Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/323430343a636630303a663030303a3a2f34382d3438203d3e203338353131.roa
File:                     323430343a636630303a663030303a3a2f34382d3438203d3e203338353131.roa (raw, json)
Hash identifier:          FHrIMACg5pv+vi+Itl72kX1G3tK+NPicLQZzL75HU3I=
Subject key identifier:   F4:97:C9:E0:E3:CF:00:53:DC:45:58:D3:72:E3:51:A6:74:AE:20:A3
Certificate issuer:       /CN=9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F
Certificate serial:       4D3B438D0E06F615167BFAB9AE0C2C63B76DA7D2
Authority key identifier: 91:69:B9:B6:52:6C:D1:49:84:DD:E3:A4:2E:24:DD:8F:E7:AB:C1:7F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/323430343a636630303a663030303a3a2f34382d3438203d3e203338353131.roa
Signing time:             Wed 30 Mar 2022 08:37:27 +0000
ROA not before:           Wed 30 Mar 2022 08:32:27 +0000
ROA not after:            Wed 29 Mar 2023 08:37:27 +0000
asID:                     38511
IP address blocks:        2404:cf00:f000::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:3b:43:8d:0e:06:f6:15:16:7b:fa:b9:ae:0c:2c:63:b7:6d:a7:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F
        Validity
            Not Before: Mar 30 08:32:27 2022 GMT
            Not After : Mar 29 08:37:27 2023 GMT
        Subject: CN=F497C9E0E3CF0053DC4558D372E351A674AE20A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:8b:d9:1b:52:2e:43:d0:98:aa:7d:ba:0e:18:
                    d3:5e:5a:f0:b8:55:aa:ac:c9:05:a4:1a:7a:79:9f:
                    b0:87:30:74:02:be:b9:a3:3c:c4:08:9f:e9:c4:bf:
                    49:51:e2:62:a5:dd:7c:a2:58:82:25:60:f4:3b:0f:
                    34:15:c2:69:da:4d:dd:64:b2:97:30:90:89:82:f2:
                    fe:0b:f3:32:00:f8:fd:9f:34:c2:2e:c6:1d:13:e3:
                    fd:10:fa:05:10:03:bd:b5:0a:89:d3:a2:8a:8d:2a:
                    82:8b:28:06:4b:88:0f:c2:df:8b:79:66:04:8d:6a:
                    04:4f:5a:c6:98:d0:9b:f9:ba:c3:3b:c6:36:7e:3f:
                    7b:3e:be:79:59:5b:e4:4f:aa:51:c3:55:62:0f:8b:
                    b8:ed:7d:fa:0e:45:f6:09:a7:fe:30:86:5c:94:fe:
                    e9:a5:ae:96:58:96:36:83:7c:ee:a7:ed:17:69:7a:
                    03:a6:2c:1a:e5:9f:c5:6c:06:c5:9d:4c:77:73:99:
                    d7:e9:cf:fd:aa:cf:00:40:fc:ce:93:fe:76:ab:1d:
                    04:9e:4c:a1:6b:a6:6e:5c:eb:7b:ff:23:52:99:d5:
                    ff:df:e5:1d:ff:66:7b:6d:ac:6b:bd:02:83:ee:09:
                    50:1d:58:69:eb:04:f8:d2:c3:c3:14:17:28:5e:dc:
                    09:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:97:C9:E0:E3:CF:00:53:DC:45:58:D3:72:E3:51:A6:74:AE:20:A3
            X509v3 Authority Key Identifier:
                keyid:91:69:B9:B6:52:6C:D1:49:84:DD:E3:A4:2E:24:DD:8F:E7:AB:C1:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/323430343a636630303a663030303a3a2f34382d3438203d3e203338353131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:cf00:f000::/48

    Signature Algorithm: sha256WithRSAEncryption
         a5:ed:2c:c4:4a:84:0b:e5:06:83:9a:c1:d5:e0:fe:ea:87:3b:
         20:bc:0e:c6:b1:99:b0:3f:12:30:0f:8f:e0:3e:40:81:68:e8:
         bb:34:ba:de:cf:44:11:75:08:20:33:4b:39:10:e3:96:29:5b:
         97:68:d9:6d:a8:e0:6d:3d:77:e4:1b:f6:21:17:c5:6d:66:55:
         83:14:48:9e:3e:8c:cf:c0:76:ce:94:18:86:71:45:eb:b7:0a:
         a1:5f:47:9c:fb:f8:f2:ca:fe:90:c0:92:8e:d0:d6:68:fe:3b:
         68:22:78:3e:f5:eb:b0:65:87:ea:53:12:84:59:b9:69:8b:17:
         7f:50:d4:5b:12:3c:69:f0:dd:e8:2d:f7:95:a3:00:6d:f7:bb:
         73:d1:4c:69:03:47:d9:f9:6a:31:70:e4:c4:9c:65:e0:0f:f9:
         a6:b9:df:fb:fc:3b:9f:e4:63:a7:5f:81:3a:5e:60:07:b1:27:
         80:9a:cf:12:14:0a:65:6b:82:4b:b3:79:16:d5:c6:72:d0:8e:
         b8:c3:a4:08:17:cd:fe:77:ab:9f:1a:31:3d:07:78:44:1e:a5:
         5f:85:7c:54:ab:96:83:fe:00:2f:16:41:cf:d8:cc:9e:fd:fc:
         11:b0:86:35:f6:42:ae:04:3f:2c:78:2b:83:b9:92:6c:85:81:
         55:fc:eb:f4
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUTTtDjQ4G9hUWe/q5rgwsY7dtp9IwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTE2OUI5QjY1MjZDRDE0OTg0RERFM0E0MkUyNEREOEZF
N0FCQzE3RjAeFw0yMjAzMzAwODMyMjdaFw0yMzAzMjkwODM3MjdaMDMxMTAvBgNV
BAMTKEY0OTdDOUUwRTNDRjAwNTNEQzQ1NThEMzcyRTM1MUE2NzRBRTIwQTMwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCui9kbUi5D0JiqfboOGNNeWvC4
VaqsyQWkGnp5n7CHMHQCvrmjPMQIn+nEv0lR4mKl3XyiWIIlYPQ7DzQVwmnaTd1k
spcwkImC8v4L8zIA+P2fNMIuxh0T4/0Q+gUQA721ConTooqNKoKLKAZLiA/C34t5
ZgSNagRPWsaY0Jv5usM7xjZ+P3s+vnlZW+RPqlHDVWIPi7jtffoORfYJp/4whlyU
/umlrpZYljaDfO6n7RdpegOmLBrln8VsBsWdTHdzmdfpz/2qzwBA/M6T/narHQSe
TKFrpm5c63v/I1KZ1f/f5R3/ZnttrGu9AoPuCVAdWGnrBPjSw8MUFyhe3AnzAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQU9JfJ4OPPAFPcRVjTcuNRpnSuIKMwHwYDVR0j
BBgwFoAUkWm5tlJs0UmE3eOkLiTdj+erwX8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
OGYyOTE1ZC0xOGM5LTRlMDMtYmJmYi0yMDc0YzU5ODA4OTgvMC85MTY5QjlCNjUy
NkNEMTQ5ODREREUzQTQyRTI0REQ4RkU3QUJDMTdGLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOTE2OUI5QjY1MjZDRDE0OTg0RERFM0E0MkUyNEREOEZFN0FC
QzE3Ri5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzg4ZjI5MTVkLTE4YzktNGUwMy1i
YmZiLTIwNzRjNTk4MDg5OC8wLzMyMzQzMDM0M2E2MzY2MzAzMDNhNjYzMDMwMzAz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMzM4MzUzMTMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJATP
APAAMA0GCSqGSIb3DQEBCwUAA4IBAQCl7SzESoQL5QaDmsHV4P7qhzsgvA7GsZmw
PxIwD4/gPkCBaOi7NLrez0QRdQggM0s5EOOWKVuXaNltqOBtPXfkG/YhF8VtZlWD
FEiePozPwHbOlBiGcUXrtwqhX0ec+/jyyv6QwJKO0NZo/jtoIng+9euwZYfqUxKE
Wblpixd/UNRbEjxp8N3oLfeVowBt97tz0UxpA0fZ+WoxcOTEnGXgD/mmud/7/Duf
5GOnX4E6XmAHsSeAms8SFApla4JLs3kW1cZy0I64w6QIF83+d6ufGjE9B3hEHqVf
hXxUq5aD/gAvFkHP2Mye/fwRsIY19kKuBD8seCuDuZJshYFV/Ov0
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:08 2024 by rpki-client on console-fra.rpki-client.org