Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a61363a3a2f34382d3438203d3e203539323832.roa
File:                     323430303a643638303a61363a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier:          ZWyE+Wwz77fhWrQ0rGYESWQ/OezDgZ2f+vJkzKV00IY=
Subject key identifier:   4C:AE:15:25:74:A7:E4:3E:AE:F2:BC:67:5C:24:FF:53:56:4A:2C:89
Certificate issuer:       /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial:       19185D3362A9B34F2435966B5BD4A2B02B68AE5C
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a61363a3a2f34382d3438203d3e203539323832.roa
Signing time:             Mon 26 Sep 2022 08:01:46 +0000
ROA not before:           Mon 26 Sep 2022 07:56:46 +0000
ROA not after:            Mon 25 Sep 2023 08:01:46 +0000
asID:                     59282
IP address blocks:        2400:d680:a6::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:18:5d:33:62:a9:b3:4f:24:35:96:6b:5b:d4:a2:b0:2b:68:ae:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
        Validity
            Not Before: Sep 26 07:56:46 2022 GMT
            Not After : Sep 25 08:01:46 2023 GMT
        Subject: CN=4CAE152574A7E43EAEF2BC675C24FF53564A2C89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:fa:41:02:94:e3:62:6e:f5:a7:c2:f2:63:32:
                    88:e6:3a:bf:da:78:95:02:a7:cc:79:e6:50:4a:17:
                    09:a6:57:a6:62:71:d1:30:5b:02:08:4b:8d:cf:62:
                    d5:3c:1c:ce:91:b7:27:9c:80:14:44:82:31:00:6a:
                    a1:fd:ca:7d:24:a1:c8:49:5d:36:53:97:62:f9:7e:
                    75:3c:27:ac:f9:41:6c:85:d8:db:19:11:62:12:c8:
                    63:af:ba:d4:62:ce:9a:28:21:ed:81:b9:42:e3:5a:
                    d2:f0:2a:13:0b:0b:53:28:c5:09:52:01:02:a2:bc:
                    4f:1f:bb:32:46:b2:cc:65:cb:94:7e:85:8d:84:77:
                    18:59:f7:b7:c2:bc:f5:fa:27:1c:3c:a7:82:4e:d7:
                    59:f1:7c:be:95:42:df:64:7e:b0:a9:e5:8b:4a:6d:
                    7e:f8:71:06:ff:0e:b9:a2:67:61:d2:4b:3e:dd:16:
                    cb:cb:dd:cc:f3:33:40:82:18:56:71:38:2a:84:0d:
                    1c:c8:6c:8e:d1:2f:0b:32:be:99:6e:6d:05:85:4a:
                    34:85:db:6d:3c:a7:30:33:1d:a5:46:81:d5:a8:f5:
                    47:81:e3:c2:9b:8f:82:cc:6e:4f:a3:1c:94:fa:b7:
                    23:3c:22:f0:7d:29:5e:d8:56:63:e7:d2:8b:58:66:
                    e4:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:AE:15:25:74:A7:E4:3E:AE:F2:BC:67:5C:24:FF:53:56:4A:2C:89
            X509v3 Authority Key Identifier:
                keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a61363a3a2f34382d3438203d3e203539323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:d680:a6::/48

    Signature Algorithm: sha256WithRSAEncryption
         c4:fd:13:8d:b0:18:8a:ab:e9:18:a7:f1:e5:46:75:9c:6f:fc:
         72:ea:13:c2:2f:61:50:82:d3:7e:27:75:1f:b0:59:ac:33:a2:
         c2:8a:b7:84:71:7e:77:97:66:ca:82:7e:f8:14:77:b9:56:75:
         c5:71:ee:b0:73:65:95:91:03:54:03:9e:1d:9a:b2:bd:58:25:
         b3:a5:4f:0a:28:c0:86:15:c1:13:e4:57:17:a4:8d:ca:2a:c9:
         ed:a9:08:8d:c7:34:26:43:e9:50:f0:7c:8a:f9:10:eb:80:9d:
         6a:eb:ac:57:ab:d7:7c:7c:50:e2:e3:f5:1b:c8:2b:fb:40:f6:
         22:30:31:53:37:06:fd:ee:ca:52:cb:55:0e:0e:02:30:fb:f8:
         03:3b:cd:51:48:e4:11:88:7a:59:19:a2:5b:3e:47:ce:14:db:
         f4:fc:61:f1:bd:65:48:d1:1b:ef:75:ae:d5:00:4a:57:9d:ea:
         43:9d:8b:bb:04:30:fc:5e:cf:53:97:34:ce:d4:18:9e:c2:fe:
         fd:e0:34:45:fd:0c:d8:84:fc:a5:80:e7:93:4c:6e:ba:87:01:
         85:33:79:87:ee:fb:07:04:52:8c:78:c3:3a:d5:a0:fc:29:c4:
         41:1d:e8:b6:f1:9c:68:0a:5d:e1:c0:0f:15:66:a3:92:d7:1b:
         bd:f3:3d:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:51 2024 by rpki-client on console-ams.rpki-client.org