Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a313062613a3a2f34382d3438203d3e203137343531.roa
File:                     323430343a383030303a313062613a3a2f34382d3438203d3e203137343531.roa (raw, json)
Hash identifier:          G3zyNP1BJGd5Cw+MloHjXB89/Egw//Yh+ZlGUficP6o=
Subject key identifier:   39:04:0A:81:DB:57:BB:EA:CC:AA:C4:EC:03:5F:48:D1:19:AF:86:4E
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       173BA7887AC841101D6D34D8A8D4CA81915BF0B8
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a313062613a3a2f34382d3438203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:50 +0000
ROA not before:           Wed 29 Sep 2021 23:55:50 +0000
ROA not after:            Fri 30 Sep 2022 00:00:50 +0000
asID:                     17451
IP address blocks:        2404:8000:10ba::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:3b:a7:88:7a:c8:41:10:1d:6d:34:d8:a8:d4:ca:81:91:5b:f0:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:50 2021 GMT
            Not After : Sep 30 00:00:50 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:bb:0f:66:d4:1e:26:63:01:97:47:86:d1:02:
                    90:0a:16:dc:28:48:29:12:ed:da:d4:e1:62:89:93:
                    f0:d7:fc:7a:ad:72:61:e4:87:6a:54:f2:60:e0:e8:
                    7f:b5:12:56:33:3a:0b:ed:60:4f:41:31:af:9b:fe:
                    ec:e7:78:46:31:16:d0:ac:78:e3:52:47:62:92:c9:
                    c5:91:3a:e1:63:8a:22:ad:07:b0:16:10:ac:77:80:
                    35:5e:57:40:86:b3:0b:c3:6f:95:6c:72:b1:f0:0d:
                    15:73:58:ce:5d:35:24:00:cb:b1:73:9b:1b:be:51:
                    8a:8a:2a:53:b7:f9:7e:a2:de:70:51:15:39:12:c5:
                    84:8e:f9:f1:26:ff:fa:83:d6:2b:2f:bf:0a:e5:bb:
                    1b:15:bd:60:f7:76:b4:16:28:3c:13:6e:48:f3:ef:
                    99:a5:9a:27:87:ac:e3:20:fe:19:87:16:da:f3:37:
                    5b:1e:98:be:9d:45:93:c1:00:71:0d:d9:2c:b2:b2:
                    2f:17:08:b9:77:65:d1:b6:53:49:74:b9:41:7f:1c:
                    a7:dd:26:ac:82:ff:70:82:1d:8f:e8:e2:58:3a:e8:
                    c0:e1:94:7e:cf:8f:f2:4e:6d:f5:d5:6f:2b:eb:22:
                    42:51:6a:1a:9b:1c:f5:a3:15:fb:c7:af:05:18:44:
                    a6:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:04:0A:81:DB:57:BB:EA:CC:AA:C4:EC:03:5F:48:D1:19:AF:86:4E
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a313062613a3a2f34382d3438203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:8000:10ba::/48

    Signature Algorithm: sha256WithRSAEncryption
         04:11:ae:c8:1c:d0:7e:5d:81:5a:b2:e8:08:08:ef:94:35:dc:
         66:6e:54:55:15:8c:9c:01:99:85:8d:47:3f:a3:f5:de:43:04:
         d0:9d:a4:68:91:66:87:49:12:e5:f8:d1:d5:93:50:92:ab:73:
         17:bb:9b:e9:0a:6f:30:8f:d0:c5:d4:75:75:0d:31:c7:a0:94:
         17:28:f8:36:88:5c:3f:10:13:4c:42:d0:c0:94:51:88:d9:27:
         80:2f:b1:0e:2f:1e:b9:22:f4:12:f9:67:4d:26:5b:a7:65:0f:
         7a:a4:c1:d3:af:ef:6a:d9:af:33:58:6a:19:2e:4b:4e:c6:ef:
         43:0a:74:04:35:5f:0f:fd:53:2d:ac:32:09:f3:e8:9c:65:9b:
         e7:de:9d:f2:09:3d:1d:39:31:83:99:f3:83:b0:8c:38:88:27:
         e8:49:b1:c5:a9:55:b5:46:0c:64:4b:03:bb:16:b0:fa:22:2b:
         99:43:e5:e6:d9:9e:3b:73:f9:c3:f1:b7:f5:00:16:64:d0:bf:
         03:00:16:6b:af:b3:9f:32:b5:8b:e8:35:a7:5e:d7:e7:00:41:
         4d:82:a5:67:93:86:ea:98:b9:0e:6b:38:98:aa:a6:2c:d8:89:
         69:da:44:db:97:0d:0e:41:44:a8:95:41:b1:d2:af:6d:7e:30:
         92:62:e1:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:38 2024 by rpki-client on console-ams.rpki-client.org