Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a623a3a2f34382d3438203d3e203137343531.roa
File:                     323430343a383030303a623a3a2f34382d3438203d3e203137343531.roa (raw, json)
Hash identifier:          ZWf++mflB61jmtvBF2I1bv/Oak7R/ER0DiptIDZpo+I=
Subject key identifier:   3E:2A:2D:7B:19:16:22:04:41:DD:41:84:8B:97:68:DA:7F:C0:DF:FF
Certificate issuer:       /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial:       2B4211A0D1B1DEA795751A6B893FD2C10D71FCD8
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a623a3a2f34382d3438203d3e203137343531.roa
Signing time:             Thu 30 Sep 2021 00:01:06 +0000
ROA not before:           Wed 29 Sep 2021 23:56:06 +0000
ROA not after:            Fri 30 Sep 2022 00:01:06 +0000
asID:                     17451
IP address blocks:        2404:8000:b::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:42:11:a0:d1:b1:de:a7:95:75:1a:6b:89:3f:d2:c1:0d:71:fc:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
        Validity
            Not Before: Sep 29 23:56:06 2021 GMT
            Not After : Sep 30 00:01:06 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:33:0e:7c:a4:2f:f3:d2:5a:bd:e4:62:ae:97:
                    3d:bd:89:1a:b3:05:17:62:9f:a5:23:01:39:70:88:
                    a1:38:fd:f1:40:2c:6e:6c:d2:12:10:62:9c:4b:5d:
                    fa:a9:ac:b4:77:14:b4:c0:07:34:ae:ed:db:15:7c:
                    e3:0d:24:13:82:b5:a4:40:8e:16:84:34:fd:1b:dd:
                    06:2d:a6:74:a5:2e:65:9d:e2:78:35:fe:5e:54:40:
                    51:57:4e:14:b7:db:59:22:32:83:81:bc:ee:11:48:
                    1e:3f:14:23:5c:6a:33:d8:b3:54:bb:a2:df:bf:8e:
                    17:ce:6d:dd:25:c8:5a:25:a8:eb:e0:22:a3:40:73:
                    fd:80:ef:ee:ad:13:4d:f9:23:d6:66:6c:d4:f6:dc:
                    7c:fa:ed:9e:ee:a7:ba:8c:28:74:cb:18:05:46:c3:
                    d8:c4:59:d8:84:a8:5b:e9:07:2a:d2:a2:3a:6a:ab:
                    16:f5:3c:15:79:b8:6d:4f:ad:d2:b1:0e:8f:11:7e:
                    07:e0:65:e1:d3:6b:3f:97:79:70:de:e3:37:3a:21:
                    ed:d9:1d:97:4f:c8:a4:46:cf:1b:56:14:68:f5:f1:
                    60:83:57:3c:1e:60:f1:de:a5:b2:50:3c:83:e7:c8:
                    ed:6b:61:99:d3:22:c2:2f:60:ea:e9:73:4b:f6:03:
                    34:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:2A:2D:7B:19:16:22:04:41:DD:41:84:8B:97:68:DA:7F:C0:DF:FF
            X509v3 Authority Key Identifier:
                keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/323430343a383030303a623a3a2f34382d3438203d3e203137343531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:8000:b::/48

    Signature Algorithm: sha256WithRSAEncryption
         58:f1:85:de:a1:5f:b3:e6:b1:3b:62:2e:96:71:b4:7f:c2:ba:
         3a:c6:a6:64:58:96:2d:8c:6b:09:e0:42:d4:40:81:b5:15:ae:
         b7:f4:8f:ff:25:12:f9:e7:6f:31:e1:06:0b:e3:72:fe:03:ec:
         d2:6f:35:1b:58:dd:c7:aa:47:4d:57:cd:55:3f:99:aa:18:6c:
         52:fd:c7:00:df:1b:b1:b0:5a:fa:3c:f8:b5:7f:19:e1:fd:f9:
         11:73:70:20:62:47:67:34:6e:e1:a8:7e:52:2c:cc:91:a1:16:
         14:ea:30:78:c1:ce:8e:fe:9a:cd:94:f2:10:98:bb:8e:62:cc:
         d6:cd:39:21:1a:95:12:84:b9:62:01:bd:77:97:99:be:d3:19:
         61:70:bc:b8:5f:61:2c:8e:51:43:d8:fd:c0:4e:0e:f4:b0:ce:
         fc:ac:86:81:f6:63:6a:6a:06:70:42:bf:c8:35:01:3d:24:a9:
         81:fe:b9:0b:69:45:81:75:a7:b6:38:1b:b5:7a:fc:30:8e:09:
         cc:2a:16:66:05:f3:ef:26:2a:21:21:b7:b4:ae:fe:c1:44:18:
         68:5f:71:ec:5f:f6:8e:d4:eb:4e:b8:e0:f3:ce:13:79:fd:a6:
         52:d7:7d:f9:dc:6a:e0:54:59:6b:e0:f7:00:d7:25:8a:8a:d0:
         a8:57:12:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:06 2024 by rpki-client on console-fra.rpki-client.org