Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3237393a3a2f34382d3438203d3e203539323832.roa
File:                     323430303a643638303a3237393a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier:          ACY6W/t/r4AWq/VQFlHCMAXVcRIC5ANpgfF/bKBtR7k=
Subject key identifier:   E5:6F:83:20:74:E2:D0:0F:96:46:6E:89:B5:C2:6C:0C:29:B9:99:08
Certificate issuer:       /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial:       0B17D7C10406E7500D999437ACA652A939052FEB
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3237393a3a2f34382d3438203d3e203539323832.roa
Signing time:             Mon 26 Sep 2022 13:00:07 +0000
ROA not before:           Mon 26 Sep 2022 12:55:07 +0000
ROA not after:            Mon 25 Sep 2023 13:00:07 +0000
asID:                     59282
IP address blocks:        2400:d680:279::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:17:d7:c1:04:06:e7:50:0d:99:94:37:ac:a6:52:a9:39:05:2f:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
        Validity
            Not Before: Sep 26 12:55:07 2022 GMT
            Not After : Sep 25 13:00:07 2023 GMT
        Subject: CN=E56F832074E2D00F96466E89B5C26C0C29B99908
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:70:15:38:37:74:e2:c9:76:70:a6:88:b9:b2:
                    2e:fd:ea:65:e9:7f:a5:e0:91:97:9e:9d:a3:a5:8b:
                    36:b3:a4:70:0b:16:18:09:a8:ac:a5:81:3e:d0:05:
                    9c:b5:b1:79:79:ad:b7:c4:77:8b:18:14:a4:dc:40:
                    d2:2f:ea:02:42:e2:6d:43:4a:0d:7f:40:82:61:a8:
                    5d:32:7f:d4:dd:10:bb:90:36:83:4a:74:38:eb:39:
                    53:41:3a:2a:0e:c4:83:f4:41:43:97:06:59:f7:c1:
                    30:28:1a:f9:e0:be:3a:ed:99:df:73:e0:21:62:90:
                    0e:1e:ee:63:84:30:ff:23:c7:a0:d2:c1:8f:a0:2c:
                    00:5b:0a:15:92:34:e8:7c:41:83:fe:60:bd:48:90:
                    b3:0f:84:7d:32:ef:82:6a:63:6b:4c:0c:e4:d1:93:
                    65:ef:6d:18:e1:4f:6b:c4:5d:69:e6:f2:f2:b9:3d:
                    99:4a:bd:5c:f9:4e:ca:e2:50:02:32:76:b1:50:8a:
                    d7:db:cd:a9:e6:d6:cc:5d:37:f4:d1:2e:a6:c8:51:
                    5f:a7:63:6c:be:7c:06:60:28:65:9b:4c:d0:89:ad:
                    f0:0f:30:6e:22:76:c0:95:49:cf:37:10:6f:1b:11:
                    6f:22:33:1e:7a:4f:3c:7d:88:14:e0:98:94:f3:7b:
                    ce:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:6F:83:20:74:E2:D0:0F:96:46:6E:89:B5:C2:6C:0C:29:B9:99:08
            X509v3 Authority Key Identifier:
                keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3237393a3a2f34382d3438203d3e203539323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:d680:279::/48

    Signature Algorithm: sha256WithRSAEncryption
         b3:26:70:a0:55:52:4d:97:f0:e1:44:03:35:27:82:b0:d8:43:
         89:da:d9:3b:01:01:2f:00:8d:73:c9:7b:b7:80:7a:24:a5:e6:
         da:31:aa:e4:5f:e6:b0:bd:60:96:48:6c:9a:17:89:f5:b4:32:
         ac:c2:72:8d:fc:7d:05:6a:3a:12:d4:1b:f6:43:df:92:14:2e:
         b2:91:03:7d:fe:ae:5e:e7:1d:4a:44:54:95:f6:99:e2:64:8a:
         3f:a7:a4:ee:25:48:3f:84:91:04:cf:c2:8e:a2:12:ec:28:c5:
         d8:4c:ab:f0:77:53:6d:0d:94:98:a4:f3:a1:f8:c2:3e:d0:59:
         1b:d5:8f:5e:39:45:35:e0:54:c4:fc:b0:09:8b:5c:9d:3e:91:
         56:81:df:ed:1e:72:80:d6:65:aa:b4:42:4a:ef:1e:3a:0e:5d:
         78:5b:dc:a3:a9:c3:50:41:9e:a0:9f:23:8b:5b:4d:37:ab:c3:
         3a:9c:4e:88:c1:a7:9e:ab:e9:d4:d6:06:57:ad:19:63:7e:b0:
         c9:af:f6:79:02:25:d0:1c:5a:a2:a9:98:ef:e5:22:f9:c4:61:
         ac:dd:3f:72:89:e6:b1:ed:c8:69:39:70:75:f3:eb:e8:3e:5d:
         60:ea:e9:a5:42:7f:50:22:e7:29:36:cc:ae:cf:38:36:79:de:
         db:be:7e:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:14 2024 by rpki-client on console-fra.rpki-client.org