Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a32353a3a2f34382d3438203d3e203539323832.roa
File:                     323430303a643638303a32353a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier:          82EYmZPt1TlJZ/FAhZwR58uh4Dv0mlaJODTtAxr8nKU=
Subject key identifier:   2F:45:D4:28:AE:10:A9:D5:D8:30:75:C8:55:F9:85:1C:BA:28:E7:26
Certificate issuer:       /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial:       1EBBD492A81FA6F689B5FC91E326C789EE96398C
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a32353a3a2f34382d3438203d3e203539323832.roa
Signing time:             Mon 26 Sep 2022 08:02:17 +0000
ROA not before:           Mon 26 Sep 2022 07:57:17 +0000
ROA not after:            Mon 25 Sep 2023 08:02:17 +0000
asID:                     59282
IP address blocks:        2400:d680:25::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:bb:d4:92:a8:1f:a6:f6:89:b5:fc:91:e3:26:c7:89:ee:96:39:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
        Validity
            Not Before: Sep 26 07:57:17 2022 GMT
            Not After : Sep 25 08:02:17 2023 GMT
        Subject: CN=2F45D428AE10A9D5D83075C855F9851CBA28E726
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:21:3e:e2:f5:f8:64:91:02:35:97:b3:97:5e:
                    fa:db:75:56:35:fc:63:8d:90:38:54:5f:be:0b:88:
                    4d:fb:f4:07:89:65:60:61:ed:fd:87:fc:95:c9:ac:
                    6d:a2:9f:48:f3:44:61:10:0e:cf:81:7a:63:02:d7:
                    b1:ec:32:c8:7a:7a:e9:37:88:e3:e8:ce:92:2b:76:
                    5b:a8:35:81:4b:d2:05:cd:cf:c9:53:52:f4:b7:4d:
                    a6:8d:bd:89:7d:ef:bf:92:ab:2b:09:74:0e:83:97:
                    e5:94:63:11:ec:0d:dc:c9:8f:06:41:67:bd:c2:7c:
                    be:1c:20:13:29:6d:78:1a:37:f7:2e:72:8f:50:0c:
                    e2:cf:f0:38:79:9d:2e:1d:c8:4c:38:b8:dc:6a:6d:
                    ac:4b:88:c7:03:5c:8c:b0:f6:3a:4b:c2:72:ce:d6:
                    2b:0b:fd:31:89:73:3b:9b:6e:bb:a1:1a:39:60:b0:
                    21:20:e1:a5:c5:ab:f1:f3:e5:bd:b6:59:ee:f3:e6:
                    f4:96:bb:62:a1:cd:97:f6:0a:9b:29:2f:6b:95:5d:
                    6a:09:17:87:84:90:86:f3:e7:ff:fe:26:b4:97:96:
                    89:97:f6:d4:61:36:fa:c7:5f:d1:61:69:2b:d5:1c:
                    c5:4d:be:94:39:ee:e4:00:f6:e7:68:b1:36:c3:7d:
                    0e:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:45:D4:28:AE:10:A9:D5:D8:30:75:C8:55:F9:85:1C:BA:28:E7:26
            X509v3 Authority Key Identifier:
                keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a32353a3a2f34382d3438203d3e203539323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:d680:25::/48

    Signature Algorithm: sha256WithRSAEncryption
         69:97:1d:1f:fe:ac:ea:03:db:5e:58:b4:e7:be:31:f7:be:4f:
         33:18:4c:e9:4b:36:23:db:37:a5:29:5d:2f:e4:5d:1d:36:d1:
         c4:ab:78:50:85:01:c1:dc:0d:2e:69:d0:f2:fb:60:81:30:8e:
         f3:a7:c1:2f:f7:dd:1c:7c:3a:75:ea:08:fe:ea:c7:01:f3:87:
         b1:2a:b2:4f:5a:ec:f9:5b:51:ad:af:69:81:cd:e7:68:c6:24:
         9b:1a:ad:da:c7:5a:d8:5d:af:33:92:74:01:eb:d6:a2:d1:6d:
         c7:e7:26:12:26:91:52:c4:93:2b:f7:db:4e:08:03:6a:36:57:
         00:9b:34:6b:66:d5:c4:b3:ee:a7:23:7f:c2:0f:20:3d:58:33:
         94:e6:74:fc:f8:a4:d3:a8:d6:9f:3c:ef:58:88:c4:33:33:e8:
         a0:7d:2b:8a:a2:eb:1d:60:55:df:ce:27:62:c3:d7:56:05:c4:
         66:34:6a:f6:2c:57:7d:6b:86:c6:a1:f2:bf:d2:2d:82:7e:1f:
         42:87:10:2b:ce:61:f9:5b:09:12:94:bd:11:3a:5d:13:7e:78:
         3a:3e:c0:1d:5b:86:db:86:70:27:55:6f:2c:5c:b6:1d:22:c7:
         ab:1f:08:65:e0:a2:50:8f:55:a8:22:74:56:69:2f:63:e3:cd:
         6a:bd:64:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:50 2024 by rpki-client on console-ams.rpki-client.org