Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a39333a3a2f34382d3438203d3e203137343531.roa
File:                     323430343a383030303a39333a3a2f34382d3438203d3e203137343531.roa (raw, json)
Hash identifier:          hou3ap2cvDJqljP2Qiwk+Kjpc6Z/KUEHG5q1RB6yHCM=
Subject key identifier:   08:16:B3:2A:82:D8:06:91:2F:DA:86:9D:AD:23:28:94:CE:A2:8E:19
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       414854784E652D66A2E0A59BD14389FA95BB8B1B
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a39333a3a2f34382d3438203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:07 +0000
ROA not before:           Wed 29 Sep 2021 23:55:07 +0000
ROA not after:            Fri 30 Sep 2022 00:00:07 +0000
asID:                     17451
IP address blocks:        2404:8000:93::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:48:54:78:4e:65:2d:66:a2:e0:a5:9b:d1:43:89:fa:95:bb:8b:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:07 2021 GMT
            Not After : Sep 30 00:00:07 2022 GMT
        Subject: CN=3082010A0282010100AF8DFE742915C9A337EB4C1896DF3A6BF2FA002065307C0099918F0D20910FA5B166645784DDBC489CA38A4819AAF7F427B00AD2D11B57F49C6DBE528A03B4CE30D75434C05B8ED7C4742DB8196A418497C09C6B8F0F5837F27185795C47E7EAEF35E9E201FC481C6496713B83C0397F0C5F8168B6A0FD3E628B6A8C88A4CBD33011BB4C51C656C7D28DB9B8976BB520E590963F7F71243B37EA243A0C9684D18139FB291946CD10E95C2A69B7370567ADC9905B7B93081E3E0382A67EB025EB034C5D66EDE3FB6105CE31FB6D40DD7AC032F9E75D288E9E80623851CB3018A6B05A53DBF7161A250EDD463372A16E92F18FFBCA65F57DB0D721BF4C0FD256F30203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:8d:fe:74:29:15:c9:a3:37:eb:4c:18:96:df:
                    3a:6b:f2:fa:00:20:65:30:7c:00:99:91:8f:0d:20:
                    91:0f:a5:b1:66:64:57:84:dd:bc:48:9c:a3:8a:48:
                    19:aa:f7:f4:27:b0:0a:d2:d1:1b:57:f4:9c:6d:be:
                    52:8a:03:b4:ce:30:d7:54:34:c0:5b:8e:d7:c4:74:
                    2d:b8:19:6a:41:84:97:c0:9c:6b:8f:0f:58:37:f2:
                    71:85:79:5c:47:e7:ea:ef:35:e9:e2:01:fc:48:1c:
                    64:96:71:3b:83:c0:39:7f:0c:5f:81:68:b6:a0:fd:
                    3e:62:8b:6a:8c:88:a4:cb:d3:30:11:bb:4c:51:c6:
                    56:c7:d2:8d:b9:b8:97:6b:b5:20:e5:90:96:3f:7f:
                    71:24:3b:37:ea:24:3a:0c:96:84:d1:81:39:fb:29:
                    19:46:cd:10:e9:5c:2a:69:b7:37:05:67:ad:c9:90:
                    5b:7b:93:08:1e:3e:03:82:a6:7e:b0:25:eb:03:4c:
                    5d:66:ed:e3:fb:61:05:ce:31:fb:6d:40:dd:7a:c0:
                    32:f9:e7:5d:28:8e:9e:80:62:38:51:cb:30:18:a6:
                    b0:5a:53:db:f7:16:1a:25:0e:dd:46:33:72:a1:6e:
                    92:f1:8f:fb:ca:65:f5:7d:b0:d7:21:bf:4c:0f:d2:
                    56:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:16:B3:2A:82:D8:06:91:2F:DA:86:9D:AD:23:28:94:CE:A2:8E:19
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a39333a3a2f34382d3438203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:8000:93::/48

    Signature Algorithm: sha256WithRSAEncryption
         07:dc:ca:2a:1d:c2:93:c1:1d:78:dc:5c:e3:66:c6:bc:bf:1b:
         5b:06:fc:94:64:b1:06:21:47:16:d5:4e:a6:07:27:db:b8:14:
         63:11:27:8a:11:36:b4:3c:9d:d3:e1:7b:97:98:b4:af:40:a7:
         1f:a0:f0:8b:8d:83:71:54:87:6b:e5:b7:17:3d:80:91:ee:dc:
         2b:d0:5f:88:52:ae:fe:0a:cc:fe:ac:32:4a:8f:50:a7:b6:45:
         4b:64:19:fd:9f:1f:44:02:95:99:0a:34:90:b8:85:0b:b3:15:
         fc:bc:1a:87:36:20:fb:87:e0:a1:9a:cc:1f:7c:d0:4b:7b:5b:
         46:17:ff:68:3f:11:2f:05:7e:41:f5:99:32:5a:96:88:ba:c2:
         cd:86:2d:ed:34:a1:46:c0:a3:c4:76:72:19:61:88:b2:dd:c3:
         ae:5a:73:1e:14:ed:eb:35:40:5e:5e:df:66:90:65:d8:28:d4:
         cf:4b:d1:a2:ea:40:12:8a:57:0a:b4:8e:c0:e7:46:e3:93:99:
         c6:a1:c6:e8:23:6c:60:c8:d5:d9:c4:94:4f:60:dd:8d:4b:75:
         e0:0c:c2:83:4e:f4:8d:65:cb:bd:89:59:7c:19:91:ae:b8:7f:
         03:25:e5:ff:a3:eb:7b:aa:55:21:3c:70:ab:b9:bf:d3:b4:f8:
         cc:4c:7e:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:06 2024 by rpki-client on console-fra.rpki-client.org