Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a37313a3a2f34382d3438203d3e203137343531.roa
File:                     323430343a383030303a37313a3a2f34382d3438203d3e203137343531.roa (raw, json)
Hash identifier:          iqkR+UwiZvH7EGxj2Sw4ClDPk9jlr3uUM7Yfvhw4wBw=
Subject key identifier:   D4:30:FB:5E:B4:56:B9:82:B9:C2:22:E1:1B:EA:C2:F2:5F:FA:40:2A
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       3BA7238E21E7C24B33247DA3903EB4A703E0F524
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a37313a3a2f34382d3438203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:25 +0000
ROA not before:           Wed 29 Sep 2021 23:55:25 +0000
ROA not after:            Fri 30 Sep 2022 00:00:25 +0000
asID:                     17451
IP address blocks:        2404:8000:71::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:a7:23:8e:21:e7:c2:4b:33:24:7d:a3:90:3e:b4:a7:03:e0:f5:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:25 2021 GMT
            Not After : Sep 30 00:00:25 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:6d:9b:f1:5f:6c:2e:9e:97:cb:ce:c1:50:ad:
                    06:1e:bb:95:12:b1:ae:58:2d:6d:18:c3:03:c3:a1:
                    3d:35:cf:df:1c:b0:a4:43:9d:e9:a9:a8:1a:61:2e:
                    48:15:f9:20:f2:41:86:a9:f3:97:d1:45:5c:05:bd:
                    bc:a2:87:ee:9b:0d:c4:1b:13:66:7b:b9:f6:19:98:
                    e5:23:fb:56:fd:36:67:dc:c7:8f:10:35:02:1d:42:
                    0c:eb:50:16:d0:8a:16:15:2c:5e:cd:e7:16:7e:c6:
                    3f:39:c3:c0:16:c0:8e:39:b9:62:e0:1a:ea:42:fc:
                    3d:7c:70:48:63:a0:4b:ed:bc:69:b2:3f:62:4c:35:
                    3f:6d:2a:13:e3:ca:1b:b4:03:2e:31:d0:84:ae:62:
                    01:c6:d5:d7:b2:af:d3:b1:8e:41:a3:bb:32:ee:59:
                    1c:d7:7d:55:3e:60:3a:83:6a:15:4c:66:ab:ca:62:
                    61:e0:db:da:8f:54:38:63:5a:9e:37:78:e1:e2:3a:
                    16:67:42:a0:4a:d6:d6:8d:0a:04:67:50:61:0a:d7:
                    fb:28:e1:d8:ea:6a:5a:07:c6:cb:f3:82:a7:db:4d:
                    ff:8b:ea:6e:7e:12:5b:91:83:cd:4d:37:68:bf:b6:
                    69:38:fe:35:09:58:6e:f2:6d:c3:f1:c2:4a:55:d6:
                    a3:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:30:FB:5E:B4:56:B9:82:B9:C2:22:E1:1B:EA:C2:F2:5F:FA:40:2A
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a37313a3a2f34382d3438203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:8000:71::/48

    Signature Algorithm: sha256WithRSAEncryption
         a1:59:92:4f:f5:db:c8:f1:24:c6:f1:2c:d5:a0:92:e7:d9:1e:
         67:8d:96:88:27:ae:09:86:a5:03:d0:23:6f:e7:bc:4a:35:84:
         fe:9f:4d:01:21:c2:9d:58:b1:dd:16:19:b8:3f:9b:05:25:5a:
         6d:88:5d:70:b2:18:ea:2a:64:27:74:75:cf:c4:5f:d3:e0:53:
         23:ad:db:16:e1:a3:ca:c6:99:1b:fc:a8:dd:62:81:c3:62:ab:
         f0:e1:ff:01:46:5b:dc:aa:98:25:25:13:1b:32:2b:8c:44:7b:
         11:2c:82:55:5c:25:b7:6d:40:c4:4b:ae:db:ff:d8:5b:20:ae:
         86:59:d0:05:e2:1a:f8:b3:59:44:60:d7:95:d6:7e:cc:27:67:
         18:8c:2d:6e:88:cd:63:3e:5f:bb:01:e2:e0:b4:aa:06:e5:a8:
         a1:1d:3b:ee:f6:3a:f6:d4:9d:61:be:f8:32:6b:2d:b6:64:85:
         df:7b:dc:bd:94:ab:eb:af:54:b4:cd:ba:d7:e3:73:13:29:e5:
         2b:3b:4f:9f:1f:63:d7:51:fc:82:09:7a:14:cf:85:1c:a6:f3:
         8e:dc:61:a5:33:96:08:5f:38:e8:e0:0c:db:00:b0:8e:04:64:
         b2:f4:e7:db:22:27:21:c6:56:a6:98:15:1f:04:16:41:ab:bc:
         97:f3:40:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:38 2024 by rpki-client on console-ams.rpki-client.org