Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3362653a3a2f34382d3438203d3e203539323832.roa
File:                     323430303a643638303a3362653a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier:          zQrQ3XGB4gg8TWPf0ENm/jmqoFJ4yHsmxoZywwNT480=
Subject key identifier:   4E:3E:0C:B9:42:AD:54:B9:C2:BA:49:6A:27:71:4E:6F:37:94:49:36
Certificate issuer:       /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial:       6E2ACC15F184295EEC53DADB589C84E6A3FBB6F0
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3362653a3a2f34382d3438203d3e203539323832.roa
Signing time:             Mon 26 Sep 2022 11:00:31 +0000
ROA not before:           Mon 26 Sep 2022 10:55:31 +0000
ROA not after:            Mon 25 Sep 2023 11:00:31 +0000
asID:                     59282
IP address blocks:        2400:d680:3be::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:2a:cc:15:f1:84:29:5e:ec:53:da:db:58:9c:84:e6:a3:fb:b6:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
        Validity
            Not Before: Sep 26 10:55:31 2022 GMT
            Not After : Sep 25 11:00:31 2023 GMT
        Subject: CN=4E3E0CB942AD54B9C2BA496A27714E6F37944936
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:2f:6a:61:25:31:8f:0c:63:66:c8:c0:43:7a:
                    63:6b:07:4b:af:84:16:0f:87:4f:94:03:b7:7a:60:
                    98:8f:9b:39:57:d9:c7:4a:0f:15:83:15:fd:44:6a:
                    f2:6b:5f:aa:d8:6a:0f:4b:ef:9b:69:13:d1:7c:4d:
                    c2:61:eb:6b:fd:62:e4:18:f0:b9:f2:ab:f0:80:06:
                    da:41:f8:6c:86:28:4a:c5:fb:0e:d3:eb:89:71:d7:
                    86:48:d6:59:8d:a9:5e:a6:92:74:22:ab:80:4f:b1:
                    d3:6a:0e:6a:3e:95:a6:a6:d2:20:59:3c:ea:f7:4c:
                    aa:22:51:6c:f8:a6:41:bb:c5:9c:97:80:1f:f1:c7:
                    cb:23:9a:d6:7c:82:fb:9e:fe:d4:96:b1:68:fe:e2:
                    2f:2f:fd:19:95:4d:96:d7:49:32:c3:15:a8:7a:22:
                    92:7d:95:66:77:4a:0d:20:10:f8:27:b1:89:4e:0d:
                    38:7c:5e:8f:52:2a:09:aa:69:a7:f0:4d:54:89:8c:
                    83:06:68:95:b4:ac:04:1d:ca:c3:f7:26:87:e2:a4:
                    e4:6d:2e:5c:c7:d7:bb:4e:e0:e9:08:32:c6:b5:72:
                    59:83:17:ff:25:0a:96:b0:8c:d5:42:64:9e:38:ac:
                    62:3f:2a:72:97:6e:4b:35:80:e8:4d:a1:bc:91:e8:
                    64:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:3E:0C:B9:42:AD:54:B9:C2:BA:49:6A:27:71:4E:6F:37:94:49:36
            X509v3 Authority Key Identifier:
                keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3362653a3a2f34382d3438203d3e203539323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:d680:3be::/48

    Signature Algorithm: sha256WithRSAEncryption
         d2:77:56:96:e7:19:49:b0:70:55:df:81:2c:2e:f6:07:06:75:
         3a:5f:02:97:1f:0a:fb:42:db:4c:55:81:ca:64:b7:35:97:b9:
         24:93:f9:2f:84:74:91:d3:1a:10:b9:8e:a0:d0:c9:36:37:12:
         2f:6f:18:f6:15:b7:3a:98:e0:83:83:9e:27:34:90:c6:11:3b:
         83:75:b1:5c:d2:e1:34:d4:80:77:a7:ef:2d:39:b9:56:ec:94:
         54:9b:bc:28:f7:36:36:1b:b4:8b:2c:86:4c:c0:ce:d3:11:0a:
         ca:53:3b:f9:cb:8e:f2:b3:4b:37:04:53:e6:14:ad:98:c6:cd:
         08:a6:15:eb:a7:6c:fa:72:22:13:61:b1:18:7a:fd:a4:e0:39:
         0a:d3:fb:a8:d3:69:bc:fc:a0:17:2e:ad:a7:85:27:0c:00:04:
         f8:0a:9f:39:a2:84:bd:60:ff:47:a6:9f:5e:c3:40:66:b5:02:
         fe:df:75:1c:5d:30:b9:c9:cc:eb:5d:5f:0f:b0:d1:ae:f0:b2:
         2b:cb:f5:53:ce:72:e8:63:cc:6e:b2:56:38:8e:17:4e:87:b0:
         73:af:f1:42:83:59:d0:80:92:84:e5:65:d5:21:c7:0e:8b:72:
         5d:85:8a:ab:73:73:74:12:fd:cb:67:29:41:11:60:d2:5a:5e:
         0a:b7:c8:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:14 2024 by rpki-client on console-fra.rpki-client.org