Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a32373a3a2f34382d3438203d3e203539323832.roa
File:                     323430303a643638303a32373a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier:          GI22FOTzFuUK6/c+oSb7rBOtMqVCLSSd00rmWLQk0rg=
Subject key identifier:   B7:9F:84:A7:14:1D:EC:04:67:9B:2C:32:60:41:39:BD:FF:5B:B1:62
Certificate issuer:       /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial:       05ADC6B78922AF77A6603857935DCC1705C8E281
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a32373a3a2f34382d3438203d3e203539323832.roa
Signing time:             Mon 26 Sep 2022 08:02:22 +0000
ROA not before:           Mon 26 Sep 2022 07:57:22 +0000
ROA not after:            Mon 25 Sep 2023 08:02:22 +0000
asID:                     59282
IP address blocks:        2400:d680:27::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:ad:c6:b7:89:22:af:77:a6:60:38:57:93:5d:cc:17:05:c8:e2:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
        Validity
            Not Before: Sep 26 07:57:22 2022 GMT
            Not After : Sep 25 08:02:22 2023 GMT
        Subject: CN=B79F84A7141DEC04679B2C32604139BDFF5BB162
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:da:ae:eb:de:8e:08:d3:05:c0:f4:93:24:cf:
                    d9:e4:2a:3e:c1:a4:b9:03:73:81:96:d7:8c:2e:50:
                    f4:10:00:0c:ff:d9:fe:53:b9:36:50:54:9b:6b:a7:
                    f9:f9:5c:42:ae:0b:0b:ce:fc:33:56:3e:41:22:47:
                    25:4c:c4:13:52:5c:3f:4b:de:71:50:6d:f4:33:08:
                    bc:85:4b:86:9e:2c:bf:ca:e7:14:29:b4:89:a8:fd:
                    c1:ac:f8:13:cd:17:20:ca:20:1e:8c:93:f3:d4:4d:
                    60:d5:bd:9a:50:1e:61:a6:2e:6e:d9:75:08:7e:15:
                    29:78:df:0b:ca:d6:56:2e:61:eb:e4:4a:5c:47:6c:
                    f7:bf:b4:6b:5f:d0:84:a7:54:5c:b7:37:50:1e:fb:
                    e9:6b:7c:57:9a:d3:0b:8d:20:2a:05:0d:09:91:6b:
                    81:1b:1f:78:8a:98:61:39:b0:84:5b:9a:02:4b:fa:
                    93:d8:a2:c0:1d:40:04:fd:3a:a4:1d:d0:f1:7f:7d:
                    94:13:2a:29:2e:83:63:45:6f:6e:72:30:06:43:90:
                    04:16:59:6e:6d:0d:35:15:e1:57:d5:8f:ae:dc:75:
                    5b:bc:56:09:c1:86:cc:9e:f7:f9:f3:45:52:23:d2:
                    ce:33:f8:a1:fa:be:55:94:fa:e8:da:c8:d7:10:26:
                    1d:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:9F:84:A7:14:1D:EC:04:67:9B:2C:32:60:41:39:BD:FF:5B:B1:62
            X509v3 Authority Key Identifier:
                keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a32373a3a2f34382d3438203d3e203539323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:d680:27::/48

    Signature Algorithm: sha256WithRSAEncryption
         9a:5d:2a:36:3f:69:84:bd:46:37:bd:f7:0a:ba:56:74:27:60:
         a5:6e:3b:54:ef:94:60:f9:d9:80:c8:80:75:bf:5d:da:19:7b:
         0a:12:da:7e:8c:79:1a:35:99:c3:15:f8:d6:9e:d4:84:71:93:
         55:5d:41:13:b9:1c:b9:9c:22:a5:07:40:9b:2b:8c:af:a3:b7:
         ac:ce:19:2c:f3:85:5c:6a:16:67:7a:97:51:10:ad:b7:43:de:
         18:02:06:08:69:0f:a3:b3:be:73:0e:68:b4:25:fc:b2:54:77:
         d8:95:8d:fc:0b:fc:e9:bf:35:09:14:d7:64:34:1e:2c:b0:b3:
         7e:ad:3f:53:f3:81:74:29:eb:04:d2:aa:49:ce:15:10:2b:09:
         0a:e5:02:74:29:38:7a:32:3c:2e:94:ad:53:bf:34:22:f7:df:
         08:ab:67:5b:80:31:fe:68:d9:b3:c1:c7:2b:63:a9:00:75:26:
         1a:ce:0a:50:f8:f4:ab:46:d1:38:df:b1:55:5a:b3:93:e1:c3:
         a7:50:4b:8f:ab:40:e7:79:de:3e:97:c4:21:5f:d0:d5:ef:84:
         81:a3:d1:68:17:d3:7c:ce:02:d4:54:ae:a8:d1:f3:49:d2:69:
         1e:7d:59:9c:11:f8:f5:21:bb:b0:ae:02:d1:4e:cc:6a:be:ca:
         4c:e5:be:c8
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgIUBa3Gt4kir3emYDhXk13MFwXI4oEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJG
MDBFNzFBQTAeFw0yMjA5MjYwNzU3MjJaFw0yMzA5MjUwODAyMjJaMDMxMTAvBgNV
BAMTKEI3OUY4NEE3MTQxREVDMDQ2NzlCMkMzMjYwNDEzOUJERkY1QkIxNjIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDF2q7r3o4I0wXA9JMkz9nkKj7B
pLkDc4GW14wuUPQQAAz/2f5TuTZQVJtrp/n5XEKuCwvO/DNWPkEiRyVMxBNSXD9L
3nFQbfQzCLyFS4aeLL/K5xQptImo/cGs+BPNFyDKIB6Mk/PUTWDVvZpQHmGmLm7Z
dQh+FSl43wvK1lYuYevkSlxHbPe/tGtf0ISnVFy3N1Ae++lrfFea0wuNICoFDQmR
a4EbH3iKmGE5sIRbmgJL+pPYosAdQAT9OqQd0PF/fZQTKikug2NFb25yMAZDkAQW
WW5tDTUV4VfVj67cdVu8VgnBhsye9/nzRVIj0s4z+KH6vlWU+ujayNcQJh2pAgMB
AAGjggI5MIICNTAdBgNVHQ4EFgQUt5+EpxQd7ARnmywyYEE5vf9bsWIwHwYDVR0j
BBgwFoAUY5RzzSBUp4s5+ax6gyMkYvAOcaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
ODQ2NGE1Yi0yZmNlLTQ3ZGEtODA0Ny02OGQyYmQ2M2M5YzMvMC82Mzk0NzNDRDIw
NTRBNzhCMzlGOUFDN0E4MzIzMjQ2MkYwMEU3MUFBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJGMDBF
NzFBQS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E4NDY0YTViLTJmY2UtNDdkYS04
MDQ3LTY4ZDJiZDYzYzljMy8wLzMyMzQzMDMwM2E2NDM2MzgzMDNhMzIzNzNhM2Ey
ZjM0MzgyZDM0MzgyMDNkM2UyMDM1MzkzMjM4MzIucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwIgYIKwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwAkANaAACcw
DQYJKoZIhvcNAQELBQADggEBAJpdKjY/aYS9Rje99wq6VnQnYKVuO1TvlGD52YDI
gHW/XdoZewoS2n6MeRo1mcMV+Nae1IRxk1VdQRO5HLmcIqUHQJsrjK+jt6zOGSzz
hVxqFmd6l1EQrbdD3hgCBghpD6OzvnMOaLQl/LJUd9iVjfwL/Om/NQkU12Q0Hiyw
s36tP1PzgXQp6wTSqknOFRArCQrlAnQpOHoyPC6UrVO/NCL33wirZ1uAMf5o2bPB
xytjqQB1JhrOClD49KtG0TjfsVVas5Phw6dQS4+rQOd53j6XxCFf0NXvhIGj0WgX
03zOAtRUrqjR80nSaR59WZwR+PUhu7CuAtFOzGq+ykzlvsg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:14 2024 by rpki-client on console-fra.rpki-client.org