Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3364613a3a2f34382d3438203d3e203539323832.roa
File:                     323430303a643638303a3364613a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier:          Z+90o19rVRMSwHb5lwGPtels9Nn2VAOHznv0Kjzlut4=
Subject key identifier:   77:42:8A:9B:41:07:E5:5F:9C:DB:A0:53:B0:57:C5:64:2F:B9:25:C3
Certificate issuer:       /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial:       703162943D0EC8995ACC4071CE2CD79D6E6D4574
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3364613a3a2f34382d3438203d3e203539323832.roa
Signing time:             Mon 26 Sep 2022 11:00:33 +0000
ROA not before:           Mon 26 Sep 2022 10:55:33 +0000
ROA not after:            Mon 25 Sep 2023 11:00:33 +0000
asID:                     59282
IP address blocks:        2400:d680:3da::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:31:62:94:3d:0e:c8:99:5a:cc:40:71:ce:2c:d7:9d:6e:6d:45:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
        Validity
            Not Before: Sep 26 10:55:33 2022 GMT
            Not After : Sep 25 11:00:33 2023 GMT
        Subject: CN=77428A9B4107E55F9CDBA053B057C5642FB925C3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:88:67:89:97:37:98:23:5c:c8:6b:84:33:ea:
                    a6:fd:c0:ef:a3:27:73:58:4a:37:f8:e5:34:bc:c7:
                    b4:08:b1:e0:c8:1c:e0:02:64:05:52:fc:a8:93:40:
                    a3:49:1f:dd:3f:aa:f7:33:33:c4:50:6f:07:1d:03:
                    e4:0d:ef:da:ee:12:e5:16:26:dd:ba:92:5a:08:fc:
                    ee:d1:17:9f:a9:65:ec:67:fe:a7:d8:64:2d:83:c2:
                    16:ce:63:71:c6:25:a1:81:1c:82:e2:ca:e0:59:e6:
                    47:ed:62:1c:ae:d4:56:56:25:b2:93:45:97:d2:bf:
                    f5:b6:93:cf:54:16:61:96:fd:a8:43:9d:b0:b7:62:
                    68:31:f9:49:c6:82:27:77:97:97:8e:a6:0c:2b:18:
                    71:b3:27:fd:e7:3c:57:29:d3:e0:f0:f7:d5:5c:4d:
                    9b:74:81:86:fe:3f:e1:cc:0c:e0:d5:63:07:63:5c:
                    0b:dd:c2:43:ab:0a:40:8a:aa:6c:65:8a:0b:24:ab:
                    09:f4:d2:35:ae:6a:0d:8c:e6:40:9f:20:4a:3d:a4:
                    3b:a9:55:d0:6a:ab:ed:0c:cb:12:65:5b:99:52:56:
                    0f:47:76:f1:79:56:22:aa:1c:2b:08:0b:e8:68:f4:
                    74:88:67:cd:da:3c:35:83:de:d3:8d:13:e1:22:f3:
                    70:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:42:8A:9B:41:07:E5:5F:9C:DB:A0:53:B0:57:C5:64:2F:B9:25:C3
            X509v3 Authority Key Identifier:
                keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a3364613a3a2f34382d3438203d3e203539323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:d680:3da::/48

    Signature Algorithm: sha256WithRSAEncryption
         ce:04:00:52:15:47:31:9c:08:71:c5:d3:de:a1:24:9c:56:a7:
         4b:1a:e0:43:ab:15:e0:8b:17:70:8f:e9:a2:2c:12:70:8a:fa:
         47:cf:68:7d:a7:8c:7a:36:a1:a1:f2:91:c5:db:06:7e:0e:98:
         38:1e:bc:80:3e:14:71:d8:66:98:eb:cf:f4:cf:83:87:38:48:
         b2:4e:6e:c8:92:79:8a:ba:af:df:bf:65:90:27:95:ba:69:10:
         80:48:d4:ae:5f:c8:c9:7b:0a:71:1c:89:2d:bc:38:9f:fe:eb:
         42:fe:2d:1a:26:e1:24:c2:47:39:ed:6b:db:e1:85:d6:67:82:
         9c:c9:33:57:9d:e8:3a:3f:4d:55:4b:8d:84:e7:37:cf:f1:3a:
         a8:e4:03:35:00:6e:2e:7a:27:18:d3:93:3d:bb:31:fc:d5:06:
         32:a9:04:f2:39:3a:9a:5f:7e:ca:06:b1:17:f5:f8:08:da:63:
         2f:c7:64:74:35:79:1e:a7:9e:b5:6c:07:14:8b:19:ce:ed:b4:
         d2:97:fe:42:49:07:8c:02:31:38:70:64:ee:37:70:40:38:b5:
         52:fc:c6:51:72:8d:09:63:e2:17:da:5f:4d:2a:70:83:f8:9c:
         7f:36:0e:e3:0f:13:a0:5b:d6:b9:f7:c2:fc:74:f1:e9:c1:bf:
         a5:96:6b:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:51 2024 by rpki-client on console-ams.rpki-client.org