Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a35363a3a2f34382d3438203d3e203539323832.roa
File:                     323430303a643638303a35363a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier:          4I1a63413MSsAKOQusTMdBsA+vOaefRouEoaiEn08gE=
Subject key identifier:   68:33:A1:8E:7F:B7:FA:6F:51:E7:9F:91:28:05:16:C7:1D:84:8B:9B
Certificate issuer:       /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial:       67963D956203178FDA2CF9EA64A4F1FA16F7EB05
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a35363a3a2f34382d3438203d3e203539323832.roa
Signing time:             Mon 26 Sep 2022 08:01:32 +0000
ROA not before:           Mon 26 Sep 2022 07:56:32 +0000
ROA not after:            Mon 25 Sep 2023 08:01:32 +0000
asID:                     59282
IP address blocks:        2400:d680:56::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:96:3d:95:62:03:17:8f:da:2c:f9:ea:64:a4:f1:fa:16:f7:eb:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
        Validity
            Not Before: Sep 26 07:56:32 2022 GMT
            Not After : Sep 25 08:01:32 2023 GMT
        Subject: CN=6833A18E7FB7FA6F51E79F91280516C71D848B9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:3d:e8:fc:c8:da:1f:54:f3:4a:48:bd:aa:fe:
                    95:b2:e8:d2:f6:38:99:27:29:2b:69:d5:00:3a:85:
                    c2:fc:0a:40:e6:84:da:31:2d:ec:37:c4:10:b4:52:
                    62:ba:c3:67:03:03:a3:07:eb:7e:53:04:3c:71:18:
                    62:48:1c:65:0d:57:15:f6:48:53:ab:c3:5e:59:6a:
                    5a:e4:5b:1b:fb:56:bc:7e:4a:b2:32:a8:56:8f:d4:
                    e3:bf:c2:97:11:87:83:94:37:7b:29:86:4d:05:dc:
                    04:e5:a3:87:ee:13:91:ab:dc:5d:eb:2f:ee:ff:e9:
                    5b:89:44:b4:1e:d8:f2:6f:76:ca:c9:84:5a:b7:da:
                    df:d5:02:57:b4:38:9b:4f:1e:02:d1:33:11:4e:6f:
                    40:f3:aa:2d:0e:b3:56:c3:ff:73:dc:7f:79:0c:b6:
                    8c:27:15:8f:77:fc:51:f0:6d:93:79:18:bf:9e:c0:
                    23:09:95:ae:ee:2e:d0:1b:d2:e0:a7:b7:14:93:d9:
                    0a:e1:58:a0:85:c7:e3:62:d1:0a:05:04:68:06:a2:
                    f1:c5:b3:f4:0b:eb:74:c4:1d:12:05:59:94:c0:7b:
                    4e:4c:b0:06:4b:69:f9:ba:c9:ad:6b:38:a4:4b:73:
                    ee:67:9a:55:31:a8:56:e7:b3:67:2c:06:63:bb:b5:
                    fe:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:33:A1:8E:7F:B7:FA:6F:51:E7:9F:91:28:05:16:C7:1D:84:8B:9B
            X509v3 Authority Key Identifier:
                keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a35363a3a2f34382d3438203d3e203539323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:d680:56::/48

    Signature Algorithm: sha256WithRSAEncryption
         3b:b4:d8:36:d7:cb:87:06:a1:4b:cc:30:25:79:67:1c:3c:ae:
         5b:2c:5c:76:f3:39:5d:a7:ca:79:f4:40:c8:9b:42:73:1d:08:
         ed:26:64:e4:74:f2:ea:3e:da:80:05:ea:c5:eb:ff:7d:86:33:
         d2:ea:dc:f1:a6:be:5f:dd:63:72:f6:2a:68:a8:5b:e4:64:f7:
         ec:3a:d2:a9:6f:b7:c5:7f:50:17:f0:82:91:9b:65:ac:4c:6e:
         76:55:3b:a6:d6:23:4d:07:aa:e0:e8:2e:93:1b:a2:af:53:3b:
         a8:df:bf:3f:90:ee:cb:46:1d:44:72:51:ab:ac:08:ef:fc:e1:
         43:9a:4f:44:95:b5:a2:df:32:58:17:5c:a3:d1:2b:2f:8f:04:
         38:8e:dd:66:23:8b:11:f0:e1:7b:85:34:05:d0:7e:48:45:e1:
         9b:2a:32:f3:0c:93:60:3d:03:22:14:b1:ac:d7:e2:3d:5f:4c:
         64:46:6b:10:27:d8:47:6b:61:3b:cc:b8:ad:03:25:a5:2e:60:
         4e:c5:df:b7:45:51:64:d7:d0:d1:22:4c:8b:06:3b:3a:30:7c:
         04:2c:ad:23:b7:59:87:d8:0a:ab:a7:8f:af:70:05:24:e3:11:
         c9:a1:96:17:6f:6b:06:f5:8c:d5:48:2c:3f:73:45:4f:37:5b:
         29:37:26:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:15 2024 by rpki-client on console-fra.rpki-client.org