Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3237323a3a2f34382d3438203d3e203539323832.roa
File:                     323430303a643638303a3237323a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier:          8Rokft/178mWn/+bjoz4MrHpu9j40h3XnOphIJiZ+OQ=
Subject key identifier:   C6:17:93:25:18:F4:3F:BF:20:6E:13:E4:84:4B:9D:39:2D:A8:5C:66
Certificate issuer:       /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial:       5666AC1E50AD5A09270DF316B31000CD3C915233
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3237323a3a2f34382d3438203d3e203539323832.roa
Signing time:             Mon 26 Sep 2022 13:00:12 +0000
ROA not before:           Mon 26 Sep 2022 12:55:12 +0000
ROA not after:            Mon 25 Sep 2023 13:00:12 +0000
asID:                     59282
IP address blocks:        2400:d680:272::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:66:ac:1e:50:ad:5a:09:27:0d:f3:16:b3:10:00:cd:3c:91:52:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
        Validity
            Not Before: Sep 26 12:55:12 2022 GMT
            Not After : Sep 25 13:00:12 2023 GMT
        Subject: CN=C617932518F43FBF206E13E4844B9D392DA85C66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f5:56:1a:d6:bb:44:51:97:af:65:82:1e:49:a3:
                    dc:51:72:0c:98:81:6d:7d:f6:17:74:c2:7f:c3:5c:
                    46:89:da:b6:71:3b:c3:c2:4d:b6:72:88:4f:9c:97:
                    e4:4f:6f:b0:3c:4d:68:5a:ab:7b:4d:cf:45:d9:df:
                    7c:34:0f:fe:83:fe:73:e2:95:32:ba:d2:9c:3c:02:
                    ca:40:ca:7e:e2:b0:cd:80:88:c9:06:f2:63:ee:10:
                    6e:49:7e:bf:b1:e1:85:84:d7:96:3a:d7:b3:c6:f7:
                    e9:15:5f:e2:42:e8:ae:d5:a5:07:be:32:b8:ef:38:
                    42:ac:53:48:15:9c:b9:4a:61:2d:ee:a0:04:35:eb:
                    e3:e2:03:a3:67:de:66:48:1e:d7:cd:a9:b0:af:34:
                    f0:7e:f5:cf:52:80:08:ad:c3:29:d7:bb:46:89:91:
                    96:b9:58:1a:08:d3:e4:be:2f:05:c1:1d:0f:f8:44:
                    d2:9b:df:3d:93:0f:ce:bb:91:f9:86:08:6b:2d:fc:
                    6d:33:5e:27:02:7b:d8:ed:b1:29:14:47:dc:5b:f1:
                    bb:6b:18:c7:6a:c9:da:49:57:32:98:31:52:34:27:
                    2d:1e:08:8b:60:f3:57:70:0e:54:b2:19:4b:92:d4:
                    3e:de:f1:5a:c7:e8:0c:92:37:97:7b:a8:ec:58:8d:
                    9a:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:17:93:25:18:F4:3F:BF:20:6E:13:E4:84:4B:9D:39:2D:A8:5C:66
            X509v3 Authority Key Identifier:
                keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3237323a3a2f34382d3438203d3e203539323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:d680:272::/48

    Signature Algorithm: sha256WithRSAEncryption
         68:3c:51:f3:fd:0b:f2:43:19:be:c5:4e:09:46:eb:87:3a:8f:
         55:a8:71:31:e1:aa:bb:7d:17:1c:e1:30:3b:0b:f2:1e:56:61:
         5e:c1:98:7a:5c:4c:89:46:70:85:f2:1d:58:68:01:05:58:2c:
         e2:92:05:00:70:a8:d6:15:d3:f2:ed:f6:8c:20:b3:ce:87:86:
         05:37:c2:4b:e9:d3:b4:3c:c9:47:93:35:ed:85:a6:a1:2a:ba:
         42:87:1c:87:da:9a:18:d8:5a:14:7f:bd:3a:13:60:90:dd:02:
         85:fb:5b:31:f1:6d:90:76:35:f7:55:94:35:4f:19:66:4a:07:
         6b:b9:8e:75:f2:c4:06:40:13:d2:f3:7a:01:3c:f2:6d:6e:47:
         ef:62:af:51:bc:02:c7:56:e5:25:22:d4:d7:6d:06:be:a4:70:
         e8:63:99:b4:2f:1d:07:51:e7:60:dc:ab:1c:69:c2:c7:19:45:
         6d:46:1e:35:6f:1d:34:54:69:b6:30:b6:ad:79:33:93:3f:09:
         b3:55:42:9f:a4:dc:1f:8e:a1:08:cd:dd:d5:22:0c:ce:6f:f2:
         14:0d:6f:98:df:7d:10:2a:59:e9:ed:68:40:00:dc:43:85:8e:
         e9:a6:f1:df:0d:35:ff:79:70:fb:4e:85:42:3f:c5:42:f4:db:
         76:4c:42:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:14 2024 by rpki-client on console-fra.rpki-client.org