Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a61383a3a2f34382d3438203d3e203539323832.roa
File:                     323430303a643638303a61383a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier:          6wuY5UyMV572fnVzOeVots442sxzKKOjCtFamDdLjhM=
Subject key identifier:   19:CF:52:68:E5:F4:00:D2:04:4A:A9:57:E0:D5:0F:0A:DB:69:C6:14
Certificate issuer:       /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial:       5E6757F5ABED9EEE77E1CFE62D17C406E70FFEFA
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a61383a3a2f34382d3438203d3e203539323832.roa
Signing time:             Mon 26 Sep 2022 08:01:56 +0000
ROA not before:           Mon 26 Sep 2022 07:56:56 +0000
ROA not after:            Mon 25 Sep 2023 08:01:56 +0000
asID:                     59282
IP address blocks:        2400:d680:a8::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:67:57:f5:ab:ed:9e:ee:77:e1:cf:e6:2d:17:c4:06:e7:0f:fe:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
        Validity
            Not Before: Sep 26 07:56:56 2022 GMT
            Not After : Sep 25 08:01:56 2023 GMT
        Subject: CN=19CF5268E5F400D2044AA957E0D50F0ADB69C614
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:de:db:5a:09:d4:17:39:69:22:a4:04:28:5c:
                    3a:b7:7f:12:71:77:b5:fa:e5:08:f2:da:85:64:66:
                    f3:a7:e6:26:c2:56:54:c4:41:58:12:57:e7:4f:cd:
                    af:9c:c5:d4:51:af:85:2e:9a:6c:11:7a:d9:d1:85:
                    4c:cf:67:75:d4:1f:84:2a:51:52:e4:ad:90:8f:1b:
                    f0:39:82:a0:be:cb:b4:0e:84:78:c9:fc:e7:92:90:
                    ef:d4:e2:d3:a9:6a:8b:2f:26:52:68:49:68:9e:7b:
                    34:86:c0:48:ac:7b:1b:96:4c:e9:7a:9a:be:a1:2b:
                    e7:cc:9a:6f:79:29:3d:4b:98:f4:4f:d6:a5:47:b9:
                    4a:3a:0d:87:71:50:99:79:a9:70:3b:10:ba:64:2d:
                    44:b9:dd:00:c7:c4:01:67:90:2e:db:1e:4b:a5:08:
                    b7:06:39:1c:74:5e:62:dd:68:b0:42:5f:96:1b:2d:
                    01:d6:f7:c3:b9:a3:8d:42:09:da:eb:a6:70:0b:79:
                    f2:0f:32:ef:82:18:ac:e2:e1:80:2c:eb:1c:6b:7f:
                    be:c2:6d:8a:86:0c:89:c6:3e:d6:a2:f2:07:e3:5f:
                    49:64:d2:01:b0:c2:a2:1d:93:4a:8c:71:7b:04:b1:
                    27:ed:43:eb:cf:d7:ba:97:6f:04:25:b4:9d:b6:1b:
                    67:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:CF:52:68:E5:F4:00:D2:04:4A:A9:57:E0:D5:0F:0A:DB:69:C6:14
            X509v3 Authority Key Identifier:
                keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a61383a3a2f34382d3438203d3e203539323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:d680:a8::/48

    Signature Algorithm: sha256WithRSAEncryption
         9c:8d:7c:1b:78:aa:bc:6f:6f:0b:c4:86:b1:8f:cc:35:7e:42:
         aa:ce:0b:40:9c:51:02:ee:11:cd:ac:d3:25:70:4b:e4:db:c5:
         eb:02:39:37:b5:99:50:40:ce:c7:1c:35:58:3f:ed:db:dc:63:
         ea:14:38:7a:51:19:39:dc:a1:70:de:64:ba:fb:82:82:d6:c4:
         e0:61:75:dd:3c:29:3c:41:9d:af:ca:a2:89:e9:8d:5a:8b:5f:
         6b:f0:78:9f:e4:bb:47:3c:8f:1a:7c:a0:9f:ef:5a:d5:3e:9a:
         6b:eb:58:35:11:61:0b:68:76:08:dd:79:70:39:07:f3:f6:85:
         1f:e4:bc:0d:76:10:25:c2:ae:18:00:24:c6:a3:6d:57:3b:cd:
         e9:19:e1:e9:c3:51:ec:26:8c:89:7d:b5:52:fe:4a:1a:48:83:
         8f:5e:3f:70:87:22:65:15:d9:07:ec:da:a4:f7:50:4e:8c:c0:
         ea:b0:84:51:0f:7f:65:6f:e3:70:8c:e3:bf:2a:63:5a:d0:aa:
         70:c8:d2:80:12:2c:46:c0:84:70:27:1c:80:36:7a:30:42:dc:
         1b:a4:28:d7:4a:51:5f:29:36:3a:99:19:45:2b:74:73:02:a2:
         02:25:51:dd:e7:9b:b6:76:bb:45:bc:83:9a:2b:3d:ff:54:75:
         41:b9:4c:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:51 2024 by rpki-client on console-ams.rpki-client.org