Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a61663a3a2f34382d3438203d3e203137343531.roa
File:                     323430343a383030303a61663a3a2f34382d3438203d3e203137343531.roa (raw, json)
Hash identifier:          cU/BDxcPni2ftfITyBgj/NQXGRPpgCFDRcly2bchB64=
Subject key identifier:   69:7F:6D:42:BC:5A:0F:FD:42:AA:A9:C5:03:C1:EB:89:14:CA:45:00
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       71CE7BE38BB9AF4FF3E88D1379649B86E3233A5C
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a61663a3a2f34382d3438203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:32 +0000
ROA not before:           Wed 29 Sep 2021 23:55:32 +0000
ROA not after:            Fri 30 Sep 2022 00:00:32 +0000
asID:                     17451
IP address blocks:        2404:8000:af::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:ce:7b:e3:8b:b9:af:4f:f3:e8:8d:13:79:64:9b:86:e3:23:3a:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:32 2021 GMT
            Not After : Sep 30 00:00:32 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:83:fc:09:f0:a0:e6:2d:e0:93:3c:77:17:6e:
                    4f:8d:24:10:28:c9:a8:a5:c5:96:bc:2d:e5:57:0e:
                    c8:28:1c:97:f2:c8:04:b5:56:35:06:ca:e1:9d:93:
                    fc:fd:18:10:98:f9:70:d7:cb:b0:a9:e2:44:76:77:
                    bc:af:4b:1d:ed:80:22:9b:38:a9:0f:57:c7:08:67:
                    d8:e4:24:47:b9:15:68:01:5e:55:90:83:04:8c:ab:
                    42:49:dd:df:c2:bd:08:9f:bf:79:f3:b8:8b:fe:48:
                    5c:10:33:56:b3:fd:34:ed:c0:0e:18:86:95:50:3f:
                    99:91:16:af:6b:96:68:a1:25:e5:c3:6a:e6:9b:67:
                    42:c7:ba:2d:83:a6:9b:ad:61:5d:ce:fe:49:a5:f5:
                    02:69:8d:36:fa:d6:21:17:00:ee:b2:32:ea:f8:93:
                    a2:8c:e8:32:f3:e4:e4:ca:29:c3:45:97:0b:04:9e:
                    78:65:4b:e3:64:72:65:fa:23:3c:83:db:de:cd:a1:
                    b3:04:03:0d:75:c6:22:39:f6:3e:0e:cf:48:7d:8f:
                    20:48:17:70:7c:16:9f:e1:a1:d9:c0:da:2e:bd:67:
                    cb:f7:f7:f6:35:32:c2:f0:f4:a3:8e:bb:ba:c5:d5:
                    39:c1:df:6b:5e:86:99:1d:63:53:df:e2:fd:75:2d:
                    a1:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:7F:6D:42:BC:5A:0F:FD:42:AA:A9:C5:03:C1:EB:89:14:CA:45:00
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a61663a3a2f34382d3438203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:8000:af::/48

    Signature Algorithm: sha256WithRSAEncryption
         a9:1f:26:f9:e3:43:f8:df:a4:7e:01:bd:38:25:7c:f9:4c:d0:
         1b:11:e2:74:f8:07:b8:a7:f0:c6:8c:45:af:74:fc:1c:3b:a5:
         77:3e:bf:2a:76:21:3b:d3:9a:5c:93:d5:bb:42:7d:9e:b2:42:
         9c:37:29:82:57:ec:1f:28:6b:c6:ab:19:34:0c:58:ec:b1:80:
         f1:a2:76:5e:98:42:2f:bc:79:02:9c:cc:0c:52:0c:b6:72:7e:
         cf:e9:31:11:ec:1c:40:02:c6:25:30:a6:69:c6:44:ba:00:19:
         84:82:eb:ec:ed:92:43:fc:7e:36:96:40:3c:25:90:d7:32:51:
         28:8c:81:5d:ac:70:d9:f6:9f:1e:21:06:d5:de:8d:8c:d8:8d:
         6c:8b:e4:ed:ff:1c:45:7c:2d:01:c2:43:f0:8e:f5:a8:2f:20:
         5d:48:aa:01:1c:dc:49:d7:77:d4:62:6d:73:35:1e:9e:50:97:
         8f:7b:ad:6b:e1:37:c6:9e:22:8c:e4:99:27:28:dd:d8:60:b1:
         e1:a0:6d:5f:95:a5:b0:2b:08:9e:61:5d:28:ea:40:1e:93:33:
         00:7c:f5:5c:43:15:60:be:bf:69:8a:57:3c:25:fa:b4:f3:4b:
         f4:43:6a:06:00:59:55:d4:03:a8:6a:7c:c7:60:b8:65:d0:cb:
         25:65:d6:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:39 2024 by rpki-client on console-ams.rpki-client.org