Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a62353a3a2f34382d3438203d3e203137343531.roa
File:                     323430343a383030303a62353a3a2f34382d3438203d3e203137343531.roa (raw, json)
Hash identifier:          U4UNblv1sI3J38qZ4sHlC+8MFS7BHwvWTljJj94wiGQ=
Subject key identifier:   56:69:2F:86:A2:FB:A8:45:71:24:BA:88:D4:04:30:B2:48:CC:A2:D7
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       3981A7E3397E3E1427095B0406913B497A16B1B3
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a62353a3a2f34382d3438203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:00:42 +0000
ROA not before:           Wed 29 Sep 2021 23:55:42 +0000
ROA not after:            Fri 30 Sep 2022 00:00:42 +0000
asID:                     17451
IP address blocks:        2404:8000:b5::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:81:a7:e3:39:7e:3e:14:27:09:5b:04:06:91:3b:49:7a:16:b1:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:55:42 2021 GMT
            Not After : Sep 30 00:00:42 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:9d:2c:7a:e5:eb:3c:8e:09:6d:e7:96:34:86:
                    d1:5d:26:ee:78:fd:35:e9:ce:ea:33:fb:8f:82:58:
                    13:e6:87:f2:66:3b:0c:e5:85:c1:fe:4f:a9:e3:ea:
                    40:f4:02:72:fe:e6:50:d4:13:2f:ed:37:71:26:9d:
                    3f:92:46:a6:24:2a:f0:24:e1:44:62:f7:01:1d:5a:
                    6a:05:32:2f:66:ab:20:5e:58:57:1a:f4:88:ab:a3:
                    3f:aa:95:5a:38:27:88:84:b3:f9:06:be:69:0a:42:
                    b5:d1:c5:bf:bc:1a:4f:a3:b5:9a:20:cb:44:d3:80:
                    bb:cd:0d:7b:3c:92:91:88:13:ec:71:80:c0:a6:1c:
                    e4:73:a6:dc:25:c5:e7:64:2c:7b:1d:41:a4:3b:af:
                    26:f9:cc:81:94:16:df:ab:63:1b:b1:14:39:99:c0:
                    9c:12:fa:95:d1:dd:e2:b8:62:98:f3:1a:63:3c:e4:
                    16:84:c5:33:55:59:99:27:c5:89:85:80:3a:35:22:
                    39:c2:cc:a2:66:7d:b5:5f:c6:cc:ab:c7:66:0d:bd:
                    7b:e3:61:fe:ab:20:56:56:fa:a4:0a:77:df:d1:67:
                    1e:56:da:6b:aa:92:6d:90:17:b4:c6:89:d2:1e:81:
                    8e:48:bd:81:70:98:f7:57:ee:59:c0:1c:7c:45:26:
                    c4:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:69:2F:86:A2:FB:A8:45:71:24:BA:88:D4:04:30:B2:48:CC:A2:D7
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a62353a3a2f34382d3438203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:8000:b5::/48

    Signature Algorithm: sha256WithRSAEncryption
         91:0e:60:5a:e6:4b:40:14:8a:53:5f:16:6d:5e:b1:c8:e1:64:
         a4:53:52:53:93:be:25:0e:30:d8:de:0f:42:36:53:c9:41:12:
         63:51:bf:d6:8d:94:92:55:68:11:ab:c3:ae:3a:d2:53:f1:ec:
         15:52:9a:71:2f:2a:05:d3:4f:1f:6d:2c:15:ae:48:87:e2:6c:
         5a:33:73:50:48:6a:35:40:0c:f4:be:1c:1b:ba:ba:90:e2:29:
         41:f7:86:ac:34:bd:1b:5b:eb:9d:9a:57:ce:6c:4d:88:16:84:
         73:a4:ad:eb:b1:51:f1:d5:2c:55:7b:6b:05:95:35:df:07:44:
         a1:a5:ed:1a:c2:0b:e7:78:72:03:72:1e:c2:15:65:0f:97:1a:
         32:c6:8c:b6:48:56:4c:44:86:e3:7b:42:e6:8e:6e:48:ef:63:
         52:86:e8:b8:3b:7d:ae:c4:3a:54:98:49:0f:52:09:f7:91:b9:
         78:dc:02:88:aa:58:3a:a7:8f:1f:8d:48:c2:c1:f2:84:90:5c:
         6a:3a:94:ef:52:2d:94:c1:f4:89:a2:be:36:a1:b1:46:e2:9d:
         47:2c:9a:f6:bb:49:81:40:54:cc:f8:88:d5:fa:5b:35:d2:99:
         93:45:8d:56:e3:5d:bc:a9:e0:11:88:bf:6d:c4:41:98:96:1a:
         bb:bf:44:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:06 2024 by rpki-client on console-fra.rpki-client.org