Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3261663a3a2f34382d3438203d3e203539323832.roa
File:                     323430303a643638303a3261663a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier:          KxBKnODqLvhR9kiQZnGMPKakTQe5s2Aei2CqvO9toco=
Subject key identifier:   C2:80:1B:67:BA:7A:47:95:12:41:20:6F:62:AC:1A:A5:E9:FB:DD:4C
Certificate issuer:       /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial:       273322044CC68B694BE41712FF1CBD2F2FB65FE4
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3261663a3a2f34382d3438203d3e203539323832.roa
Signing time:             Mon 26 Sep 2022 13:00:08 +0000
ROA not before:           Mon 26 Sep 2022 12:55:08 +0000
ROA not after:            Mon 25 Sep 2023 13:00:08 +0000
asID:                     59282
IP address blocks:        2400:d680:2af::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:33:22:04:4c:c6:8b:69:4b:e4:17:12:ff:1c:bd:2f:2f:b6:5f:e4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
        Validity
            Not Before: Sep 26 12:55:08 2022 GMT
            Not After : Sep 25 13:00:08 2023 GMT
        Subject: CN=C2801B67BA7A47951241206F62AC1AA5E9FBDD4C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:bf:eb:bf:99:8a:52:3f:26:3f:06:e3:57:3f:
                    be:47:a7:54:3e:10:0d:0d:e7:40:e9:ed:0c:35:8a:
                    80:0a:bc:69:85:7f:56:76:12:4b:19:b5:06:ea:40:
                    8f:a9:d9:ee:f4:65:dc:0a:1c:33:ec:4f:e9:f8:17:
                    6f:f3:cc:58:95:19:10:e9:f8:74:af:d4:4d:71:1c:
                    92:b6:be:d4:90:27:a2:83:42:c8:47:ea:17:26:84:
                    2e:00:73:3c:19:29:65:25:ad:c7:cc:94:14:23:22:
                    db:1c:59:49:86:a0:14:bc:1f:12:3e:82:f3:1a:03:
                    e7:ec:d1:51:c0:2d:f2:5a:b8:bd:38:cc:2c:fa:71:
                    6e:15:2f:a5:30:6e:c6:e6:9f:fc:1b:bb:84:1d:37:
                    85:15:1a:6d:82:7f:3d:88:c6:bd:1d:6b:96:b7:af:
                    ae:b3:94:70:07:9f:59:bd:90:e9:f8:c3:6d:86:32:
                    b8:f8:3b:35:87:16:8c:12:ee:f8:7b:58:43:30:1f:
                    1c:74:82:0c:4f:65:ab:b9:63:20:92:8a:f2:46:98:
                    be:0e:16:a3:78:70:75:b2:b7:c2:b5:3e:87:52:75:
                    72:58:c7:d2:a3:53:8d:09:76:14:f5:e8:0a:8c:8b:
                    50:c3:d2:c2:fb:20:3c:98:b9:a1:e3:60:8f:da:55:
                    ec:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:80:1B:67:BA:7A:47:95:12:41:20:6F:62:AC:1A:A5:E9:FB:DD:4C
            X509v3 Authority Key Identifier:
                keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3261663a3a2f34382d3438203d3e203539323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:d680:2af::/48

    Signature Algorithm: sha256WithRSAEncryption
         14:e6:5a:2e:c2:40:cc:a3:22:dd:7a:5f:ac:70:2b:95:92:5d:
         77:78:dc:6e:70:17:2a:79:bf:41:06:0f:69:16:06:c7:4e:5a:
         11:55:59:0f:1c:90:0e:59:0b:22:38:d7:48:5d:35:c0:65:86:
         32:2b:cc:d7:ef:3f:bb:d1:1c:d2:ba:8e:20:c7:85:43:29:77:
         37:0f:bc:40:33:8d:56:64:9b:78:8c:2f:ec:d6:ea:73:7f:34:
         03:4b:a4:99:a2:75:d6:47:87:05:b8:0a:ec:88:cc:93:23:ad:
         03:9b:ce:22:84:17:0a:56:13:cc:51:6a:ab:40:81:51:2a:f9:
         d5:ac:96:22:c7:dc:9b:1b:fa:e4:32:3e:d9:66:5c:aa:55:16:
         6d:34:bb:76:eb:39:7d:74:33:5d:dd:82:1a:06:e9:52:b0:38:
         24:3a:9b:df:dc:c2:2a:d5:53:f3:7f:08:11:5a:94:d1:61:41:
         67:20:3f:fb:80:b0:b9:8e:d2:92:f5:a0:7f:d0:92:8f:f9:dc:
         d3:f2:fb:16:cc:b5:22:7d:30:24:0b:77:fc:3c:9c:c2:eb:2b:
         98:ee:bd:c7:0a:63:f2:a3:2c:7a:2e:b7:7c:a5:b9:ce:b0:5d:
         e3:c4:0b:ce:1f:07:41:27:86:0d:13:3d:68:b8:34:50:c6:ab:
         ff:f1:a9:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:14 2024 by rpki-client on console-fra.rpki-client.org