Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3134643a3a2f34382d3438203d3e203539323832.roa
File:                     323430303a643638303a3134643a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier:          mUL7HogmtuSSOZsyL5QJaUFeEknuZTIZIDQGW7nCf1g=
Subject key identifier:   B1:6C:D3:24:BE:91:9B:35:B9:86:34:0D:82:62:FD:6B:6F:C5:50:10
Certificate issuer:       /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial:       49C8146CD2A2AF583ACEE904B835985C7E8EC819
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3134643a3a2f34382d3438203d3e203539323832.roa
Signing time:             Mon 26 Sep 2022 08:01:18 +0000
ROA not before:           Mon 26 Sep 2022 07:56:18 +0000
ROA not after:            Mon 25 Sep 2023 08:01:18 +0000
asID:                     59282
IP address blocks:        2400:d680:14d::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:c8:14:6c:d2:a2:af:58:3a:ce:e9:04:b8:35:98:5c:7e:8e:c8:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
        Validity
            Not Before: Sep 26 07:56:18 2022 GMT
            Not After : Sep 25 08:01:18 2023 GMT
        Subject: CN=B16CD324BE919B35B986340D8262FD6B6FC55010
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e4:c2:09:e9:97:25:23:36:82:ed:8b:25:07:
                    14:5a:54:30:6a:de:c2:53:c4:72:24:aa:8c:72:23:
                    f5:ed:4c:eb:f6:22:d7:35:40:5b:2b:96:c0:e4:d9:
                    11:e4:a4:4e:05:ce:c6:41:e4:cf:67:6d:2f:08:36:
                    44:88:8c:67:82:5f:66:41:df:5f:d7:b7:dd:d3:fc:
                    ea:2c:d7:b0:99:8c:d1:50:8b:89:83:df:64:0a:f3:
                    fd:60:96:27:25:78:ee:c0:af:f7:3d:ed:24:ff:a2:
                    fb:fa:6c:8f:b8:ed:10:a1:1b:85:da:6d:8b:be:b8:
                    a3:40:ca:5b:87:c6:ab:bf:de:13:33:cb:0b:df:24:
                    d8:80:f5:5d:86:42:4f:51:c4:99:d4:95:5d:47:3f:
                    92:d6:7b:e1:5e:53:1c:1f:93:78:a2:51:63:28:b0:
                    71:0d:45:df:d4:98:0e:84:ff:9c:08:24:9c:c9:58:
                    b2:e6:ea:1e:59:5c:a8:5b:c0:8a:e7:45:21:4e:e9:
                    a7:de:05:a9:e5:91:7b:e1:a3:fc:1a:e9:e2:fd:ae:
                    22:5b:e8:d7:6b:c5:00:f9:58:a8:e1:f0:96:97:a0:
                    c4:e6:94:0a:1c:dc:ea:a2:66:55:d2:ff:fb:18:1a:
                    17:84:53:4e:07:c1:91:66:32:c3:8a:29:61:ea:96:
                    7e:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:6C:D3:24:BE:91:9B:35:B9:86:34:0D:82:62:FD:6B:6F:C5:50:10
            X509v3 Authority Key Identifier:
                keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3134643a3a2f34382d3438203d3e203539323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:d680:14d::/48

    Signature Algorithm: sha256WithRSAEncryption
         66:31:42:e8:25:a0:10:06:d2:ed:73:a2:fc:ed:59:4c:bd:84:
         34:14:93:1d:dc:cd:54:9f:88:54:56:94:58:17:01:4e:22:59:
         90:c6:70:72:7a:86:37:b6:09:76:ca:78:b2:85:80:88:bf:52:
         8e:9e:33:cf:11:03:83:f7:42:cb:52:8b:af:43:fd:aa:1e:4f:
         d9:d0:ab:d8:cc:8e:e6:38:be:6a:94:91:c2:6a:0b:78:6b:08:
         b2:4d:48:9e:fa:15:bf:22:76:e3:e7:4f:02:49:4a:8c:68:f0:
         b3:8c:bb:49:c5:08:06:ad:89:7d:95:a1:7a:26:b5:f6:67:ee:
         81:c0:27:a8:a3:ca:e3:86:da:5e:4b:b0:d1:d5:d8:98:c5:13:
         4d:f8:02:f3:ea:46:b3:82:66:2a:fe:a3:c3:01:76:49:9e:10:
         40:15:bd:bf:58:b4:a0:cd:42:eb:b8:f6:9c:e6:d9:56:6a:c1:
         10:97:e3:01:d6:8c:f1:ce:4d:81:65:1c:ca:f2:6a:c8:af:bb:
         ff:ea:d9:d7:9d:6c:5c:cb:71:f5:89:40:10:2b:af:f6:9e:24:
         87:7f:ac:8a:77:06:58:f2:c5:f3:e4:4f:93:ba:51:97:f1:f8:
         85:cb:33:d6:37:46:2c:2c:fd:f2:49:37:70:46:d6:65:15:e9:
         ee:44:3d:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:13 2024 by rpki-client on console-fra.rpki-client.org