Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3336643a3a2f34382d3438203d3e203539323832.roa
File:                     323430303a643638303a3336643a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier:          2orwAfUhzrM6tdecZsxCifh30UE//cm+irpmEp3/ZXM=
Subject key identifier:   46:1F:87:6B:9C:EA:4A:50:C3:9D:76:B8:76:51:BB:74:58:D6:69:B6
Certificate issuer:       /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial:       58350DCC841FA327271706D2D366A6D358624FCB
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3336643a3a2f34382d3438203d3e203539323832.roa
Signing time:             Mon 26 Sep 2022 11:00:31 +0000
ROA not before:           Mon 26 Sep 2022 10:55:31 +0000
ROA not after:            Mon 25 Sep 2023 11:00:31 +0000
asID:                     59282
IP address blocks:        2400:d680:36d::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:35:0d:cc:84:1f:a3:27:27:17:06:d2:d3:66:a6:d3:58:62:4f:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
        Validity
            Not Before: Sep 26 10:55:31 2022 GMT
            Not After : Sep 25 11:00:31 2023 GMT
        Subject: CN=461F876B9CEA4A50C39D76B87651BB7458D669B6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:54:66:7d:ac:ba:03:05:0f:83:c7:d9:af:ee:
                    9a:25:8a:52:50:67:d8:93:1d:5c:91:9d:3d:22:02:
                    73:4a:19:0a:41:a8:bc:d9:cf:0a:c3:1c:b7:f9:46:
                    8d:00:4f:40:f6:c8:a9:98:5e:d4:85:67:38:fa:4a:
                    ef:8f:aa:50:0e:1d:a6:c9:2d:c0:c7:46:16:d6:91:
                    d6:52:7b:ba:4a:04:22:21:2e:2e:51:82:cf:03:75:
                    9e:11:6c:f8:83:37:61:22:e1:a7:c5:e4:f3:ae:ef:
                    41:a8:54:a7:bf:e7:7e:36:48:aa:88:b3:04:a7:3d:
                    ac:0c:3e:23:0f:36:9a:ed:d2:25:29:22:d8:57:f8:
                    9a:8e:3d:72:9a:3f:2c:46:78:7f:0f:bf:33:33:c2:
                    e9:57:0c:c4:8e:e6:84:a3:d9:07:b7:d3:bc:13:d4:
                    b8:47:86:44:d2:c1:de:13:32:17:28:48:cd:cf:ba:
                    6b:62:1d:50:e5:5a:5b:d1:21:f6:17:6a:6f:af:80:
                    3a:96:f6:b0:86:5a:02:92:00:0f:80:65:60:c3:eb:
                    c0:eb:fa:8c:12:3f:65:bf:a9:e5:0e:c6:c7:6e:aa:
                    bc:a3:e0:b4:f3:8e:bf:6a:75:2a:a6:38:c4:27:b3:
                    ef:dc:ed:87:62:8b:a8:dd:5d:28:01:10:43:9f:8f:
                    5f:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:1F:87:6B:9C:EA:4A:50:C3:9D:76:B8:76:51:BB:74:58:D6:69:B6
            X509v3 Authority Key Identifier:
                keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3336643a3a2f34382d3438203d3e203539323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:d680:36d::/48

    Signature Algorithm: sha256WithRSAEncryption
         6b:92:ad:93:43:22:8a:c5:8a:ac:02:53:9e:41:e9:04:34:77:
         0c:21:91:51:f7:7e:ef:1b:2e:b9:b6:85:73:54:18:20:77:6e:
         70:a2:92:ab:7f:d2:f2:87:b6:b7:64:ff:26:b3:50:b8:8f:28:
         51:39:0b:69:87:35:c1:91:80:cc:29:87:a8:60:83:96:d0:95:
         16:ba:f5:44:aa:22:df:81:b4:9e:60:a4:bc:a4:23:a6:82:6a:
         b7:ea:69:6b:db:e4:ee:f0:56:18:ad:0a:30:c1:25:97:ec:ec:
         d2:b9:f1:06:f5:19:ca:de:2f:18:ae:a5:aa:ff:a0:7d:5f:da:
         e7:84:50:59:d1:0f:5c:6b:8d:a0:a9:66:5f:ae:42:72:7e:09:
         bf:df:c6:08:53:ca:a5:a5:3b:0e:a0:18:38:47:1b:d8:41:48:
         4d:78:94:84:23:c2:96:88:5c:f6:6b:36:f4:3f:6d:04:a2:45:
         33:6a:41:96:bf:23:09:c6:eb:6a:89:68:77:8b:bf:5d:0b:c5:
         ff:b0:3c:3e:ed:40:26:86:50:6e:e1:61:3e:05:25:9f:9b:9e:
         50:75:4c:4d:04:49:cd:e0:6b:07:50:d1:3d:ec:17:69:f1:87:
         68:02:a2:fc:78:c2:0c:71:60:6d:69:63:c0:e4:85:d5:6a:3b:
         0d:29:f6:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:14 2024 by rpki-client on console-fra.rpki-client.org