Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3330623a3a2f34382d3438203d3e203539323832.roa
File:                     323430303a643638303a3330623a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier:          wVjg7U2XcKah+c1CjBSrCdXrSJxKM/nxiVyiRzvn59s=
Subject key identifier:   80:F4:65:47:B2:AF:F3:4D:B8:C9:30:6C:96:E0:8A:63:4F:04:C6:7B
Certificate issuer:       /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial:       7579D096FE66F6FE34D385E0B8D957719D48F191
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3330623a3a2f34382d3438203d3e203539323832.roa
Signing time:             Mon 26 Sep 2022 10:00:28 +0000
ROA not before:           Mon 26 Sep 2022 09:55:28 +0000
ROA not after:            Mon 25 Sep 2023 10:00:28 +0000
asID:                     59282
IP address blocks:        2400:d680:30b::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:79:d0:96:fe:66:f6:fe:34:d3:85:e0:b8:d9:57:71:9d:48:f1:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
        Validity
            Not Before: Sep 26 09:55:28 2022 GMT
            Not After : Sep 25 10:00:28 2023 GMT
        Subject: CN=80F46547B2AFF34DB8C9306C96E08A634F04C67B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:78:b3:70:a0:a4:37:e9:7b:ea:f1:d4:ec:b5:
                    ff:4e:21:38:10:f1:da:5a:60:06:61:67:18:84:2c:
                    3c:f9:5f:3f:c4:d8:18:21:87:4b:7f:fa:c4:33:65:
                    f0:2d:20:8e:8d:ce:26:c6:29:0e:ef:d2:ac:66:83:
                    b0:a4:b9:20:b7:4e:89:ee:16:24:37:ee:35:b8:76:
                    15:5b:28:56:aa:1b:83:fe:94:8a:4e:27:3e:cd:1c:
                    06:47:72:51:a4:e1:e6:11:d8:c5:d7:ed:50:d1:dc:
                    98:24:d3:a6:51:3a:c9:e0:63:57:86:2a:d6:c0:86:
                    f2:28:20:31:55:5e:68:1d:ff:fd:2a:0a:34:29:64:
                    e5:10:63:c5:60:ef:2e:42:21:da:ce:10:ae:61:b8:
                    3a:4f:77:e5:5c:45:bd:b1:a2:45:ee:26:02:50:31:
                    29:bd:2b:84:d7:6a:b1:9c:76:1e:81:c7:25:f8:c7:
                    64:da:10:a4:cc:4f:56:c4:d4:49:45:70:95:40:4d:
                    eb:0c:28:04:d5:07:7c:f2:24:f8:8c:96:f8:74:4f:
                    50:b2:70:fe:75:c2:a6:9c:a4:56:7b:8c:67:53:9c:
                    90:0c:c4:e4:4b:dc:89:cb:7e:0a:c1:23:ef:88:81:
                    1e:78:32:c6:5a:26:05:34:65:4d:6f:aa:cb:44:65:
                    90:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:F4:65:47:B2:AF:F3:4D:B8:C9:30:6C:96:E0:8A:63:4F:04:C6:7B
            X509v3 Authority Key Identifier:
                keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3330623a3a2f34382d3438203d3e203539323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:d680:30b::/48

    Signature Algorithm: sha256WithRSAEncryption
         73:41:d7:ed:ad:e8:2f:15:ae:f3:ad:06:af:32:71:58:09:fe:
         32:23:92:b1:b2:3d:af:64:66:20:a2:26:bd:b4:78:79:cc:70:
         57:86:04:79:ea:3a:2e:86:59:98:b3:c3:ab:34:52:cf:ba:1f:
         5d:8c:fa:89:4f:3a:ff:77:29:9d:92:84:60:c5:67:7c:8a:9b:
         a3:61:fc:55:fb:cd:d6:eb:08:d3:be:e1:d6:02:dc:41:8a:ab:
         eb:53:17:35:f5:7b:f8:bd:68:a1:90:e9:19:28:03:a6:86:c5:
         5a:12:02:4d:8e:b4:cc:13:c3:ff:56:79:8d:88:ae:53:90:f7:
         cc:5e:a9:d8:f9:dd:85:dc:f4:0b:2e:92:bf:f3:d2:ed:f3:3c:
         a4:e7:f4:a3:14:9c:86:00:80:79:04:2d:a5:65:97:4a:ec:49:
         9c:7f:ef:6a:7e:6e:1d:4d:e1:ab:7e:95:69:32:da:89:f4:a5:
         2c:b2:e4:70:66:3f:b6:2a:9f:ad:86:30:b0:ac:1a:9f:ec:b8:
         37:bc:87:20:a8:12:17:90:11:6f:f0:90:72:e1:9a:58:51:64:
         f6:e3:3b:c3:f8:5d:41:8a:22:ed:03:42:01:4c:b3:f0:00:cf:
         28:65:fa:94:83:2e:09:9c:e8:9a:e3:a3:89:13:43:fc:a1:1d:
         5e:c6:49:96
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUdXnQlv5m9v4004XguNlXcZ1I8ZEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJG
MDBFNzFBQTAeFw0yMjA5MjYwOTU1MjhaFw0yMzA5MjUxMDAwMjhaMDMxMTAvBgNV
BAMTKDgwRjQ2NTQ3QjJBRkYzNERCOEM5MzA2Qzk2RTA4QTYzNEYwNEM2N0IwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCseLNwoKQ36Xvq8dTstf9OITgQ
8dpaYAZhZxiELDz5Xz/E2Bghh0t/+sQzZfAtII6NzibGKQ7v0qxmg7CkuSC3Tonu
FiQ37jW4dhVbKFaqG4P+lIpOJz7NHAZHclGk4eYR2MXX7VDR3Jgk06ZROsngY1eG
KtbAhvIoIDFVXmgd//0qCjQpZOUQY8Vg7y5CIdrOEK5huDpPd+VcRb2xokXuJgJQ
MSm9K4TXarGcdh6BxyX4x2TaEKTMT1bE1ElFcJVATesMKATVB3zyJPiMlvh0T1Cy
cP51wqacpFZ7jGdTnJAMxORL3InLfgrBI++IgR54MsZaJgU0ZU1vqstEZZAVAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUgPRlR7Kv8024yTBsluCKY08ExnswHwYDVR0j
BBgwFoAUY5RzzSBUp4s5+ax6gyMkYvAOcaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
ODQ2NGE1Yi0yZmNlLTQ3ZGEtODA0Ny02OGQyYmQ2M2M5YzMvMC82Mzk0NzNDRDIw
NTRBNzhCMzlGOUFDN0E4MzIzMjQ2MkYwMEU3MUFBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJGMDBF
NzFBQS5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E4NDY0YTViLTJmY2UtNDdkYS04
MDQ3LTY4ZDJiZDYzYzljMy8wLzMyMzQzMDMwM2E2NDM2MzgzMDNhMzMzMDYyM2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzUzOTMyMzgzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQA1oAD
CzANBgkqhkiG9w0BAQsFAAOCAQEAc0HX7a3oLxWu860GrzJxWAn+MiOSsbI9r2Rm
IKImvbR4ecxwV4YEeeo6LoZZmLPDqzRSz7ofXYz6iU86/3cpnZKEYMVnfIqbo2H8
VfvN1usI077h1gLcQYqr61MXNfV7+L1ooZDpGSgDpobFWhICTY60zBPD/1Z5jYiu
U5D3zF6p2Pndhdz0Cy6Sv/PS7fM8pOf0oxSchgCAeQQtpWWXSuxJnH/van5uHU3h
q36VaTLaifSlLLLkcGY/tiqfrYYwsKwan+y4N7yHIKgSF5ARb/CQcuGaWFFk9uM7
w/hdQYoi7QNCAUyz8ADPKGX6lIMuCZzomuOjiRND/KEdXsZJlg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:50 2024 by rpki-client on console-ams.rpki-client.org