Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a31353a3a2f34382d3438203d3e203137343531.roa
File:                     323430343a383030303a31353a3a2f34382d3438203d3e203137343531.roa (raw, json)
Hash identifier:          oUfmGN8A/Lgq/WUnJ4ClijMVg94jNVDlde1iYtysQgw=
Subject key identifier:   6C:C3:45:E8:57:6C:FA:5D:0D:B7:63:28:C8:4D:11:E4:12:11:7E:2C
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       50CF2C28D54A9D4B66045807579AC9C6A5194E47
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a31353a3a2f34382d3438203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:08 +0000
ROA not before:           Wed 29 Sep 2021 23:55:08 +0000
ROA not after:            Fri 30 Sep 2022 00:00:08 +0000
asID:                     17451
IP address blocks:        2404:8000:15::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:cf:2c:28:d5:4a:9d:4b:66:04:58:07:57:9a:c9:c6:a5:19:4e:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:08 2021 GMT
            Not After : Sep 30 00:00:08 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:51:11:b0:5b:86:ae:56:ec:7b:bd:54:aa:d2:
                    51:90:9d:e5:d3:1b:d2:74:42:ff:21:8a:eb:44:70:
                    15:9f:53:d5:ad:be:2c:ed:22:94:8f:7f:8f:87:b1:
                    d1:55:81:0f:d6:eb:c8:58:16:83:ca:44:ed:19:7b:
                    9a:d3:67:f0:a7:5f:f4:aa:7f:0e:e1:bc:33:d8:e3:
                    22:80:b6:ab:96:3a:44:73:bf:0d:7b:51:91:5d:d4:
                    bc:b1:ee:63:e3:b6:03:95:13:8f:98:d7:16:d1:2f:
                    9c:70:cc:70:ce:66:35:e0:f1:37:eb:07:f0:3f:0a:
                    31:ac:d7:81:4f:97:10:b7:09:fa:d6:90:b7:07:36:
                    87:23:36:ec:ea:7e:66:b8:fc:93:52:f1:df:46:25:
                    61:69:be:13:3c:30:d0:ca:3d:75:41:56:a7:00:59:
                    aa:63:79:d6:3c:39:d2:a8:d4:6a:dd:9a:bf:7e:04:
                    d6:61:4b:1f:3c:fb:5c:61:48:88:00:51:5d:a1:6c:
                    ea:08:a7:20:40:23:64:c3:38:0b:4e:8b:8f:f9:c7:
                    71:55:84:92:2f:6f:47:86:fc:9b:47:16:d3:8f:83:
                    d8:d1:68:18:6d:af:d2:3e:dd:ba:92:22:ba:bf:94:
                    24:0a:cb:55:31:1d:f1:66:85:45:6f:35:29:8f:46:
                    5e:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:C3:45:E8:57:6C:FA:5D:0D:B7:63:28:C8:4D:11:E4:12:11:7E:2C
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a31353a3a2f34382d3438203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:8000:15::/48

    Signature Algorithm: sha256WithRSAEncryption
         2a:87:56:56:97:d2:59:b6:06:4d:28:86:af:bd:76:ab:3f:1b:
         2e:98:20:16:22:d8:53:01:ba:ec:38:33:96:38:00:3f:1c:05:
         fa:a6:67:9f:1d:94:47:89:98:5d:86:97:1c:3f:88:17:f4:6c:
         c6:70:74:16:7f:62:dd:95:8b:c3:a3:c8:dc:4e:f6:6b:44:f1:
         15:0c:5e:43:6e:8d:9f:70:86:21:ed:a9:55:a2:9e:b7:47:a2:
         fe:61:59:ea:56:3b:b2:d1:e8:d2:5c:0d:bc:50:d5:25:67:04:
         d7:23:7f:16:e2:9b:f0:ae:1c:e7:d5:29:ef:a2:3a:e4:6d:ad:
         34:43:71:60:6e:01:41:45:1c:a8:38:b6:e6:68:70:04:a6:80:
         d8:d8:84:13:3c:68:d9:65:74:8a:4e:07:ff:c1:a0:9e:6f:25:
         f2:9f:39:b0:2b:74:5a:b9:b2:43:86:96:f2:d3:63:63:95:a3:
         2f:b6:34:bc:b5:d4:ea:14:ad:b5:82:4d:70:6d:7f:8b:ac:9c:
         bc:59:b8:2a:1e:15:d6:39:33:21:80:5d:72:74:97:2e:75:75:
         21:34:97:30:ea:38:d2:a0:2a:ec:ee:c2:11:fd:61:b0:4b:f4:
         63:2e:7b:2d:74:2b:28:b0:ca:a2:b4:2c:47:73:38:ee:a8:b9:
         11:ee:31:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:38 2024 by rpki-client on console-ams.rpki-client.org