Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3232663a3a2f34382d3438203d3e203539323832.roa
File:                     323430303a643638303a3232663a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier:          sseEArx67tA+0cnzGo8eeGf/CCJnUqTLAQI8P65JOeQ=
Subject key identifier:   C8:F7:F0:6A:0C:2F:30:D1:0C:03:25:33:3E:E2:AB:08:16:ED:3C:E1
Certificate issuer:       /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial:       616568B7D047651A989EC1C5122B3D944A750267
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3232663a3a2f34382d3438203d3e203539323832.roa
Signing time:             Mon 26 Sep 2022 08:02:24 +0000
ROA not before:           Mon 26 Sep 2022 07:57:24 +0000
ROA not after:            Mon 25 Sep 2023 08:02:24 +0000
asID:                     59282
IP address blocks:        2400:d680:22f::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:65:68:b7:d0:47:65:1a:98:9e:c1:c5:12:2b:3d:94:4a:75:02:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
        Validity
            Not Before: Sep 26 07:57:24 2022 GMT
            Not After : Sep 25 08:02:24 2023 GMT
        Subject: CN=C8F7F06A0C2F30D10C0325333EE2AB0816ED3CE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:e0:c7:46:63:6a:eb:7c:1d:bf:f4:b5:50:6f:
                    a1:fb:a9:72:18:65:e6:50:64:60:8b:72:e3:34:8b:
                    eb:8b:eb:ba:b7:e3:c6:44:e9:e8:81:ec:a8:55:b8:
                    d7:36:90:02:af:46:54:dc:79:27:2c:61:c5:9c:c6:
                    09:2d:97:2f:f5:0d:3e:19:24:b9:4f:9e:67:af:79:
                    df:61:22:ff:46:73:f6:48:75:28:4c:ca:d3:66:52:
                    cc:66:1b:75:3f:00:e7:29:3d:b6:aa:17:61:7c:f7:
                    53:4f:d9:90:08:37:f3:ab:b0:4f:d6:74:08:ed:41:
                    89:ca:af:dc:30:c5:d1:18:9f:01:1a:45:b7:59:33:
                    ce:d2:6f:36:3f:d2:df:6b:69:50:5f:97:4c:e4:f8:
                    35:93:0b:10:e5:16:86:90:3a:58:17:6d:a7:a9:9a:
                    69:a1:23:5c:26:0e:37:39:8d:3c:7f:53:86:bc:0d:
                    0c:4e:6f:28:df:63:e0:6d:56:65:45:bc:d3:f0:89:
                    19:f9:c6:89:46:e6:6b:8f:eb:84:21:47:e8:da:d7:
                    f7:64:ce:fa:52:1c:d3:fd:c2:a4:f4:f4:c6:c1:fd:
                    dc:29:fa:a1:ff:55:8e:b1:90:18:6f:ad:0c:eb:6c:
                    4e:39:e6:4f:15:ac:62:73:96:ad:9c:19:7b:f8:b4:
                    d2:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:F7:F0:6A:0C:2F:30:D1:0C:03:25:33:3E:E2:AB:08:16:ED:3C:E1
            X509v3 Authority Key Identifier:
                keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3232663a3a2f34382d3438203d3e203539323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:d680:22f::/48

    Signature Algorithm: sha256WithRSAEncryption
         8f:df:50:7d:53:dc:0c:54:5c:1a:d8:06:02:44:83:da:d1:b2:
         36:4b:f6:16:b5:e9:aa:1c:fc:d9:20:13:4b:05:23:11:00:ef:
         64:ac:97:63:51:f5:e7:14:a5:a3:92:f1:0d:a9:7a:65:60:3b:
         c5:d5:47:e2:85:52:c3:b4:e5:9e:98:24:97:9f:6b:ea:0b:fc:
         31:4f:fb:cf:9e:8a:e8:73:df:be:a2:0e:9f:d9:d8:07:99:16:
         37:60:0a:6a:3b:b3:39:3b:93:86:64:10:5f:bf:79:cf:7e:f1:
         71:8e:9a:0f:5d:9d:57:f6:75:50:34:dc:ed:58:2c:a8:c0:12:
         74:a4:a1:a5:17:bf:9c:15:03:a1:ab:ca:a2:3d:f9:fb:d7:63:
         23:0a:84:d0:5c:14:7d:64:e5:d3:f3:94:08:ae:dd:46:29:f6:
         99:1b:52:94:1d:19:3f:39:8f:e0:05:58:d7:12:43:8a:7f:b5:
         30:92:fb:be:f5:52:0a:89:48:06:3c:2f:79:ac:01:6e:c9:e7:
         6b:b4:83:c5:fb:bb:a3:54:56:f8:40:e0:6d:c9:e4:fb:5d:6c:
         76:a8:9d:a3:88:89:89:c9:66:1d:e7:bb:75:3e:56:e5:fc:eb:
         9d:9a:7e:11:13:06:c0:ea:2d:ef:31:03:da:bb:45:7f:cb:f7:
         91:a7:b7:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:14 2024 by rpki-client on console-fra.rpki-client.org