Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a383a3a2f34382d3438203d3e203137343531.roa
File:                     323430343a383030303a383a3a2f34382d3438203d3e203137343531.roa (raw, json)
Hash identifier:          T8VVpX5O/wcfTsbdv+9OdCg1tJ6LC0r6NpXrd8blTUQ=
Subject key identifier:   10:66:26:3E:E6:A7:D8:1E:33:FB:34:E1:4A:38:D7:E4:BC:43:C4:88
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       0C94BC66A1472156B45377F4121FC37235B89E1C
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a383a3a2f34382d3438203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:47 +0000
ROA not before:           Wed 29 Sep 2021 23:55:47 +0000
ROA not after:            Fri 30 Sep 2022 00:00:47 +0000
asID:                     17451
IP address blocks:        2404:8000:8::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:94:bc:66:a1:47:21:56:b4:53:77:f4:12:1f:c3:72:35:b8:9e:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:47 2021 GMT
            Not After : Sep 30 00:00:47 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:24:f3:a6:e6:81:74:29:43:36:50:09:27:7c:
                    6e:e3:fc:86:07:f2:c1:23:b4:bc:45:b4:22:87:e6:
                    92:2b:0e:6f:e3:c3:58:63:e6:02:a0:25:59:12:6f:
                    fc:8d:40:37:84:ee:28:6b:c4:2f:5f:c8:5f:8c:0c:
                    45:2a:59:d3:86:14:c3:72:2a:86:6c:23:3c:36:95:
                    ab:61:d0:24:32:11:8b:04:06:62:f8:f7:6d:5c:df:
                    a2:9f:87:3b:83:37:84:cf:5f:2d:6f:aa:d6:a9:ba:
                    9b:58:cb:aa:77:19:4c:75:fb:dc:37:d8:05:bc:ef:
                    38:f8:a6:4f:10:0f:de:5f:4f:1f:18:b3:af:69:e6:
                    da:c0:e4:45:82:66:25:73:11:f5:e0:d3:f7:4a:71:
                    e6:ae:b0:7d:97:98:17:9b:4e:55:70:63:37:82:65:
                    09:cd:85:bb:42:27:ab:ef:5d:83:07:78:7c:17:53:
                    a3:09:8f:b9:a2:0c:3c:ca:89:43:dc:0d:20:4b:ce:
                    38:cf:3c:af:9d:44:c4:7b:37:96:41:8c:9d:e8:25:
                    4f:76:7a:a9:20:7d:26:8a:14:71:c7:cd:5b:ee:d5:
                    27:9f:a7:0c:78:f2:a3:dc:2c:02:be:ab:d5:93:05:
                    49:f2:a9:e2:05:81:3a:da:0e:5a:a7:a2:64:f3:7f:
                    ac:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:66:26:3E:E6:A7:D8:1E:33:FB:34:E1:4A:38:D7:E4:BC:43:C4:88
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a383a3a2f34382d3438203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:8000:8::/48

    Signature Algorithm: sha256WithRSAEncryption
         44:45:36:0f:9d:2a:e1:0d:56:c2:da:ec:3c:19:39:16:e3:0a:
         b2:65:69:bc:ba:66:28:77:4a:93:cc:c1:6c:ec:1c:09:51:4c:
         24:88:14:6b:06:0a:aa:c5:23:1e:22:86:55:b6:46:26:e2:0f:
         77:47:0f:d1:ba:7b:ca:c8:a7:6d:e2:26:48:e8:40:aa:72:de:
         1a:e1:8d:4d:aa:53:d9:8b:88:95:41:ed:55:61:ab:78:79:f2:
         d6:64:5e:67:20:2a:c8:ab:09:ed:c0:c7:14:8d:04:e4:e8:6b:
         c4:32:27:ea:43:5a:3f:79:84:e5:58:f7:20:97:8d:07:28:1a:
         83:40:ae:f7:fc:63:84:c7:64:9c:2f:52:0c:35:ee:c7:3a:2f:
         b5:a9:d5:03:9f:f1:35:f3:d9:db:55:04:0d:8b:c6:8b:e0:19:
         d1:93:53:53:7d:11:3b:2d:6e:69:c4:5b:87:bb:9e:5c:19:3e:
         4f:67:9c:27:a4:a0:c5:46:f2:e1:4b:00:47:08:f6:4e:67:f6:
         49:0b:4a:9e:36:30:a2:fd:65:d9:2f:75:83:48:fc:71:07:43:
         0d:fc:c3:c3:e7:48:ff:0b:7b:bd:72:cf:5a:0e:6e:d4:d5:25:
         0e:08:3d:ed:c6:a1:a8:7e:bf:42:7f:f5:5f:d1:2d:54:c2:42:
         8c:ed:d7:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:06 2024 by rpki-client on console-fra.rpki-client.org