Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/3230322e3136392e3235332e302f32342d3234203d3e203338313433.roa
File:                     3230322e3136392e3235332e302f32342d3234203d3e203338313433.roa (raw, json)
Hash identifier:          ZTGPZAezlLCWFY8Tcv85lNq/Rs51CgG7YNOhFAe8xQ8=
Subject key identifier:   D5:12:77:D4:C2:CD:37:4D:2E:57:CD:61:6A:76:B9:9E:CA:FA:BC:24
Certificate issuer:       /CN=342061B97FF97E5180511F38B0A0DCBAB1CE0325
Certificate serial:       2508AC56031DFEA961566AB3E6F8E7B70FBC6160
Authority key identifier: 34:20:61:B9:7F:F9:7E:51:80:51:1F:38:B0:A0:DC:BA:B1:CE:03:25
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/342061B97FF97E5180511F38B0A0DCBAB1CE0325.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/3230322e3136392e3235332e302f32342d3234203d3e203338313433.roa
Signing time:             Tue 16 Aug 2022 04:17:33 +0000
ROA not before:           Tue 16 Aug 2022 04:12:33 +0000
ROA not after:            Tue 15 Aug 2023 04:17:33 +0000
asID:                     38143
IP address blocks:        202.169.253.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:08:ac:56:03:1d:fe:a9:61:56:6a:b3:e6:f8:e7:b7:0f:bc:61:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=342061B97FF97E5180511F38B0A0DCBAB1CE0325
        Validity
            Not Before: Aug 16 04:12:33 2022 GMT
            Not After : Aug 15 04:17:33 2023 GMT
        Subject: CN=D51277D4C2CD374D2E57CD616A76B99ECAFABC24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:99:ce:f7:f6:95:ab:12:df:5a:60:c0:1b:85:
                    fd:aa:9b:c5:5b:8d:ff:30:29:17:9b:91:b2:3a:94:
                    62:2a:1c:e1:bb:3d:65:7a:f6:f6:9f:31:22:04:a1:
                    d9:98:ae:d7:e9:1c:62:72:4a:cf:97:92:fa:54:91:
                    0e:19:0b:b2:2c:a2:a4:ed:8a:33:3a:44:df:c9:f9:
                    28:71:cb:25:22:71:74:b6:71:a7:42:0e:87:a0:4a:
                    1a:e8:c3:f0:cb:2d:f9:40:f1:40:96:36:aa:6d:15:
                    4e:95:39:c8:ee:9a:7c:28:b1:db:05:ca:cd:b9:81:
                    17:e8:b7:c0:ae:a2:1e:b1:ad:27:c8:5d:5c:83:7f:
                    68:0d:23:d7:10:c0:09:eb:4c:1c:37:18:c3:43:09:
                    21:72:ea:fa:c6:f2:0d:28:7c:b8:4e:bc:06:08:03:
                    88:36:1c:a8:95:cd:83:58:76:76:22:37:92:2c:7e:
                    e5:13:01:94:f7:92:07:25:01:a5:1e:ce:05:a9:bb:
                    c4:99:d2:f9:60:e4:69:4f:a0:27:7f:72:47:69:9c:
                    d2:5d:20:26:f9:5c:d5:89:6f:90:a2:24:3a:fd:b2:
                    b3:55:1d:04:24:5b:52:d0:74:2d:4f:db:16:f0:95:
                    14:89:42:53:21:29:87:2a:6e:65:47:1e:1c:e5:20:
                    c5:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:12:77:D4:C2:CD:37:4D:2E:57:CD:61:6A:76:B9:9E:CA:FA:BC:24
            X509v3 Authority Key Identifier:
                keyid:34:20:61:B9:7F:F9:7E:51:80:51:1F:38:B0:A0:DC:BA:B1:CE:03:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/342061B97FF97E5180511F38B0A0DCBAB1CE0325.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/342061B97FF97E5180511F38B0A0DCBAB1CE0325.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/acb9a4b9-4ae3-467a-b919-410e142b679f/0/3230322e3136392e3235332e302f32342d3234203d3e203338313433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.169.253.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:26:2d:1e:f3:0d:fa:f1:93:2b:ea:0d:68:a4:8d:71:ee:f4:
         76:a6:33:87:08:cc:31:7a:eb:02:6f:71:40:bf:1a:bc:83:39:
         fd:d1:a7:c3:6a:fc:f7:f7:2a:af:7a:3d:3f:a4:94:85:37:bb:
         d9:00:a4:c5:2c:aa:27:7c:01:e8:e3:59:be:fd:31:b4:27:32:
         48:22:9b:e5:05:01:2b:5f:48:30:d2:f3:e4:04:46:bc:ef:4c:
         34:fd:91:a9:23:90:b9:73:ee:0b:f9:a4:a5:5d:d0:04:52:39:
         46:76:ee:6b:d2:fd:d7:a1:1c:5f:f7:1d:81:89:37:cf:b9:6e:
         c2:64:6f:08:7a:8d:be:de:4a:22:0e:58:b9:b4:49:bb:90:75:
         04:57:be:92:ba:b8:73:f4:88:7a:c4:c3:cb:cc:38:11:e7:c4:
         51:bd:d1:6c:cf:f3:d9:57:bb:c5:f1:1e:49:9d:d3:6a:58:93:
         90:17:50:84:b5:32:19:d0:7f:46:fb:08:2e:46:68:59:9c:2d:
         36:fe:56:5b:b4:6e:98:9e:6b:1f:c3:13:8d:e6:c3:dd:0c:2f:
         d1:4b:5b:89:ac:71:d1:63:07:88:b9:ed:01:f6:94:0d:19:09:
         d1:93:ba:a0:6e:b8:93:e9:03:d6:6f:57:e0:e9:4c:6f:52:6c:
         37:7c:6c:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:15 2024 by rpki-client on console-fra.rpki-client.org