Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a65303a3a2f34382d3438203d3e203539323832.roa
File:                     323430303a643638303a65303a3a2f34382d3438203d3e203539323832.roa (raw, json)
Hash identifier:          a2cTuQplVEXcBviNUakS7mhminA7Sny3FhjKlf5UBvw=
Subject key identifier:   EA:61:46:41:52:F7:45:2A:E9:73:1D:F3:B1:1A:4C:A5:08:B5:57:27
Certificate issuer:       /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial:       259F1F0D41A8E7FF7D92CCB1A074EEA2F2D9D05A
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a65303a3a2f34382d3438203d3e203539323832.roa
Signing time:             Mon 26 Sep 2022 08:01:43 +0000
ROA not before:           Mon 26 Sep 2022 07:56:43 +0000
ROA not after:            Mon 25 Sep 2023 08:01:43 +0000
asID:                     59282
IP address blocks:        2400:d680:e0::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:9f:1f:0d:41:a8:e7:ff:7d:92:cc:b1:a0:74:ee:a2:f2:d9:d0:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
        Validity
            Not Before: Sep 26 07:56:43 2022 GMT
            Not After : Sep 25 08:01:43 2023 GMT
        Subject: CN=EA61464152F7452AE9731DF3B11A4CA508B55727
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:74:bb:20:46:28:29:d8:ec:9e:c0:c6:82:2a:
                    e4:da:09:b2:0b:d6:52:c2:7c:5a:ec:70:4e:4a:1c:
                    da:3b:0c:40:a1:c4:d4:81:8f:fa:b2:b8:32:aa:2c:
                    17:8f:7b:4d:48:7c:06:21:43:56:a3:55:13:d3:bd:
                    72:9c:7a:22:43:91:a4:ab:52:2b:04:00:e1:6d:6c:
                    1d:55:36:be:24:fd:b5:b6:49:16:61:07:bc:00:07:
                    97:a7:63:05:22:54:9d:df:1c:c1:af:51:e7:3a:27:
                    1c:cd:45:57:9f:f8:47:43:34:59:71:e4:1b:d4:fc:
                    c9:82:7f:47:e7:48:60:b9:7f:c1:ac:a9:31:cf:cf:
                    2b:8a:54:4f:d5:d8:a1:4c:41:38:1a:7c:b5:9a:9c:
                    1e:0e:2a:10:98:17:5f:a2:0f:d4:59:f5:f6:66:af:
                    30:99:87:ba:4f:9b:8d:d8:48:21:42:fd:2a:bf:2a:
                    31:69:92:76:11:9b:09:8e:97:a9:7c:41:22:6f:58:
                    1e:dc:48:f3:6c:b9:c4:f0:df:b8:20:03:a4:d8:e7:
                    a5:2d:22:a6:1f:5c:93:a8:c3:64:0b:ff:bb:28:b0:
                    b7:1b:8b:7d:9f:d5:90:d6:27:6b:66:ee:a4:62:98:
                    7f:ec:ed:66:be:d0:2d:83:63:8d:7b:ed:5e:c4:5a:
                    c0:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:61:46:41:52:F7:45:2A:E9:73:1D:F3:B1:1A:4C:A5:08:B5:57:27
            X509v3 Authority Key Identifier:
                keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/323430303a643638303a65303a3a2f34382d3438203d3e203539323832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:d680:e0::/48

    Signature Algorithm: sha256WithRSAEncryption
         c6:ab:e3:95:bc:c7:57:aa:b2:05:67:54:41:d2:59:10:18:6f:
         75:e6:1a:f4:eb:20:b8:44:73:82:aa:a1:5d:c6:cb:0f:bc:af:
         c5:0f:14:80:3a:4d:e5:22:b4:f8:c9:3a:a3:43:f9:23:1c:1f:
         51:ee:86:2f:3e:f0:ba:10:04:e5:26:e6:87:63:60:e5:93:73:
         87:6b:7a:46:13:90:70:22:c9:42:f8:d5:a2:6f:20:18:3d:d8:
         38:b2:f2:cd:2d:bf:ea:dd:64:21:96:b3:54:94:09:22:8c:94:
         00:61:a5:c1:ad:92:39:cb:d0:aa:d5:24:69:26:51:66:40:63:
         76:04:38:53:3c:6d:34:11:c9:06:f8:63:f6:84:66:e9:de:1d:
         0a:cd:c2:38:0d:e6:49:a7:05:16:99:3a:b7:0f:93:f5:ae:d2:
         eb:13:f0:ab:8b:4f:89:af:ae:85:59:87:07:51:66:d4:d9:06:
         92:27:9b:a0:91:27:44:fe:1b:9d:42:b7:17:5b:00:41:f5:cb:
         ca:6b:e3:51:3e:b1:9d:4e:fe:36:2e:ac:bc:16:06:eb:11:99:
         11:d2:b7:18:11:4f:6b:4f:ae:c9:fe:1a:a8:5f:1c:b1:8b:d1:
         4d:4c:cf:c4:a7:ea:38:6e:75:c9:34:80:48:b6:bc:f3:e8:11:
         9a:a0:a2:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:15 2024 by rpki-client on console-fra.rpki-client.org