Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3266653a3a2f34382d3438203d3e203539323832.roa
File:                     323430303a643638303a3266653a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier:          rFpvu39ls/W1xeIlh8VxNX5VeK0l9uCF4752g427b+I=
Subject key identifier:   92:BC:91:C1:7C:FB:14:60:9A:82:BF:48:C3:08:D0:BA:7B:D8:FE:27
Certificate issuer:       /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial:       4727548697DBA61594FD60E849671D7E49A1437A
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3266653a3a2f34382d3438203d3e203539323832.roa
Signing time:             Mon 26 Sep 2022 13:00:09 +0000
ROA not before:           Mon 26 Sep 2022 12:55:09 +0000
ROA not after:            Mon 25 Sep 2023 13:00:09 +0000
asID:                     59282
IP address blocks:        2400:d680:2fe::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:27:54:86:97:db:a6:15:94:fd:60:e8:49:67:1d:7e:49:a1:43:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
        Validity
            Not Before: Sep 26 12:55:09 2022 GMT
            Not After : Sep 25 13:00:09 2023 GMT
        Subject: CN=92BC91C17CFB14609A82BF48C308D0BA7BD8FE27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:1c:47:f0:ff:1a:e7:34:11:48:36:00:44:79:
                    20:6a:eb:80:7f:fc:75:0e:58:05:0c:a5:8a:1d:ba:
                    2b:a9:e1:b6:a7:e0:48:95:3d:4b:95:3c:32:2b:b1:
                    4b:30:8a:f3:56:95:ad:12:2a:b2:f9:d7:a2:60:01:
                    95:ca:a9:b2:51:eb:f6:c2:fb:8f:ab:bd:03:f6:b2:
                    8e:d7:fd:f9:dd:1c:f1:22:28:62:e2:d3:e4:86:ea:
                    bd:60:21:8a:7c:2e:df:c8:ad:56:34:e1:ab:06:48:
                    fc:0d:08:49:a6:6e:01:9f:a2:05:d8:c7:8b:33:d3:
                    b4:2b:64:1f:d5:9a:1d:05:95:21:32:37:f2:6d:6c:
                    8e:d1:41:02:73:64:69:3a:16:83:8c:29:24:1b:28:
                    8f:f5:b2:94:91:ab:cd:c8:23:9a:a6:8d:3d:98:ce:
                    c2:80:de:be:68:ac:91:3b:07:04:01:b8:85:1c:2f:
                    11:4c:ab:ed:ed:15:93:22:93:f2:ad:93:1c:28:d6:
                    3d:b3:d0:08:00:7c:85:18:32:65:f8:99:ee:5b:d1:
                    34:a5:1c:b5:c9:5e:26:1e:b2:dd:a4:b7:53:d2:b5:
                    3d:38:c6:a4:78:1f:22:bd:54:32:77:a9:63:84:53:
                    10:29:b7:f3:38:9f:6d:d6:53:d0:0c:65:56:1d:fe:
                    b3:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:BC:91:C1:7C:FB:14:60:9A:82:BF:48:C3:08:D0:BA:7B:D8:FE:27
            X509v3 Authority Key Identifier:
                keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3266653a3a2f34382d3438203d3e203539323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:d680:2fe::/48

    Signature Algorithm: sha256WithRSAEncryption
         6f:aa:c2:e6:2f:77:a7:9c:2a:61:fd:eb:d9:bd:4b:14:d5:2b:
         66:65:9b:ad:20:ae:ed:5b:27:2b:08:33:7c:4f:8c:76:7f:88:
         56:71:9f:c8:cb:45:28:7a:5f:82:6c:9b:5b:fc:29:a4:f0:7a:
         8d:a2:bc:7d:9d:77:e2:d0:a7:63:3f:37:95:cc:59:68:f5:41:
         ff:dd:96:38:de:69:09:49:a0:aa:00:9a:7f:02:3e:e5:5a:0b:
         bd:16:c4:fa:fa:fc:cc:89:5a:49:fa:40:d2:06:7d:86:2e:a9:
         8f:bd:e2:ab:1d:c8:d4:32:f8:d9:3a:10:ab:0c:4e:0c:01:06:
         25:42:0d:7d:1d:9e:25:e3:f7:68:a0:c2:4e:c9:16:19:da:4d:
         f7:a4:22:16:4c:e8:c8:0b:69:02:fc:8a:a0:2f:cd:6a:30:7d:
         0b:2b:5c:a3:0c:0d:5f:3c:60:7a:d1:52:0b:32:3c:64:ba:2c:
         cf:73:49:5e:e3:47:e7:95:22:12:5a:a3:89:e0:85:90:ae:f0:
         86:54:6c:67:c3:01:fd:cf:40:b1:56:40:ae:3c:94:cd:db:9a:
         f0:66:cc:d0:19:2d:1b:b2:43:ff:5f:c2:76:5e:de:4e:33:e5:
         69:36:17:8c:53:13:35:72:ee:06:a5:db:f0:d7:70:d5:34:ec:
         52:17:50:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:50 2024 by rpki-client on console-ams.rpki-client.org