Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3332323a3a2f34382d3438203d3e203539323832.roa
File:                     323430303a643638303a3332323a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier:          s/Nv0aaO3e0afEj/X4y97djegCbb+5TYOZdCybi7TgQ=
Subject key identifier:   53:58:FF:E5:DC:2C:5F:FB:87:36:23:3E:01:4D:FD:B7:4A:01:D9:46
Certificate issuer:       /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial:       53050D1EBE40B73C08338C5C15D03E604EFF1855
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3332323a3a2f34382d3438203d3e203539323832.roa
Signing time:             Mon 26 Sep 2022 10:00:26 +0000
ROA not before:           Mon 26 Sep 2022 09:55:26 +0000
ROA not after:            Mon 25 Sep 2023 10:00:26 +0000
asID:                     59282
IP address blocks:        2400:d680:322::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:05:0d:1e:be:40:b7:3c:08:33:8c:5c:15:d0:3e:60:4e:ff:18:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
        Validity
            Not Before: Sep 26 09:55:26 2022 GMT
            Not After : Sep 25 10:00:26 2023 GMT
        Subject: CN=5358FFE5DC2C5FFB8736233E014DFDB74A01D946
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:34:fb:d0:8c:c2:85:fa:da:86:f7:ec:41:ad:
                    7f:ea:cb:26:a2:5e:b0:11:80:f8:95:7a:7c:33:3a:
                    45:ad:b8:55:6e:06:bd:de:f8:fb:88:74:90:ca:3d:
                    98:cd:48:f5:10:3d:36:a8:06:c9:e9:8c:ab:cd:11:
                    36:17:ab:18:32:19:43:ab:cb:5f:81:29:c3:5b:be:
                    27:42:0a:54:0a:9e:f8:7c:5d:98:f2:51:b1:9b:ec:
                    b5:11:8a:e0:6d:39:fc:db:fb:5f:28:1b:99:a4:99:
                    2e:30:5e:a8:e0:e0:ca:ad:bd:0b:c5:38:1e:bf:f5:
                    62:18:af:26:4e:49:c9:9b:61:b5:5b:fb:f5:07:16:
                    5a:dd:eb:c2:0f:eb:9f:0f:79:89:2c:c0:1a:0b:0b:
                    6f:20:f7:8e:f0:34:aa:05:ff:1a:70:6a:84:cf:12:
                    31:5e:6c:6e:c6:19:4c:51:0b:b9:b0:07:6a:dd:f8:
                    73:65:c0:30:ca:2d:c8:9d:db:7d:b6:e5:99:65:ef:
                    25:43:31:29:92:67:13:a6:89:17:40:bf:ac:67:e9:
                    b8:29:75:26:45:6e:5e:d4:da:0c:51:68:45:7e:69:
                    f6:ec:77:9d:2d:b8:65:a7:c7:b0:e8:60:ec:57:2c:
                    87:39:ce:bb:ef:5e:53:cc:f2:a2:6a:7a:f3:b3:ef:
                    e0:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:58:FF:E5:DC:2C:5F:FB:87:36:23:3E:01:4D:FD:B7:4A:01:D9:46
            X509v3 Authority Key Identifier:
                keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3332323a3a2f34382d3438203d3e203539323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:d680:322::/48

    Signature Algorithm: sha256WithRSAEncryption
         9f:c8:09:1c:d8:b8:aa:79:8d:8f:04:6e:8c:15:7d:f0:a2:19:
         c3:4f:5e:3d:2c:4e:f7:2f:0f:fc:24:44:bf:86:5d:41:cf:1f:
         43:21:57:27:26:34:24:d3:9a:d5:a6:31:00:55:22:d6:89:b0:
         8d:ee:cd:e1:ab:e3:c3:d0:0d:eb:f3:ef:40:51:16:8f:8e:31:
         22:df:08:9e:24:d9:39:f9:36:81:73:89:2a:5f:3a:2a:25:24:
         18:37:82:98:6d:94:8b:39:9b:53:10:df:2d:91:b2:24:2d:f6:
         01:21:b5:4f:eb:a3:19:83:8f:72:8d:6d:bc:92:e3:ed:ca:2c:
         78:90:06:bd:8c:87:e1:24:9c:91:9b:83:ee:10:c2:c6:58:8f:
         c7:ab:7e:62:1d:54:b7:75:f3:34:65:fe:53:d6:35:ba:ac:8d:
         38:4b:d0:25:c6:6f:1e:32:4a:99:01:a4:95:b4:33:0c:dd:72:
         bc:7b:ef:61:62:36:ed:32:b2:cc:18:df:28:b3:b6:8a:59:34:
         df:2a:44:18:97:63:51:64:b7:16:6e:69:dc:c6:02:23:24:c7:
         64:59:2f:20:31:1f:0e:da:1e:1d:a4:b6:f9:6c:d9:5d:78:d4:
         fc:59:d9:d5:ae:c6:75:90:bb:8f:75:64:99:39:c6:10:d6:ad:
         17:3b:20:b7
-----BEGIN CERTIFICATE-----
MIIFMTCCBBmgAwIBAgIUUwUNHr5AtzwIM4xcFdA+YE7/GFUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJG
MDBFNzFBQTAeFw0yMjA5MjYwOTU1MjZaFw0yMzA5MjUxMDAwMjZaMDMxMTAvBgNV
BAMTKDUzNThGRkU1REMyQzVGRkI4NzM2MjMzRTAxNERGREI3NEEwMUQ5NDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDNPvQjMKF+tqG9+xBrX/qyyai
XrARgPiVenwzOkWtuFVuBr3e+PuIdJDKPZjNSPUQPTaoBsnpjKvNETYXqxgyGUOr
y1+BKcNbvidCClQKnvh8XZjyUbGb7LURiuBtOfzb+18oG5mkmS4wXqjg4MqtvQvF
OB6/9WIYryZOScmbYbVb+/UHFlrd68IP658PeYkswBoLC28g947wNKoF/xpwaoTP
EjFebG7GGUxRC7mwB2rd+HNlwDDKLcid23225Zll7yVDMSmSZxOmiRdAv6xn6bgp
dSZFbl7U2gxRaEV+afbsd50tuGWnx7DoYOxXLIc5zrvvXlPM8qJqevOz7+DXAgMB
AAGjggI7MIICNzAdBgNVHQ4EFgQUU1j/5dwsX/uHNiM+AU39t0oB2UYwHwYDVR0j
BBgwFoAUY5RzzSBUp4s5+ax6gyMkYvAOcaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
ODQ2NGE1Yi0yZmNlLTQ3ZGEtODA0Ny02OGQyYmQ2M2M5YzMvMC82Mzk0NzNDRDIw
NTRBNzhCMzlGOUFDN0E4MzIzMjQ2MkYwMEU3MUFBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJGMDBF
NzFBQS5jZXIwgagGCCsGAQUFBwELBIGbMIGYMIGVBggrBgEFBQcwC4aBiHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E4NDY0YTViLTJmY2UtNDdkYS04
MDQ3LTY4ZDJiZDYzYzljMy8wLzMyMzQzMDMwM2E2NDM2MzgzMDNhMzMzMjMyM2Ez
YTJmMzQzODJkMzQzODIwM2QzZTIwMzUzOTMyMzgzMi5yb2EwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAiBggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACQA1oAD
IjANBgkqhkiG9w0BAQsFAAOCAQEAn8gJHNi4qnmNjwRujBV98KIZw09ePSxO9y8P
/CREv4ZdQc8fQyFXJyY0JNOa1aYxAFUi1omwje7N4avjw9AN6/PvQFEWj44xIt8I
niTZOfk2gXOJKl86KiUkGDeCmG2UizmbUxDfLZGyJC32ASG1T+ujGYOPco1tvJLj
7coseJAGvYyH4SSckZuD7hDCxliPx6t+Yh1Ut3XzNGX+U9Y1uqyNOEvQJcZvHjJK
mQGklbQzDN1yvHvvYWI27TKyzBjfKLO2ilk03ypEGJdjUWS3Fm5p3MYCIyTHZFkv
IDEfDtoeHaS2+WzZXXjU/FnZ1a7GdZC7j3VkmTnGENatFzsgtw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:14 2024 by rpki-client on console-fra.rpki-client.org