Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/323430363a313334303a3a2f33332d3333203d3e20313430343037.roa
File:                     323430363a313334303a3a2f33332d3333203d3e20313430343037.roa (raw, json)
Hash identifier:          3yHdQiDUnE15Cf+agjc9xRRZkvNj9JxSLI6a3gPeNHE=
Subject key identifier:   29:32:F0:7D:27:B7:F8:53:F5:31:F9:51:FF:5B:BF:9F:E2:25:9C:71
Certificate issuer:       /CN=F10DEA85A199138D0AD96DC4D3CB537CDA662C53
Certificate serial:       66B7BB9F8B9BC158F6B4C5FFB72819C8F3BE3DE2
Authority key identifier: F1:0D:EA:85:A1:99:13:8D:0A:D9:6D:C4:D3:CB:53:7C:DA:66:2C:53
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F10DEA85A199138D0AD96DC4D3CB537CDA662C53.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/323430363a313334303a3a2f33332d3333203d3e20313430343037.roa
Signing time:             Sun 28 Aug 2022 23:09:09 +0000
ROA not before:           Sun 28 Aug 2022 23:04:09 +0000
ROA not after:            Sun 27 Aug 2023 23:09:09 +0000
asID:                     140407
IP address blocks:        2406:1340::/33 maxlen: 33

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:b7:bb:9f:8b:9b:c1:58:f6:b4:c5:ff:b7:28:19:c8:f3:be:3d:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F10DEA85A199138D0AD96DC4D3CB537CDA662C53
        Validity
            Not Before: Aug 28 23:04:09 2022 GMT
            Not After : Aug 27 23:09:09 2023 GMT
        Subject: CN=2932F07D27B7F853F531F951FF5BBF9FE2259C71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:16:b7:b4:28:fb:bc:f0:62:14:35:c9:68:d6:
                    ab:1c:8d:78:b6:01:06:11:ee:88:2b:26:36:64:37:
                    58:61:97:f8:67:07:7d:91:37:56:13:7e:26:81:01:
                    98:cd:3b:6c:e6:b0:ff:cf:e7:96:9b:8f:92:9b:e8:
                    f3:67:e8:95:25:d7:91:3c:cf:00:96:73:74:32:a2:
                    54:21:0e:96:02:c4:e3:74:f8:a6:14:df:71:c1:fe:
                    9a:a4:14:47:b8:3c:91:53:3d:2f:4c:0d:72:fd:e9:
                    03:15:37:73:11:d5:2a:f8:0c:7b:84:cf:26:5b:c3:
                    25:e8:00:0f:d6:31:ac:19:44:ca:de:52:43:80:88:
                    af:35:b6:5d:58:1a:78:9e:13:d9:f7:35:44:93:0c:
                    96:3b:a5:ae:2d:c2:95:c4:56:c3:78:74:5b:ba:b0:
                    ed:69:4f:2c:5f:f3:12:4b:d7:59:51:0b:98:ed:b4:
                    8c:bc:b8:ad:ea:c9:5c:3f:d8:22:90:f9:5a:f6:ce:
                    79:83:a4:f4:6d:59:35:b1:dd:34:f2:fe:ee:6c:ac:
                    3c:ee:54:80:74:d7:64:c8:43:fa:ac:75:a2:a6:1d:
                    3c:16:c3:06:35:e9:c0:51:21:99:3e:61:bc:47:49:
                    c9:e3:28:40:8b:a6:72:6e:03:f0:8d:a2:37:4b:ef:
                    84:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:32:F0:7D:27:B7:F8:53:F5:31:F9:51:FF:5B:BF:9F:E2:25:9C:71
            X509v3 Authority Key Identifier:
                keyid:F1:0D:EA:85:A1:99:13:8D:0A:D9:6D:C4:D3:CB:53:7C:DA:66:2C:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/F10DEA85A199138D0AD96DC4D3CB537CDA662C53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F10DEA85A199138D0AD96DC4D3CB537CDA662C53.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c596bcc8-38cd-4437-80b1-5bae9f857937/0/323430363a313334303a3a2f33332d3333203d3e20313430343037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2406:1340::/33

    Signature Algorithm: sha256WithRSAEncryption
         52:cd:f3:c5:79:f1:ed:8d:0f:bc:f9:9b:01:04:21:e7:92:ac:
         ff:b5:77:a5:9b:34:5f:c0:75:bf:c4:63:89:d9:a9:24:99:77:
         83:10:aa:64:13:18:b7:9a:47:23:c3:6e:20:fa:a9:cd:5a:40:
         18:3c:3f:32:36:04:c5:4d:6b:0d:de:bd:09:9a:c4:e0:de:1d:
         29:47:c6:ab:cf:d2:f8:5c:13:52:e7:65:56:52:a6:9e:f0:8f:
         50:5e:27:10:5f:40:95:8d:46:d1:8f:c3:8a:e9:b9:cb:72:89:
         80:cf:65:97:5a:c5:93:6f:df:27:58:5c:94:ac:ed:17:52:27:
         56:fa:49:91:ec:64:c2:d3:fb:ba:e9:cc:41:5f:e9:16:76:a6:
         2a:9b:c0:27:d0:d8:52:05:bb:15:49:1c:53:eb:19:61:a9:0f:
         db:ca:a6:0e:4f:3b:ea:3f:8b:71:2e:26:e2:d0:b6:c8:fc:3e:
         e2:6c:07:49:56:af:39:87:f3:eb:d9:27:3a:41:bd:20:cd:b6:
         46:f2:b4:bd:11:30:f9:b4:2f:e3:91:f8:e9:02:05:4d:a3:f3:
         6c:16:2f:f7:14:5e:f4:25:04:32:ec:6e:8b:21:0e:62:dc:c6:
         22:76:f3:95:3e:88:d5:e0:62:27:83:01:12:80:86:33:d6:6e:
         5f:67:f9:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:16 2024 by rpki-client on console-fra.rpki-client.org