Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3233623a3a2f34382d3438203d3e203539323832.roa
File:                     323430303a643638303a3233623a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier:          TiAU3xE/sExgcI7ovY9OhGVedifxXoFfGEsTSFLD0JM=
Subject key identifier:   46:36:79:A0:5D:C6:26:11:FD:4E:B1:E8:61:66:51:FF:95:33:55:94
Certificate issuer:       /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial:       74F3D9E689ECBB6B2237E0B14096B631F59CE1FE
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3233623a3a2f34382d3438203d3e203539323832.roa
Signing time:             Mon 26 Sep 2022 10:00:26 +0000
ROA not before:           Mon 26 Sep 2022 09:55:26 +0000
ROA not after:            Mon 25 Sep 2023 10:00:26 +0000
asID:                     59282
IP address blocks:        2400:d680:23b::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:f3:d9:e6:89:ec:bb:6b:22:37:e0:b1:40:96:b6:31:f5:9c:e1:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
        Validity
            Not Before: Sep 26 09:55:26 2022 GMT
            Not After : Sep 25 10:00:26 2023 GMT
        Subject: CN=463679A05DC62611FD4EB1E8616651FF95335594
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:4e:da:97:38:8f:66:33:a7:1a:5e:5f:88:bc:
                    9f:4e:b7:98:16:92:13:33:7e:d6:36:f7:9e:0c:09:
                    9a:d0:00:09:1c:6b:04:25:7d:f9:8f:5d:d5:a9:53:
                    2f:66:9f:92:92:0c:09:3f:94:ed:44:36:b3:2f:3d:
                    0c:22:a5:50:e1:8c:f8:3c:35:62:a4:55:b0:b8:ec:
                    25:05:12:76:6b:53:fc:17:24:28:84:16:83:79:f6:
                    38:e6:1f:b6:fe:c5:9a:10:86:a8:f6:fc:59:89:c2:
                    8c:55:13:a7:fb:82:19:6f:b0:f6:ce:86:12:e1:0c:
                    f4:9f:15:53:ed:32:c0:c3:74:f3:f2:2d:95:fc:e9:
                    54:f4:a1:db:ce:6a:30:71:ab:f2:92:c8:f3:e6:b2:
                    9b:0f:12:8f:a9:de:c6:15:7b:c4:09:e4:03:14:d4:
                    3f:b9:7d:34:f0:02:86:27:45:00:7b:c2:7b:c7:1f:
                    68:60:26:39:dd:8e:ea:40:91:d3:53:ee:7e:7f:68:
                    4b:fc:d9:7c:18:07:2c:58:1d:fc:10:eb:bd:f6:90:
                    6a:70:00:a9:ec:d0:f7:7b:be:8e:70:28:37:5c:43:
                    7b:19:a7:ef:1b:e6:6b:95:ae:4b:10:41:43:6d:b5:
                    4b:3c:fa:29:a8:87:8c:bf:99:df:e5:c9:d1:68:e8:
                    fa:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:36:79:A0:5D:C6:26:11:FD:4E:B1:E8:61:66:51:FF:95:33:55:94
            X509v3 Authority Key Identifier:
                keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3233623a3a2f34382d3438203d3e203539323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:d680:23b::/48

    Signature Algorithm: sha256WithRSAEncryption
         09:d2:ee:79:80:35:cc:d7:7c:cd:a0:c3:7d:5f:60:85:ae:34:
         78:ea:12:a9:5e:48:4a:76:a4:29:ec:58:c3:72:e4:30:d5:51:
         3e:24:4e:f1:24:27:63:e5:4a:fe:c6:f1:a4:aa:53:6f:40:12:
         97:80:f4:80:d2:4b:68:49:e6:cb:01:ea:3f:3d:51:7d:3a:ed:
         cb:9c:3e:ee:20:9b:db:e6:cd:b8:d4:e5:c9:fe:e2:fb:fa:56:
         d1:cc:49:bb:c5:f2:08:21:0d:bf:5a:19:2d:86:4a:b8:71:59:
         1f:67:d7:6c:79:dc:2b:d4:12:95:b7:0c:b7:08:23:20:a8:dc:
         74:19:cf:f9:fe:ad:2c:70:e0:4d:a5:6f:e0:2f:a4:5b:5b:77:
         5e:8a:45:1e:1e:78:e6:9b:a2:07:2f:3b:ab:15:49:00:08:d3:
         a2:39:fd:5d:5c:db:36:b8:ef:f7:2b:16:22:89:e9:60:9d:79:
         c0:90:6a:aa:e0:03:24:1d:c9:e8:23:db:a9:a2:ee:9b:9a:b1:
         57:df:b4:e7:34:87:66:dd:84:64:45:e5:98:3d:99:3c:67:e0:
         a4:87:91:8f:ff:1c:6c:6e:5b:c8:0e:4e:1f:f0:ba:b0:b1:29:
         28:20:c1:20:c5:f9:72:2f:7f:e1:a5:09:1d:60:75:59:98:51:
         f0:78:6f:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:50 2024 by rpki-client on console-ams.rpki-client.org