Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a36383a3a2f34382d3438203d3e203539323832.roa
File:                     323430303a643638303a36383a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier:          ESgFLaVBi2Zqp2L+d/1FwgliHv0Fb2NcMwlipPLB/ks=
Subject key identifier:   7E:A6:3D:8F:54:2E:C7:86:75:28:A4:85:53:2E:76:2D:EA:CB:70:AC
Certificate issuer:       /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial:       55ED29CEBA7CA9FAD61B13CF465730A38B55D0A3
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a36383a3a2f34382d3438203d3e203539323832.roa
Signing time:             Mon 26 Sep 2022 08:02:13 +0000
ROA not before:           Mon 26 Sep 2022 07:57:13 +0000
ROA not after:            Mon 25 Sep 2023 08:02:13 +0000
asID:                     59282
IP address blocks:        2400:d680:68::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:ed:29:ce:ba:7c:a9:fa:d6:1b:13:cf:46:57:30:a3:8b:55:d0:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
        Validity
            Not Before: Sep 26 07:57:13 2022 GMT
            Not After : Sep 25 08:02:13 2023 GMT
        Subject: CN=7EA63D8F542EC7867528A485532E762DEACB70AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:69:2d:0f:83:ab:35:d9:5e:4b:f6:09:e3:bf:
                    cd:6d:be:df:b7:14:d1:bd:ff:6e:33:91:bf:2d:76:
                    ac:db:1b:b5:3d:ce:d4:15:6d:5e:bd:1f:d6:bd:05:
                    85:22:95:6d:74:48:4d:49:e6:dc:a3:01:57:81:e3:
                    c6:19:74:f9:46:82:c3:2a:cf:af:e1:14:7b:f1:fd:
                    bd:d5:98:e8:e8:bd:48:a2:e3:7e:b9:e1:b7:c2:a6:
                    6d:eb:23:3c:7f:98:13:db:59:1b:21:ee:86:da:19:
                    a0:02:ff:12:97:ce:be:61:5a:9d:14:8c:ed:18:5a:
                    48:18:2d:97:3e:71:36:29:28:f0:cc:6a:64:e7:30:
                    b0:f4:fd:52:a4:61:e9:26:3d:32:d9:08:57:81:2e:
                    ed:1f:10:74:8d:79:aa:b1:9d:b4:0f:d5:69:2f:51:
                    7e:59:68:69:83:03:6d:e1:c9:25:40:bd:0d:91:48:
                    6d:a4:7c:ff:7f:17:af:c3:1f:2a:4d:b4:c7:df:af:
                    27:f3:b9:d0:15:c5:78:c3:b0:16:81:0b:99:ec:9c:
                    d3:60:46:2b:b6:a8:03:8c:64:b6:a0:92:3e:db:cb:
                    b4:b2:98:d2:19:db:72:a5:4f:44:51:19:5f:a6:a2:
                    cb:bd:88:4e:8a:ca:4d:58:11:a6:3a:ff:3a:44:65:
                    7f:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:A6:3D:8F:54:2E:C7:86:75:28:A4:85:53:2E:76:2D:EA:CB:70:AC
            X509v3 Authority Key Identifier:
                keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a36383a3a2f34382d3438203d3e203539323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:d680:68::/48

    Signature Algorithm: sha256WithRSAEncryption
         cb:df:25:b2:12:11:f1:8b:a4:19:bf:63:51:6f:03:84:3f:5f:
         a5:49:5d:5b:32:a3:30:07:77:0c:a3:c2:5b:77:08:06:a3:af:
         67:c3:c3:d8:35:c1:4c:68:f2:11:ef:5e:eb:63:d5:e5:cd:e0:
         44:4f:01:08:6a:eb:fe:1a:08:44:86:07:18:dd:d6:e2:04:53:
         b3:bc:4d:67:12:d5:47:ef:22:02:c3:d1:03:c8:79:1c:c3:c4:
         04:eb:59:d3:88:93:41:03:80:e2:73:82:7c:af:5a:b4:85:9a:
         1f:e8:86:a1:6d:eb:c3:98:c4:29:c3:69:5f:f1:72:e7:93:ba:
         dc:14:af:97:16:0b:38:99:42:5d:5b:3d:5c:2c:52:bc:f5:dc:
         e0:41:ad:07:da:cb:6c:88:bd:7a:a4:8f:2e:58:41:32:16:9b:
         86:97:1d:27:c5:0e:c2:0e:39:94:84:87:66:a8:67:b8:93:7e:
         f3:60:f9:82:e2:b0:6b:43:ac:2b:6d:b5:58:cd:bb:30:23:e1:
         c7:dc:89:c4:c7:1e:3c:49:ce:83:fc:ec:1f:b9:67:da:1b:8f:
         d8:9c:1c:84:f6:b5:62:0e:c3:d6:cc:d1:2b:23:bd:ae:32:d5:
         1f:db:4f:97:16:0a:38:25:c5:00:60:95:c2:9a:63:98:da:b7:
         a1:a6:13:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:15 2024 by rpki-client on console-fra.rpki-client.org