Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3165613a3a2f34382d3438203d3e203539323832.roa
File:                     323430303a643638303a3165613a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier:          dN1hs9+6L6CFONQef8IBGvzWqzp1djq8jNzO8rs3fzI=
Subject key identifier:   CF:2A:09:18:5E:ED:2E:A0:9C:E8:B3:D6:85:91:CD:E7:6C:BF:11:ED
Certificate issuer:       /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial:       0AB0B2BCC918E3C48780BCA612CA1A1071E22B34
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3165613a3a2f34382d3438203d3e203539323832.roa
Signing time:             Mon 26 Sep 2022 10:00:24 +0000
ROA not before:           Mon 26 Sep 2022 09:55:24 +0000
ROA not after:            Mon 25 Sep 2023 10:00:24 +0000
asID:                     59282
IP address blocks:        2400:d680:1ea::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:b0:b2:bc:c9:18:e3:c4:87:80:bc:a6:12:ca:1a:10:71:e2:2b:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
        Validity
            Not Before: Sep 26 09:55:24 2022 GMT
            Not After : Sep 25 10:00:24 2023 GMT
        Subject: CN=CF2A09185EED2EA09CE8B3D68591CDE76CBF11ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:11:2a:aa:01:2d:d7:50:92:1e:ad:83:a9:54:
                    c4:fb:11:56:2d:7b:88:5c:55:44:59:fd:0d:92:ee:
                    50:77:f7:18:e3:bd:a1:4f:3c:e0:24:44:39:6e:c2:
                    f0:ed:dd:e3:a0:4a:d5:1a:b0:0b:13:6a:05:3c:83:
                    0c:a9:15:20:32:5b:ae:58:af:58:42:66:fb:23:d0:
                    b5:72:7c:7e:40:6d:75:dd:15:a5:25:44:2b:77:71:
                    77:0e:59:7c:bb:68:14:9b:89:2a:8a:f7:9d:00:be:
                    73:6c:8e:56:4f:f5:61:f3:e5:d3:c3:ad:da:72:9a:
                    bd:94:ac:23:a3:03:4e:ee:a7:27:1a:51:dd:6e:cf:
                    86:23:83:ef:5e:19:d4:9d:79:c9:91:c1:f3:86:14:
                    dd:4d:58:80:c7:58:f8:22:4d:26:13:a6:6a:ee:ba:
                    34:3b:b8:ea:88:98:5f:f5:1b:f0:c5:c5:46:c9:97:
                    d4:b6:a8:36:11:18:e4:2d:23:bf:66:1a:d6:e8:cf:
                    cf:de:d6:15:13:b0:18:ba:09:a8:70:42:97:1b:ae:
                    d3:94:4c:b6:22:cf:e3:cf:00:50:41:0e:09:86:ca:
                    3e:e8:9e:3c:e4:41:c4:1c:10:fd:a4:96:f0:5d:1b:
                    d8:f0:24:49:11:33:2a:f4:ea:f7:47:83:5d:c0:9f:
                    64:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:2A:09:18:5E:ED:2E:A0:9C:E8:B3:D6:85:91:CD:E7:6C:BF:11:ED
            X509v3 Authority Key Identifier:
                keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3165613a3a2f34382d3438203d3e203539323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:d680:1ea::/48

    Signature Algorithm: sha256WithRSAEncryption
         5a:14:e4:ed:7b:b4:1e:a1:e1:08:8a:7d:72:e5:12:fd:17:8e:
         e8:cb:84:b4:00:5a:c9:8c:85:94:0e:96:ed:c1:a1:30:2c:20:
         f2:49:a3:e8:49:00:28:3a:cc:df:8b:00:6b:61:99:44:9d:8b:
         9d:47:81:98:bd:f8:4a:f7:a0:6d:05:91:ea:88:8e:73:62:bb:
         cd:41:88:72:cc:90:02:3b:90:25:31:20:2c:95:c8:8c:ca:e9:
         a5:c0:75:8c:f7:eb:f2:0f:c8:c0:2f:7e:8f:0b:61:54:0a:55:
         c5:a5:a2:8c:37:62:bf:f8:17:58:68:a7:dc:a0:c0:9c:87:a5:
         2a:66:7b:09:b9:8a:e4:05:b9:04:2c:c2:7f:02:a6:f3:cc:0c:
         df:4a:40:58:b8:c9:01:85:7c:a2:d6:64:77:d0:e9:0e:76:26:
         22:7d:db:8a:ed:55:79:0e:43:79:3c:55:10:78:e1:a5:4f:b8:
         81:a5:8e:c8:7f:4b:62:23:fb:ad:a4:47:13:1e:e1:2a:ef:6a:
         8c:9b:cb:c8:80:67:5e:23:08:9e:e3:84:8a:3d:89:ad:f8:a3:
         37:76:0f:80:4d:6e:31:8f:23:58:4d:2a:1d:e4:2b:b1:b9:5a:
         ff:e2:98:38:fb:06:bb:09:8e:14:1e:ac:c0:67:30:d7:b5:0e:
         7b:48:94:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:50 2024 by rpki-client on console-ams.rpki-client.org