Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3262353a3a2f34382d3438203d3e203539323832.roa
File:                     323430303a643638303a3262353a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier:          VmZ7KYY4tDtvlxca3DLiJsez/6tFY8S4gyTo6T465W0=
Subject key identifier:   97:16:D0:ED:9A:C0:4F:48:A4:D2:C0:7B:87:F7:EF:CB:45:50:46:C2
Certificate issuer:       /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial:       0EB0531032E73761322DC3CF63BE79D55E470488
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3262353a3a2f34382d3438203d3e203539323832.roa
Signing time:             Mon 26 Sep 2022 13:00:12 +0000
ROA not before:           Mon 26 Sep 2022 12:55:12 +0000
ROA not after:            Mon 25 Sep 2023 13:00:12 +0000
asID:                     59282
IP address blocks:        2400:d680:2b5::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:b0:53:10:32:e7:37:61:32:2d:c3:cf:63:be:79:d5:5e:47:04:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
        Validity
            Not Before: Sep 26 12:55:12 2022 GMT
            Not After : Sep 25 13:00:12 2023 GMT
        Subject: CN=9716D0ED9AC04F48A4D2C07B87F7EFCB455046C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:46:4a:85:d4:f3:de:29:ba:5d:ca:d2:b6:9a:
                    0c:d6:9d:fd:8e:82:4a:a5:ef:b1:e3:96:6d:45:97:
                    61:d1:3f:51:7d:86:de:85:39:1c:f3:a5:d0:36:51:
                    70:fa:c3:af:04:af:8a:e1:50:90:b9:01:19:3c:f6:
                    25:13:97:49:c4:eb:cf:6d:ce:fe:91:58:45:d7:2a:
                    14:9f:4e:8f:72:83:4b:c7:7b:1b:e2:a2:cb:37:33:
                    16:00:e7:ec:2b:8e:16:f3:48:b0:ae:02:bf:48:08:
                    bc:34:2e:79:f8:44:d8:70:7d:35:cd:56:01:a3:73:
                    13:11:90:56:e1:93:7c:3f:01:40:9f:58:bd:f5:42:
                    b8:68:e6:a5:f5:b5:b7:66:c2:a0:d0:b2:de:3e:a3:
                    e2:9c:90:ec:18:19:7a:a2:9d:84:44:22:9d:1e:20:
                    7f:2f:b8:00:c0:60:db:23:ab:fa:b9:26:73:db:9a:
                    21:71:22:3c:ff:f0:97:61:9d:ef:1f:7a:66:90:79:
                    92:2e:75:ac:3a:30:8c:94:35:0c:58:fa:4a:29:f9:
                    7a:af:4e:d8:b6:b0:ae:c6:47:2e:92:07:96:6e:ab:
                    b5:14:39:0c:5a:40:64:ae:a0:8c:29:7c:54:8d:3c:
                    cc:3d:24:4c:1c:49:ed:20:f5:f8:f3:e7:6a:b3:b1:
                    c5:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:16:D0:ED:9A:C0:4F:48:A4:D2:C0:7B:87:F7:EF:CB:45:50:46:C2
            X509v3 Authority Key Identifier:
                keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3262353a3a2f34382d3438203d3e203539323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:d680:2b5::/48

    Signature Algorithm: sha256WithRSAEncryption
         66:83:f6:a4:82:8b:4c:ba:19:4d:89:3f:b3:b6:85:f3:c9:cf:
         4d:ec:a9:8e:43:2c:8e:ee:3a:73:1c:af:4e:70:01:f6:0d:fa:
         14:71:52:21:77:d9:92:c0:b5:c6:72:68:a3:32:d3:5d:26:b9:
         60:06:0e:94:c5:6b:62:38:1c:df:50:be:db:59:9b:6d:ec:ed:
         22:9e:93:25:44:fe:07:0b:e7:44:5b:ac:5b:6d:aa:00:95:7e:
         90:48:1c:d1:c8:1f:29:71:8a:23:c7:a4:d6:14:e1:89:40:fb:
         60:33:71:fb:2b:3b:6f:59:12:10:bf:b0:f5:c0:fd:cb:c4:fb:
         26:cc:17:3a:35:10:4a:43:e2:0e:98:32:c9:46:89:ee:d4:d4:
         b3:ed:ca:91:1c:55:71:bf:99:6f:4a:40:b0:90:e0:94:79:a9:
         77:69:ed:15:97:13:f5:3a:38:7b:d5:a4:e3:26:df:35:f4:89:
         be:a4:b2:6a:3b:32:28:bc:b1:92:6b:f8:1b:ce:40:40:c9:cd:
         6f:05:38:95:ec:33:99:86:e6:46:f0:81:ef:3d:8f:9a:4e:94:
         de:12:dd:33:48:46:56:5c:dd:50:80:fd:7f:62:bd:eb:5e:e5:
         78:b7:c2:b5:77:39:2a:a7:db:02:29:1d:be:0a:f9:3a:6b:74:
         2b:d7:ea:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:14 2024 by rpki-client on console-fra.rpki-client.org