Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3238333a3a2f34382d3438203d3e203539323832.roa
File:                     323430303a643638303a3238333a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier:          mEW6AQZlXBf89B2X6T5vMdxs7UKLnJBceCw+EWpuKtM=
Subject key identifier:   4F:7A:99:BE:B6:85:9B:F4:D9:ED:F5:7E:30:D9:3D:4E:DB:BC:77:66
Certificate issuer:       /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial:       090A93AF0FFC3291CFBE8B80536B1C3EED96AA27
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3238333a3a2f34382d3438203d3e203539323832.roa
Signing time:             Mon 26 Sep 2022 13:00:18 +0000
ROA not before:           Mon 26 Sep 2022 12:55:18 +0000
ROA not after:            Mon 25 Sep 2023 13:00:18 +0000
asID:                     59282
IP address blocks:        2400:d680:283::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:0a:93:af:0f:fc:32:91:cf:be:8b:80:53:6b:1c:3e:ed:96:aa:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
        Validity
            Not Before: Sep 26 12:55:18 2022 GMT
            Not After : Sep 25 13:00:18 2023 GMT
        Subject: CN=4F7A99BEB6859BF4D9EDF57E30D93D4EDBBC7766
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:53:34:ef:8d:c7:49:bc:2b:62:ee:6a:fc:d6:
                    b4:d6:08:e7:ea:a4:a5:fe:70:8c:23:f7:50:53:f9:
                    21:e7:a8:77:71:53:6e:0a:ff:de:27:af:9b:27:f8:
                    cd:2b:fd:34:b7:b3:39:b2:d5:5a:93:1c:5c:4b:86:
                    a5:c5:a6:67:a9:48:4e:82:ed:be:3f:d8:4d:4f:14:
                    55:96:81:cf:15:1d:c7:78:bc:25:e3:48:4b:85:62:
                    de:91:75:7d:8d:79:70:33:55:14:ae:b4:13:56:54:
                    8b:85:85:6e:42:3f:71:79:b2:54:3f:50:6f:09:85:
                    d9:40:32:0a:5b:23:da:15:a3:7e:20:5c:af:91:f7:
                    5b:d8:29:4b:42:45:d1:8e:ce:d1:4d:36:0a:17:d4:
                    b7:d0:2e:35:3b:d2:22:37:74:55:28:ef:c4:37:36:
                    4a:49:a1:8d:24:36:bb:f5:83:c6:a7:d2:0a:f5:a6:
                    f8:33:84:a3:d4:29:ad:d1:ba:ae:b9:92:81:ac:81:
                    eb:49:ca:26:0a:f0:c1:26:9b:34:94:66:0d:1b:f5:
                    61:5e:ce:de:89:d0:ea:3c:84:d7:95:01:5b:ca:75:
                    87:76:c2:80:55:e0:4a:13:5a:d1:59:6b:15:13:b2:
                    3d:6c:cc:f9:4b:9c:67:96:a9:15:56:46:de:76:e2:
                    a0:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:7A:99:BE:B6:85:9B:F4:D9:ED:F5:7E:30:D9:3D:4E:DB:BC:77:66
            X509v3 Authority Key Identifier:
                keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3238333a3a2f34382d3438203d3e203539323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:d680:283::/48

    Signature Algorithm: sha256WithRSAEncryption
         87:e2:69:c9:61:0f:f8:02:a2:a7:65:0d:4c:27:76:e6:87:db:
         4b:fe:e6:fd:91:dd:f9:07:93:df:09:df:7e:ce:9e:d1:e8:55:
         d1:f7:e3:77:ee:03:dc:d0:b9:a4:e4:78:2e:8f:52:be:8b:b8:
         73:5f:9d:b0:1c:90:58:13:a4:f3:a4:7f:62:c7:d9:47:a8:99:
         c2:b7:27:69:06:04:94:53:af:b9:f7:b2:c8:0d:cc:25:e9:52:
         05:a6:8c:60:7b:bb:8c:f1:1a:7c:8e:f9:fe:f9:89:23:5c:c8:
         a2:40:c7:b1:cd:78:b1:11:4b:ac:e3:78:a6:be:39:af:c5:5c:
         1b:a0:d2:2e:49:3b:60:1f:16:d6:fa:8f:6a:07:c0:82:d5:e5:
         4e:00:6f:bc:5a:a0:2e:ec:ac:0b:e3:95:e8:81:09:af:b0:37:
         b9:88:19:e6:dc:ea:59:e1:64:b1:b7:12:cd:5f:d4:37:4f:6c:
         b9:34:6a:dd:da:18:cd:9c:e3:1a:87:ab:54:cd:02:f0:c3:59:
         37:b5:11:da:d0:b3:54:a2:35:a6:8c:ed:f9:73:7c:aa:7e:07:
         ad:36:19:d8:36:5d:50:65:22:4d:14:2b:6c:95:36:16:a7:ef:
         e5:e3:d1:80:eb:28:8e:23:88:43:38:dc:85:d3:cf:99:17:08:
         6d:bf:72:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:50 2024 by rpki-client on console-ams.rpki-client.org