Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3336653a3a2f34382d3438203d3e203539323832.roa
File:                     323430303a643638303a3336653a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier:          8/ItLYZ8CUHbE0k9PGLsoWzdF28RjT3RTrHfwMa0HFw=
Subject key identifier:   62:AA:55:AA:55:16:90:50:22:8D:6D:53:06:8E:C0:51:32:50:9B:45
Certificate issuer:       /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial:       77096B885FBCFAEC5597E55B8DE8C61A9D037A93
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3336653a3a2f34382d3438203d3e203539323832.roa
Signing time:             Mon 26 Sep 2022 11:00:49 +0000
ROA not before:           Mon 26 Sep 2022 10:55:49 +0000
ROA not after:            Mon 25 Sep 2023 11:00:49 +0000
asID:                     59282
IP address blocks:        2400:d680:36e::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:09:6b:88:5f:bc:fa:ec:55:97:e5:5b:8d:e8:c6:1a:9d:03:7a:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
        Validity
            Not Before: Sep 26 10:55:49 2022 GMT
            Not After : Sep 25 11:00:49 2023 GMT
        Subject: CN=62AA55AA55169050228D6D53068EC05132509B45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:84:af:ee:b2:9b:07:54:9e:5a:e2:c9:d3:09:
                    15:4a:66:11:14:ed:45:8f:ea:11:dd:e2:21:15:32:
                    24:2c:d1:1a:cc:5b:07:b9:49:5c:aa:9f:d6:8e:61:
                    8f:b6:dc:69:d6:03:47:48:03:7f:bb:b1:64:19:64:
                    7c:ea:01:da:73:f2:3c:40:a1:0f:c9:4e:74:76:03:
                    27:03:8c:3e:b4:3b:39:08:e0:50:6b:ef:8b:9e:24:
                    3d:c3:60:31:b1:b2:7a:c2:6e:da:33:a6:76:59:ec:
                    2d:28:0d:73:a2:32:78:2e:95:b7:2a:7e:16:22:c5:
                    46:ea:2e:47:7b:6c:f5:35:3e:62:ad:e3:28:18:c5:
                    5f:99:3e:bb:1c:59:50:b0:ae:c6:c8:ce:eb:13:4d:
                    84:fc:fc:ea:f2:e0:74:7d:b2:f9:0c:a2:fa:18:2b:
                    76:84:fc:f7:70:3b:34:85:e4:fc:b7:9e:a0:4e:8f:
                    ef:4b:8f:46:7c:52:c4:0a:90:e7:ac:01:b1:90:18:
                    ea:e8:5c:75:61:2d:e2:3e:4c:40:8b:1a:f8:f3:b1:
                    71:9e:61:d1:8b:30:bf:46:65:6c:02:86:15:a7:8c:
                    a5:d8:38:13:c9:16:d3:e2:7d:24:0e:e6:5e:14:06:
                    e8:49:18:ab:04:6b:87:c0:c8:14:bf:f1:e8:4b:bb:
                    f9:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:AA:55:AA:55:16:90:50:22:8D:6D:53:06:8E:C0:51:32:50:9B:45
            X509v3 Authority Key Identifier:
                keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3336653a3a2f34382d3438203d3e203539323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:d680:36e::/48

    Signature Algorithm: sha256WithRSAEncryption
         66:30:2e:19:69:00:e3:74:88:89:c9:3f:aa:cc:1e:98:2d:92:
         86:57:14:9c:3c:82:1b:e5:0e:28:55:40:9c:a9:b4:cc:df:03:
         61:a1:32:6d:87:23:ac:d8:b4:f3:34:dd:04:e5:c1:c3:e3:49:
         31:4f:12:b9:74:eb:75:68:08:48:67:86:74:0d:8e:f2:fb:33:
         3d:b1:82:cd:f7:9a:0c:dd:a4:44:a0:84:c4:d5:b3:47:b0:f8:
         02:31:7e:93:c8:20:83:98:d8:d1:f8:c6:20:42:60:90:0c:20:
         29:5e:bc:43:a6:81:7b:d8:44:99:07:c2:d2:fa:a3:94:38:c2:
         f9:06:43:e4:f0:13:8f:e3:92:bd:e9:ac:23:38:82:1d:8c:af:
         e4:78:52:97:6b:13:a8:50:ea:50:75:a9:e8:fd:80:44:ca:91:
         3d:6c:84:d5:3d:09:6d:39:6d:99:42:91:18:94:df:f4:3f:2e:
         83:68:3e:9a:b3:28:79:25:b2:00:ab:cf:5c:ff:4f:05:7c:c6:
         1f:02:5c:75:9e:58:76:9d:24:43:87:be:26:01:e9:ec:04:3e:
         f3:e4:ff:a1:2f:11:1c:8a:8d:81:e0:06:c1:bc:7e:da:c7:e1:
         fa:57:a0:b2:4c:27:42:72:20:1a:98:48:93:23:d6:44:e0:4a:
         d1:81:be:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:14 2024 by rpki-client on console-fra.rpki-client.org