Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3265373a3a2f34382d3438203d3e203539323832.roa
File:                     323430303a643638303a3265373a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier:          6VTl9zMloUyGZT8a0mA9OEdPyzXsLz0xAeEGDYS1AHM=
Subject key identifier:   ED:02:79:2F:8E:F7:31:9E:3C:24:89:31:DA:6C:C0:BC:1E:02:63:8D
Certificate issuer:       /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial:       06D345A6D451A729BF745E83CD8A0A1E050CFAEA
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3265373a3a2f34382d3438203d3e203539323832.roa
Signing time:             Mon 26 Sep 2022 13:00:19 +0000
ROA not before:           Mon 26 Sep 2022 12:55:19 +0000
ROA not after:            Mon 25 Sep 2023 13:00:19 +0000
asID:                     59282
IP address blocks:        2400:d680:2e7::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:d3:45:a6:d4:51:a7:29:bf:74:5e:83:cd:8a:0a:1e:05:0c:fa:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
        Validity
            Not Before: Sep 26 12:55:19 2022 GMT
            Not After : Sep 25 13:00:19 2023 GMT
        Subject: CN=ED02792F8EF7319E3C248931DA6CC0BC1E02638D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c5:a2:58:02:36:40:93:af:80:75:f9:ac:ef:
                    ae:1d:11:6f:13:cc:40:70:eb:98:20:9e:17:94:de:
                    6f:74:86:50:39:77:e4:1c:3f:eb:68:23:ba:4e:5a:
                    29:01:21:da:42:28:0e:dd:73:6b:0d:98:ff:8a:4c:
                    bc:35:2a:0b:38:9c:44:34:83:96:6c:67:7e:b6:07:
                    34:f7:bb:69:fa:bd:9b:6c:9c:d5:cb:61:e5:37:02:
                    94:37:74:08:fd:2e:dd:e0:f3:ff:92:67:10:97:9e:
                    78:e4:3f:6d:b4:26:e4:d1:bd:89:b9:93:0c:c5:7e:
                    83:2e:4b:a6:ac:ed:f8:07:e5:54:36:bb:1a:2a:d3:
                    47:59:bb:18:79:4b:e7:65:7f:de:63:f0:3c:fa:c6:
                    c9:e2:38:2b:ed:9c:9d:53:ab:cd:b9:5a:5b:0c:2c:
                    07:95:1a:fa:61:60:24:d7:43:b0:f9:c5:01:ef:ab:
                    91:7e:9c:b5:5c:77:c3:59:de:ac:f5:1d:56:91:ee:
                    6b:8c:71:00:6c:07:d0:db:71:2d:b4:2d:f7:1e:40:
                    12:cb:61:fd:2c:58:d2:0e:6b:5d:be:1a:d8:85:0b:
                    c7:47:d0:26:68:44:4f:ac:74:1b:2e:95:18:a4:3c:
                    8f:81:24:24:1b:e1:a4:91:81:6b:6e:c7:5d:e6:79:
                    13:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:02:79:2F:8E:F7:31:9E:3C:24:89:31:DA:6C:C0:BC:1E:02:63:8D
            X509v3 Authority Key Identifier:
                keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3265373a3a2f34382d3438203d3e203539323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:d680:2e7::/48

    Signature Algorithm: sha256WithRSAEncryption
         69:e4:e6:e5:a7:35:a8:da:69:8c:cc:9e:5d:88:fc:61:75:1a:
         ad:2d:31:99:51:a7:fa:e5:69:cd:9b:08:76:d8:45:b6:11:3e:
         bf:2b:33:d6:56:ca:bf:62:28:85:32:fb:e5:0e:75:5e:01:e6:
         85:22:4b:8b:c5:db:12:29:6b:88:42:a6:62:95:14:e5:07:ef:
         aa:8e:38:bb:84:ad:ef:f2:0d:05:7f:d7:c2:ca:8d:62:f0:fc:
         02:bc:72:32:4a:3b:71:b4:56:b2:4a:1b:ad:22:98:6c:f8:4a:
         d5:ce:c0:ee:c0:3f:1c:ac:c1:90:98:8a:90:7e:93:1b:56:39:
         a4:2b:75:56:78:a9:49:a8:7c:63:31:44:a6:7e:0c:d1:4c:c0:
         80:ea:af:85:16:21:1c:92:3a:39:54:fb:92:65:df:75:fc:d4:
         e6:4a:f7:97:a2:b6:f7:a6:5d:49:4a:68:a7:69:83:ed:13:56:
         73:58:12:91:2b:b3:6d:fc:69:dc:ad:df:e0:cf:c3:35:b8:84:
         98:f3:03:44:7e:51:6a:44:76:a2:4c:1e:22:97:71:2b:f6:9b:
         ef:95:69:65:89:9f:88:21:0e:c5:39:0a:c6:cf:fa:36:3c:eb:
         e8:ee:f2:b5:74:91:40:46:76:4a:a9:07:e4:9a:13:9a:e9:0f:
         5d:f1:cb:02
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUBtNFptRRpym/dF6DzYoKHgUM+uowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJG
MDBFNzFBQTAeFw0yMjA5MjYxMjU1MTlaFw0yMzA5MjUxMzAwMTlaMDMxMTAvBgNV
BAMTKEVEMDI3OTJGOEVGNzMxOUUzQzI0ODkzMURBNkNDMEJDMUUwMjYzOEQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCvxaJYAjZAk6+Adfms764dEW8T
zEBw65ggnheU3m90hlA5d+QcP+toI7pOWikBIdpCKA7dc2sNmP+KTLw1Kgs4nEQ0
g5ZsZ362BzT3u2n6vZtsnNXLYeU3ApQ3dAj9Lt3g8/+SZxCXnnjkP220JuTRvYm5
kwzFfoMuS6as7fgH5VQ2uxoq00dZuxh5S+dlf95j8Dz6xsniOCvtnJ1Tq825WlsM
LAeVGvphYCTXQ7D5xQHvq5F+nLVcd8NZ3qz1HVaR7muMcQBsB9DbcS20LfceQBLL
Yf0sWNIOa12+GtiFC8dH0CZoRE+sdBsulRikPI+BJCQb4aSRgWtux13meRP5AgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQU7QJ5L473MZ48JIkx2mzAvB4CY40wHwYDVR0j
BBgwFoAUY5RzzSBUp4s5+ax6gyMkYvAOcaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
ODQ2NGE1Yi0yZmNlLTQ3ZGEtODA0Ny02OGQyYmQ2M2M5YzMvMC82Mzk0NzNDRDIw
NTRBNzhCMzlGOUFDN0E4MzIzMjQ2MkYwMEU3MUFBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJGMDBF
NzFBQS5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E4NDY0YTViLTJmY2UtNDdkYS04
MDQ3LTY4ZDJiZDYzYzljMy8wLzMyMzQzMDMwM2E2NDM2MzgzMDNhMzI2NTM3M2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzUzOTMyMzgzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQA1oAC
5zANBgkqhkiG9w0BAQsFAAOCAQEAaeTm5ac1qNppjMyeXYj8YXUarS0xmVGn+uVp
zZsIdthFthE+vysz1lbKv2IohTL75Q51XgHmhSJLi8XbEilriEKmYpUU5Qfvqo44
u4St7/INBX/XwsqNYvD8ArxyMko7cbRWskobrSKYbPhK1c7A7sA/HKzBkJiKkH6T
G1Y5pCt1VnipSah8YzFEpn4M0UzAgOqvhRYhHJI6OVT7kmXfdfzU5kr3l6K296Zd
SUpop2mD7RNWc1gSkSuzbfxp3K3f4M/DNbiEmPMDRH5RakR2okweIpdxK/ab75Vp
ZYmfiCEOxTkKxs/6Njzr6O7ytXSRQEZ2SqkH5JoTmukPXfHLAg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:50 2024 by rpki-client on console-ams.rpki-client.org