Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3138663a3a2f34382d3438203d3e203539323832.roa
File:                     323430303a643638303a3138663a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier:          l/lqMqqp9DHAU3MOq/JJg9G/fTrXH9mE3T45KWi1oms=
Subject key identifier:   3D:58:FB:40:E7:8E:4B:F5:3F:7A:A7:00:6C:A0:77:22:82:45:30:C6
Certificate issuer:       /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial:       686EF847A8478471FA54F461218D3B909C8146BC
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3138663a3a2f34382d3438203d3e203539323832.roa
Signing time:             Mon 26 Sep 2022 08:01:21 +0000
ROA not before:           Mon 26 Sep 2022 07:56:21 +0000
ROA not after:            Mon 25 Sep 2023 08:01:21 +0000
asID:                     59282
IP address blocks:        2400:d680:18f::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:6e:f8:47:a8:47:84:71:fa:54:f4:61:21:8d:3b:90:9c:81:46:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
        Validity
            Not Before: Sep 26 07:56:21 2022 GMT
            Not After : Sep 25 08:01:21 2023 GMT
        Subject: CN=3D58FB40E78E4BF53F7AA7006CA07722824530C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:4d:6b:c8:fb:3b:25:f2:c0:a9:22:de:eb:e5:
                    e7:f5:17:ba:d5:d3:4e:90:3a:e1:cf:91:4a:7c:c7:
                    ee:06:79:5a:01:57:7b:d3:31:0f:cb:3e:ee:e3:c5:
                    47:49:a2:a3:3d:55:7f:dc:b1:19:0c:f5:51:b7:1f:
                    97:10:80:c7:7d:cd:a9:c9:6c:66:4a:61:38:39:d5:
                    79:5c:52:ca:44:69:2c:5f:9c:27:c3:42:d1:15:3b:
                    ad:ee:64:7d:a7:57:be:8e:b2:d2:ae:63:76:bb:40:
                    50:f5:f4:d4:e4:6c:bd:ba:18:d1:51:44:4a:19:a0:
                    2a:54:38:f8:dd:0d:e3:44:bd:d4:9e:88:9b:d6:88:
                    65:43:09:49:2a:9a:2d:7b:20:ea:91:ef:ab:fe:51:
                    7c:5b:e8:d5:a7:5b:90:d3:70:4c:ba:ad:9b:0e:fb:
                    ee:a9:ab:c8:a0:d9:62:9b:81:54:fa:25:ad:1c:78:
                    53:bb:b9:e7:39:3d:47:b3:85:c6:72:ca:e8:c0:46:
                    1b:38:45:c9:36:c5:dc:62:91:d1:c6:21:81:f1:70:
                    5f:56:19:55:97:ee:9b:c7:6e:a8:85:5b:0c:3b:60:
                    80:7e:55:ea:72:bb:30:01:fd:27:4d:f9:07:99:33:
                    43:7a:e8:f6:7f:86:5d:6f:1e:95:94:bb:ed:92:3c:
                    58:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:58:FB:40:E7:8E:4B:F5:3F:7A:A7:00:6C:A0:77:22:82:45:30:C6
            X509v3 Authority Key Identifier:
                keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3138663a3a2f34382d3438203d3e203539323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:d680:18f::/48

    Signature Algorithm: sha256WithRSAEncryption
         8b:3a:e9:47:a0:61:26:bf:f2:e4:f4:de:fc:ba:88:eb:a2:6e:
         c6:5b:d5:b9:80:5a:10:1a:9e:c6:e6:f3:c8:3e:36:3a:bc:4a:
         e3:ff:a5:3b:2e:2b:26:47:67:d4:78:ca:33:c7:88:a2:c3:7c:
         6c:3b:6b:90:b1:45:9f:88:69:2b:15:29:03:75:82:89:36:a7:
         a0:45:19:be:75:04:ce:76:d3:7d:d9:64:c2:27:f4:63:69:89:
         ea:71:18:b4:58:18:c6:61:11:f7:25:de:b8:c2:e0:22:a3:bb:
         28:20:74:4b:d0:12:94:67:53:ad:4a:9b:0d:fb:81:a3:89:0b:
         76:9d:18:d5:ac:fa:15:8e:a8:2b:a7:05:b2:27:28:de:56:ad:
         f3:5d:9c:0d:46:c2:3d:00:37:7e:c8:0e:88:5a:70:a6:9f:74:
         34:f1:34:be:19:af:2f:ec:3e:7a:ab:4b:10:45:aa:4c:15:13:
         42:66:92:08:09:26:08:7b:c4:5f:b7:bc:b2:04:b2:01:11:41:
         f5:b1:c0:39:a5:ae:e6:98:86:14:1e:dc:21:84:95:6e:fe:5f:
         96:dd:ff:bd:43:45:b2:08:b6:61:e6:4e:c2:73:30:bd:51:80:
         4f:da:0a:29:eb:89:28:03:8e:40:20:42:b2:aa:ec:e8:1b:ac:
         1d:d9:b4:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:13 2024 by rpki-client on console-fra.rpki-client.org