Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3263653a3a2f34382d3438203d3e203539323832.roa
File:                     323430303a643638303a3263653a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier:          gzGGMuP6L3lndCnY3ikNI9SNHz8TmBii4rpQ9x/VApY=
Subject key identifier:   D7:60:E1:0E:1C:91:C3:03:5D:10:07:9D:6D:2C:69:CA:75:23:EB:24
Certificate issuer:       /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial:       370A0A202761E63FD2E17A77F1C4B8361E715126
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3263653a3a2f34382d3438203d3e203539323832.roa
Signing time:             Mon 26 Sep 2022 13:00:21 +0000
ROA not before:           Mon 26 Sep 2022 12:55:21 +0000
ROA not after:            Mon 25 Sep 2023 13:00:21 +0000
asID:                     59282
IP address blocks:        2400:d680:2ce::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:0a:0a:20:27:61:e6:3f:d2:e1:7a:77:f1:c4:b8:36:1e:71:51:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
        Validity
            Not Before: Sep 26 12:55:21 2022 GMT
            Not After : Sep 25 13:00:21 2023 GMT
        Subject: CN=D760E10E1C91C3035D10079D6D2C69CA7523EB24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:ea:25:9e:3d:81:00:54:72:0d:e0:dd:b4:cd:
                    2b:16:67:1e:6b:80:ac:e2:d2:9c:e9:6c:a8:6e:1d:
                    11:a6:b0:2c:77:f6:db:a8:c6:28:eb:1b:1e:71:21:
                    df:b8:4b:cd:01:23:55:b2:33:30:34:64:fb:09:93:
                    4c:68:24:b7:61:57:79:09:58:fd:5f:fd:fd:8d:ac:
                    e5:00:26:33:e6:27:29:88:47:c8:d4:6f:2b:fd:22:
                    c1:92:5b:e0:cb:8a:9a:b1:29:30:eb:74:7b:2a:15:
                    ef:85:d6:c8:f5:c9:d2:4d:aa:71:c2:56:f0:46:10:
                    11:d5:28:a8:b9:cd:2d:d4:81:30:10:3a:b5:03:36:
                    3a:ff:ba:76:b7:a8:9a:29:cb:7c:26:b4:9d:92:e2:
                    d2:97:46:79:6b:9c:27:11:29:24:17:cb:9d:fa:95:
                    f1:ed:04:92:55:95:7e:9e:76:21:a6:88:8d:c9:d4:
                    f7:89:3f:3c:55:cc:6f:32:23:fa:4f:ec:db:34:41:
                    ec:32:e6:03:c4:9d:05:e8:27:ff:ee:d1:a6:b4:fe:
                    d5:89:c7:f7:cd:68:9c:d5:e8:6a:77:78:83:60:38:
                    3d:58:ab:ce:d4:89:30:58:22:ff:b1:4f:a1:c2:32:
                    60:5e:7f:67:a0:03:8d:77:a3:d0:77:af:43:f9:fb:
                    85:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:60:E1:0E:1C:91:C3:03:5D:10:07:9D:6D:2C:69:CA:75:23:EB:24
            X509v3 Authority Key Identifier:
                keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3263653a3a2f34382d3438203d3e203539323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:d680:2ce::/48

    Signature Algorithm: sha256WithRSAEncryption
         d7:a9:92:b9:68:d2:1e:a5:1f:9c:d7:8b:45:9e:37:0b:ae:01:
         a7:9e:c3:3b:02:db:3a:c5:2d:70:87:b1:d3:67:83:e8:1e:39:
         62:ef:b3:ff:4d:4a:b7:45:0d:d7:f7:58:56:a3:c1:1f:5e:bb:
         da:af:ef:fe:c4:d4:5f:66:bd:c5:f5:88:cd:d8:0e:49:b9:b4:
         05:cd:a7:1c:ca:f2:34:13:53:4c:9f:f1:89:de:db:6d:9f:35:
         2e:2b:ed:5f:b0:02:9f:59:7c:b8:4b:e8:98:70:e0:24:f8:ca:
         04:4d:6e:cb:91:19:1a:be:50:3a:e9:5a:b9:43:17:c7:fd:5d:
         1e:51:a2:28:a9:9f:6f:e9:2a:2b:33:86:be:b7:48:b4:4f:14:
         ee:4e:78:cc:e5:6c:cd:8a:f0:7e:c7:80:73:94:95:6e:2c:f3:
         11:bb:03:8b:ff:0b:c7:88:96:ce:bb:f1:07:b1:2d:7e:9f:d2:
         ea:fd:4d:32:69:fd:df:da:c8:c5:53:92:da:9c:18:0a:2b:28:
         8f:61:a0:60:84:07:0e:6c:c6:18:0c:18:36:42:49:4b:ca:50:
         8c:44:5c:a7:ba:25:d8:40:aa:f1:59:34:c0:82:22:1f:9e:23:
         93:7a:d4:98:67:8c:e9:d2:62:0f:63:29:bb:4d:53:c4:31:e5:
         f9:ad:a9:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:14 2024 by rpki-client on console-fra.rpki-client.org