Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a39313a3a2f34382d3438203d3e203539323832.roa
File:                     323430303a643638303a39313a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier:          wFJv6exkxgF2hsJiKui7qzLGD5nykGBl4nIQzFfi6X4=
Subject key identifier:   15:B9:88:1F:A0:C2:0C:98:F7:C7:E0:7F:48:83:D5:E8:9C:17:40:58
Certificate issuer:       /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial:       1607A08677BC7BF16ABA3C18E260115332DF26CA
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a39313a3a2f34382d3438203d3e203539323832.roa
Signing time:             Mon 26 Sep 2022 08:01:27 +0000
ROA not before:           Mon 26 Sep 2022 07:56:27 +0000
ROA not after:            Mon 25 Sep 2023 08:01:27 +0000
asID:                     59282
IP address blocks:        2400:d680:91::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:07:a0:86:77:bc:7b:f1:6a:ba:3c:18:e2:60:11:53:32:df:26:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
        Validity
            Not Before: Sep 26 07:56:27 2022 GMT
            Not After : Sep 25 08:01:27 2023 GMT
        Subject: CN=15B9881FA0C20C98F7C7E07F4883D5E89C174058
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:44:70:76:2a:f7:ea:ec:40:88:97:75:b7:7e:
                    af:07:a8:73:31:22:b8:3b:77:02:bc:d8:d6:07:83:
                    65:f9:60:dd:5a:3f:79:ae:7f:be:f3:52:1c:d1:8f:
                    18:3a:00:c3:9d:8f:9d:69:5e:8a:ee:6a:87:2d:c7:
                    69:af:f2:84:05:8b:d4:3c:c1:20:c7:aa:76:e8:31:
                    f5:fc:be:00:a1:df:bd:1a:57:29:1b:ce:93:4d:1c:
                    fa:95:fe:b7:bf:3c:bf:b2:e0:4d:7d:de:06:6c:59:
                    8c:ab:9c:fd:ad:84:0c:8b:43:65:26:45:b2:ee:ac:
                    b0:27:2a:d8:40:85:a0:c6:46:84:97:0d:ca:82:fe:
                    21:2f:60:7a:03:fe:33:1e:43:4c:78:66:b1:b1:cd:
                    2e:d0:73:f8:06:37:fa:29:ad:f0:7b:57:7a:a8:6d:
                    bc:d5:ca:4b:71:18:e6:2b:38:67:83:c0:3a:fc:11:
                    44:a8:d5:61:cc:67:d4:16:b9:22:c4:a7:f8:af:b2:
                    6c:27:93:69:16:a5:74:9e:65:38:86:0e:5d:b8:51:
                    c3:4b:a6:c3:d5:c8:9b:f4:47:65:b5:89:dd:9e:91:
                    dc:1f:a5:50:38:14:34:fa:b6:40:64:4c:7b:8e:af:
                    fb:f9:73:56:30:2c:6e:41:25:fc:4f:70:b5:8f:eb:
                    05:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:B9:88:1F:A0:C2:0C:98:F7:C7:E0:7F:48:83:D5:E8:9C:17:40:58
            X509v3 Authority Key Identifier:
                keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a39313a3a2f34382d3438203d3e203539323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:d680:91::/48

    Signature Algorithm: sha256WithRSAEncryption
         ae:8c:73:0b:28:ca:0d:0a:c1:48:fc:d6:46:b3:1b:05:fa:c5:
         a9:ae:e2:84:10:8d:8c:60:52:ce:ba:68:79:bd:ec:99:4d:27:
         57:b3:55:da:0f:23:ed:cc:ad:89:a7:d4:38:d1:18:e6:84:81:
         32:18:4b:b4:ce:b2:c3:9d:53:a7:c5:97:20:9b:1d:20:df:63:
         bf:0c:b0:62:50:0c:56:36:7f:7c:25:e8:24:61:d5:e3:49:62:
         2c:0b:e0:00:dc:fb:d2:b6:7a:17:6b:05:2a:6b:b0:c5:c3:68:
         00:b3:97:18:78:b8:16:dd:dc:d9:02:ea:66:aa:1c:40:51:36:
         ba:aa:fe:6c:43:76:04:ef:d9:7a:1a:68:6e:83:d9:53:b8:96:
         f1:37:21:1b:72:07:9f:9c:07:fc:2b:ad:be:7d:a1:97:cd:d1:
         dd:54:6e:c3:24:3d:b8:95:3c:35:fe:5d:92:51:2e:bb:24:aa:
         9f:cc:20:97:d3:0d:6b:f0:36:6e:79:86:dc:90:72:ad:5d:45:
         3e:22:a9:ad:34:dd:90:e3:2f:0e:3b:7e:ad:9b:79:03:81:c5:
         06:24:61:64:3a:5e:e1:66:b2:20:d7:94:7e:2d:3c:c9:18:db:
         90:44:72:3b:b0:9c:67:86:14:5f:11:e4:21:97:c6:99:1f:7c:
         94:9b:c8:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:15 2024 by rpki-client on console-fra.rpki-client.org