Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/36312e31342e3234382e302f32322d3234203d3e203633353031.roa
File:                     36312e31342e3234382e302f32322d3234203d3e203633353031.roa (raw, json)
Hash identifier:          EZEDWSu/CbDU0HAFxRSjC6xryrk+fspUkVYHoSH/9lw=
Subject key identifier:   06:85:A1:CC:69:F6:CD:34:4E:EB:D2:B9:5C:68:8A:74:0D:6A:0A:CF
Certificate issuer:       /CN=455696A81F434F9A36D66F455F4B3C43855A18E1
Certificate serial:       43ED65085A00DAB31437A60F2B2B92E551C5C2E6
Authority key identifier: 45:56:96:A8:1F:43:4F:9A:36:D6:6F:45:5F:4B:3C:43:85:5A:18:E1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/36312e31342e3234382e302f32322d3234203d3e203633353031.roa
Signing time:             Sat 25 Sep 2021 22:02:32 +0000
ROA not before:           Sat 25 Sep 2021 21:57:32 +0000
ROA not after:            Sun 25 Sep 2022 22:02:32 +0000
asID:                     63501
IP address blocks:        61.14.248.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:ed:65:08:5a:00:da:b3:14:37:a6:0f:2b:2b:92:e5:51:c5:c2:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=455696A81F434F9A36D66F455F4B3C43855A18E1
        Validity
            Not Before: Sep 25 21:57:32 2021 GMT
            Not After : Sep 25 22:02:32 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f1:c7:ed:68:8c:5b:a7:5d:f7:7f:75:09:62:
                    b7:1c:ba:e8:ef:d3:f4:c5:64:fd:61:95:27:1f:cd:
                    2d:12:e8:a0:39:f9:4c:a3:b4:e0:18:70:dd:51:ee:
                    9e:cc:da:c0:23:d1:21:2f:a1:93:d4:eb:cf:72:10:
                    b8:71:56:de:4f:1a:c3:35:b6:fb:68:9e:7d:65:40:
                    ec:72:1d:fa:38:f9:17:ee:3e:24:79:25:58:12:ed:
                    d2:f5:ae:b8:43:15:50:00:2f:fe:fb:0a:d3:8a:ee:
                    d6:34:98:41:47:ca:9f:d3:75:f1:18:3a:cd:5c:ab:
                    30:74:f3:dc:56:03:4c:1c:99:52:af:9d:ef:d3:a0:
                    f7:81:c9:de:ab:21:18:f4:f3:13:2a:fd:70:6d:e6:
                    79:f2:fd:3c:f8:ab:c9:ee:b9:87:79:59:45:2f:95:
                    e4:2e:62:ee:f5:1f:11:52:e6:c5:8b:38:57:45:1b:
                    a6:c0:de:45:38:93:bc:66:18:15:b0:72:90:b0:80:
                    e1:84:65:83:23:a9:90:64:1e:b0:b9:f8:0c:9b:a3:
                    18:ff:20:72:13:dc:01:e1:60:36:b9:b3:b2:cd:82:
                    aa:95:d7:7b:3f:b6:08:87:b0:17:7e:c5:89:49:67:
                    2d:dd:27:28:03:7f:3f:bb:c6:55:48:20:67:d8:48:
                    8e:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:85:A1:CC:69:F6:CD:34:4E:EB:D2:B9:5C:68:8A:74:0D:6A:0A:CF
            X509v3 Authority Key Identifier:
                keyid:45:56:96:A8:1F:43:4F:9A:36:D6:6F:45:5F:4B:3C:43:85:5A:18:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/455696A81F434F9A36D66F455F4B3C43855A18E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/455696A81F434F9A36D66F455F4B3C43855A18E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ad918b15-e63e-4b38-a05c-650fb49f0594/0/36312e31342e3234382e302f32322d3234203d3e203633353031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.14.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         55:a7:24:3b:60:a4:38:92:cb:ac:71:95:9a:8b:ae:00:fb:ec:
         b0:11:5c:08:8e:86:af:a1:26:0d:9a:94:66:cb:8f:20:3b:08:
         02:a4:e3:6e:e4:3e:0e:ba:aa:b4:db:23:0c:4d:3e:0d:70:72:
         f5:ca:bd:98:c3:f2:b9:02:30:1c:80:43:cd:ef:e0:e3:fe:d3:
         01:ae:86:a4:20:24:70:09:6e:1e:93:c3:f8:52:61:65:bb:e0:
         98:3b:f5:33:42:92:54:37:0b:2b:77:23:5f:e0:44:77:d3:bf:
         6a:95:98:02:39:7e:1c:d4:62:9c:cf:c2:b1:d2:3d:a5:54:e6:
         12:3e:07:12:2d:ce:98:79:c7:e7:19:1b:bf:fb:03:e1:76:cc:
         21:4e:c2:aa:27:cc:fb:7f:f5:45:2c:7c:d1:65:59:0e:3a:ca:
         e7:f7:57:08:1a:58:74:e8:88:52:23:80:11:be:98:d4:18:34:
         76:2f:5e:ec:11:8f:28:09:ea:60:61:0f:59:48:2f:64:6e:82:
         65:16:ba:dc:e1:f4:e4:90:6d:98:6b:d5:28:6b:f7:17:8a:cd:
         74:44:c3:a1:bb:74:43:43:77:ac:5b:e3:1a:f2:8e:ee:1d:29:
         63:ca:f2:4f:b2:f4:af:3b:24:0a:f1:a8:e1:86:b5:f0:e9:70:
         76:73:83:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:52 2024 by rpki-client on console-ams.rpki-client.org