Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3331643a3a2f34382d3438203d3e203539323832.roa
File:                     323430303a643638303a3331643a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier:          FhGAdU5XmNs5va68GgNhVNEPm2l5PKggX9ui2Nr4M1s=
Subject key identifier:   C0:DE:50:68:08:72:E4:1A:CB:12:32:A0:8F:B1:C9:69:FD:D2:5C:FE
Certificate issuer:       /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial:       6A0CCE4C44DA4CD1C31B7401B8387BEFD32C1E9F
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3331643a3a2f34382d3438203d3e203539323832.roa
Signing time:             Mon 26 Sep 2022 10:00:06 +0000
ROA not before:           Mon 26 Sep 2022 09:55:06 +0000
ROA not after:            Mon 25 Sep 2023 10:00:06 +0000
asID:                     59282
IP address blocks:        2400:d680:31d::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:0c:ce:4c:44:da:4c:d1:c3:1b:74:01:b8:38:7b:ef:d3:2c:1e:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
        Validity
            Not Before: Sep 26 09:55:06 2022 GMT
            Not After : Sep 25 10:00:06 2023 GMT
        Subject: CN=C0DE50680872E41ACB1232A08FB1C969FDD25CFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:17:10:3f:68:21:27:6f:a7:2e:81:00:32:58:
                    d8:4d:7a:00:71:e0:4d:4a:70:aa:94:8d:69:64:08:
                    db:8c:66:cc:a3:56:81:c5:91:eb:ee:a0:c4:75:d8:
                    a3:0a:ab:98:43:ff:64:6d:de:02:ea:db:d0:66:81:
                    f6:0f:c0:dc:ad:fa:63:a4:fb:7c:fb:f1:00:97:31:
                    22:f6:7f:26:9e:48:90:be:f9:02:57:09:b4:62:b7:
                    60:c0:f9:e1:d5:67:2e:51:e7:24:1f:ce:c5:77:3f:
                    69:f7:f8:5d:15:6e:fc:22:48:53:8b:cc:2c:21:52:
                    fc:cd:1d:ae:b4:cf:6e:b8:d4:7a:68:53:23:f3:38:
                    dd:66:18:71:bb:ed:ef:e1:26:35:86:34:ff:9c:d4:
                    6d:33:f4:cf:98:77:ab:37:19:95:ad:3c:1c:9b:f5:
                    5b:5f:9a:ea:13:db:1a:e0:53:f6:80:bf:31:4a:6e:
                    17:1f:ca:7c:52:90:0e:0c:a4:55:a2:4b:5d:5b:ab:
                    82:41:9a:91:d4:4c:f1:64:1b:27:da:c7:ce:cc:40:
                    69:3b:3c:0c:87:03:65:59:e4:08:4c:07:5a:41:18:
                    41:aa:70:8f:34:11:5b:cf:64:6f:50:2b:a8:97:12:
                    1b:4b:48:17:1c:ac:0a:aa:73:ff:b9:d2:2e:42:81:
                    38:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:DE:50:68:08:72:E4:1A:CB:12:32:A0:8F:B1:C9:69:FD:D2:5C:FE
            X509v3 Authority Key Identifier:
                keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3331643a3a2f34382d3438203d3e203539323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:d680:31d::/48

    Signature Algorithm: sha256WithRSAEncryption
         56:bb:6a:23:44:3e:c9:3c:21:08:b5:de:0b:8b:1e:00:d0:2e:
         a1:9e:27:5f:4b:4d:ea:e8:0c:99:24:0d:5b:60:31:82:95:0f:
         59:c1:ab:2b:e2:06:91:ca:e8:06:6d:9f:b7:45:d5:e4:89:35:
         31:38:05:e3:cc:a9:f0:64:de:47:c5:a9:43:11:74:f3:71:94:
         e6:56:01:aa:00:88:cb:75:b3:b5:7b:52:c2:88:c8:fe:3c:52:
         0f:82:9b:b4:37:4a:75:69:d9:29:66:60:98:6f:65:e1:89:dd:
         cb:ff:46:c8:2e:08:3a:7d:91:51:33:1d:6b:64:4a:66:70:7a:
         fb:8a:51:b0:44:74:1c:1a:ec:f7:71:f2:32:3d:6b:ce:bb:73:
         3c:50:25:64:65:d1:f7:2b:40:4b:96:50:52:de:52:e7:9a:40:
         6f:6a:2c:0a:64:06:0e:6f:28:bc:0a:bd:43:80:19:43:68:0c:
         ea:7c:a5:e4:99:07:3b:db:06:3f:0f:06:cb:0d:0e:8f:04:44:
         95:65:9d:4c:7b:7e:73:1e:bd:1c:ac:96:4e:1d:bc:7a:f4:90:
         5d:e2:62:c9:4b:3b:b4:ff:49:b0:43:c1:53:4b:c5:b6:cb:db:
         2d:ab:be:c4:08:be:76:a9:66:cb:b2:5c:09:8d:f4:f8:50:a6:
         b9:db:66:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:51 2024 by rpki-client on console-ams.rpki-client.org