Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/323430343a636630303a3a2f33322d3438203d3e203338353131.roa
File:                     323430343a636630303a3a2f33322d3438203d3e203338353131.roa (raw, json)
Hash identifier:          stDC5vJtoX4Bs7rBm4Hj3Yj+Q0K+gHHm8JmR531YgoY=
Subject key identifier:   63:7B:E2:33:97:FC:AA:CE:0E:BF:8A:60:17:9B:CC:1F:3A:25:7D:8A
Certificate issuer:       /CN=9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F
Certificate serial:       6DEB9B48B8EAE7DEC4EFCA1A4FB0FBEA08D331AE
Authority key identifier: 91:69:B9:B6:52:6C:D1:49:84:DD:E3:A4:2E:24:DD:8F:E7:AB:C1:7F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/323430343a636630303a3a2f33322d3438203d3e203338353131.roa
Signing time:             Sat 25 Sep 2021 23:00:01 +0000
ROA not before:           Sat 25 Sep 2021 22:55:01 +0000
ROA not after:            Sun 25 Sep 2022 23:00:01 +0000
asID:                     38511
IP address blocks:        2404:cf00::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:eb:9b:48:b8:ea:e7:de:c4:ef:ca:1a:4f:b0:fb:ea:08:d3:31:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F
        Validity
            Not Before: Sep 25 22:55:01 2021 GMT
            Not After : Sep 25 23:00:01 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:f0:18:af:a4:e7:56:bc:70:4d:8d:f2:75:76:
                    d3:e1:e7:35:24:8d:19:06:73:a0:fb:18:3e:28:19:
                    94:b9:1a:45:47:a2:e6:80:d8:32:42:ce:00:e3:5f:
                    ad:6e:d1:4a:0f:2d:a3:46:ce:e5:84:30:e1:7a:30:
                    7c:a2:a0:1d:bc:62:c3:9d:7e:b6:d7:8d:ef:37:be:
                    2a:c1:06:a9:0f:34:6e:6a:1e:4b:45:e5:7b:06:80:
                    a8:a8:77:03:67:3b:ab:69:47:3a:68:2b:4e:d9:b9:
                    8a:a6:f1:9d:89:9d:ce:4b:78:16:f1:3b:ca:40:13:
                    9c:5a:c0:4d:e8:f7:a7:8f:40:8d:df:f4:aa:f3:68:
                    50:2f:d7:ae:b4:aa:3c:01:f1:4c:d2:90:f2:3f:99:
                    76:f9:44:19:ec:6e:b5:c3:4c:63:b6:29:60:27:35:
                    12:3c:40:15:85:fe:66:78:61:06:89:10:88:c3:c0:
                    39:5b:59:3f:04:40:08:51:66:73:56:90:5c:2a:71:
                    48:c4:1e:a5:d8:35:17:33:ea:28:0d:a3:d5:24:f4:
                    15:13:dd:aa:ff:75:22:f8:6c:b4:96:e1:a2:1e:bb:
                    0c:fb:f7:42:1e:cf:62:1f:ac:35:a5:7b:56:a1:2c:
                    dc:e2:eb:c3:81:bc:c2:67:ef:8b:46:c5:01:56:05:
                    9a:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:7B:E2:33:97:FC:AA:CE:0E:BF:8A:60:17:9B:CC:1F:3A:25:7D:8A
            X509v3 Authority Key Identifier:
                keyid:91:69:B9:B6:52:6C:D1:49:84:DD:E3:A4:2E:24:DD:8F:E7:AB:C1:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/323430343a636630303a3a2f33322d3438203d3e203338353131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:cf00::/32

    Signature Algorithm: sha256WithRSAEncryption
         55:91:29:af:ad:80:4e:74:05:80:44:ee:57:05:87:be:f2:4b:
         be:73:c8:c4:8a:7f:39:fc:57:35:e1:8a:71:de:48:b7:56:59:
         c5:dc:c6:d8:64:0d:bb:cd:a4:7b:37:49:6f:08:98:84:a6:7c:
         d5:eb:db:a1:92:e2:a1:16:ab:47:b2:fa:51:e8:13:f5:72:7d:
         8d:6f:f3:3a:75:19:44:29:56:d6:6c:4a:f2:e1:f6:95:77:68:
         df:69:5a:0a:69:b1:ef:f9:11:28:49:14:45:03:78:c4:df:45:
         a5:a5:55:f6:72:bb:31:12:54:05:48:89:5b:45:d5:42:e5:a1:
         ce:aa:e9:13:48:b5:e7:82:42:25:7f:b7:ae:be:e0:58:7d:dd:
         7b:46:7d:2d:fc:95:7d:c0:79:56:d8:58:57:f2:70:63:05:cd:
         07:63:95:0d:b1:f9:97:55:b9:dc:c8:0e:b0:53:75:b9:b4:b3:
         af:3b:82:4d:f8:a5:a9:4f:38:8e:b2:1b:81:36:8e:8f:73:0f:
         be:34:9a:bd:8e:50:ec:80:42:0d:5a:a6:83:9c:9c:c6:35:6e:
         36:49:94:fc:91:30:13:92:44:16:f0:81:1d:39:fa:f1:db:17:
         08:ad:9a:ad:ac:40:ba:a3:37:44:6a:ef:86:dd:a1:02:6d:ac:
         af:dd:fb:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:41 2024 by rpki-client on console-ams.rpki-client.org