:f1:3b:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Dec 29 08:11:38 2021 GMT
            Not After : Dec 29 08:16:38 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e9:df:6c:1d:d3:ea:36:80:e6:4c:a6:27:c5:
                    dc:f1:60:ab:f9:19:6f:45:ba:b4:af:80:b9:73:49:
                    1c:77:7c:fe:95:e2:87:ce:86:1a:12:8f:0f:b9:d7:
                    d3:7d:e6:4a:df:76:ef:2b:fd:51:9e:25:b5:00:49:
                    31:52:55:c6:d6:2e:cb:b0:a3:23:4c:18:12:59:09:
                    e7:9a:a0:21:59:14:38:50:83:ec:bc:69:59:6e:38:
                    52:16:0e:c7:82:d5:2d:e3:28:16:2e:69:1c:2b:5f:
                    f8:f2:79:e3:c7:66:11:89:d8:ff:13:29:ec:b5:6c:
                    f9:6c:ae:24:0f:62:a8:d7:8f:78:ce:c7:d4:97:3f:
                    d1:e5:2e:d1:0f:bb:a0:fe:12:f7:36:a5:07:f0:14:
                    9f:0b:8d:03:1f:29:48:01:c5:7c:a3:ea:68:8b:90:
                    ef:37:27:77:b2:11:55:e2:7b:d7:ba:c0:cd:da:7b:
                    a8:61:39:71:7a:a7:49:cd:d9:bb:09:92:02:0e:ae:
                    28:59:7b:be:9c:59:83:19:b0:9a:e2:1f:4a:09:5f:
                    4e:0a:31:77:d2:f0:53:90:06:c9:d7:7f:51:1a:40:
                    2e:09:fe:29:84:9d:79:f7:3e:75:6a:d1:9f:50:ca:
                    52:36:19:fa:e4:65:83:d7:4a:e8:7a:bd:b2:2e:15:
                    03:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:8D:7A:1B:7E:63:FE:5B:16:CE:0C:BB:ED:5B:59:1D:6D:74:6B:FA
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a313032643a3a2f34382d3438203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:8000:102d::/48

    Signature Algorithm: sha256WithRSAEncryption
         23:69:e4:11:d3:ab:31:8f:ff:b0:b4:b8:b2:d6:6d:3d:47:a6:
         30:11:f4:c3:67:f1:3f:f5:75:61:97:a0:9b:85:3b:40:64:23:
         a7:62:42:e7:a5:df:59:cd:a7:e4:8e:02:f2:47:e8:11:f8:10:
         27:2a:4e:30:5c:1d:dc:51:84:9c:4f:05:8c:ec:c7:ae:90:f9:
         35:0f:85:bd:b6:a5:09:7d:91:da:0f:87:6d:0f:d3:3a:5a:2c:
         db:d0:6e:44:17:79:27:42:d2:91:2b:e6:96:44:cc:ed:ea:1d:
         4e:22:b6:48:6f:0e:17:51:21:ac:83:c5:fa:90:25:6c:1f:05:
         c0:60:66:75:e2:36:4d:55:c1:49:ba:b0:4c:ed:9c:10:8e:5e:
         95:d4:62:d2:37:e4:1d:ab:c4:31:c4:63:81:a2:dd:27:7b:2c:
         9a:6d:67:88:22:be:2d:be:6e:ae:0e:9e:3b:7c:61:b2:5c:45:
         87:65:4c:8a:72:e6:34:d9:ca:96:99:f4:4d:dc:d7:89:ce:ac:
         91:25:0f:74:af:2b:b0:ca:59:d6:27:44:9d:50:9d:6c:39:c4:
         25:67:df:55:fc:4f:f9:85:5b:fe:0a:b1:02:60:2c:bb:0b:ac:
         07:c7:7e:27:72:b2:e0:6f:25:08:ff:f3:7e:6c:33:cf:e8:01:
         e4:f2:c0:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:05 2024 by rpki-client on console-fra.rpki-client.org