Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3131342e33312e3234372e302f32342d3234203d3e203338373638.roa
File:                     3131342e33312e3234372e302f32342d3234203d3e203338373638.roa (raw, json)
Hash identifier:          i3BDmra8269eDP0V05vQJEI2zgvoue98DfSM8Cl/Uec=
Subject key identifier:   CC:D4:EC:06:56:FA:21:B4:9E:7D:50:2C:27:1B:5E:DA:58:12:AB:7B
Certificate issuer:       /CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
Certificate serial:       5B48A054DAAA625E909D71CD40AF939C3D37F18E
Authority key identifier: 6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3131342e33312e3234372e302f32342d3234203d3e203338373638.roa
Signing time:             Wed 16 Nov 2022 12:01:26 +0000
ROA not before:           Wed 16 Nov 2022 11:56:26 +0000
ROA not after:            Wed 15 Nov 2023 12:01:26 +0000
asID:                     38768
IP address blocks:        114.31.247.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:48:a0:54:da:aa:62:5e:90:9d:71:cd:40:af:93:9c:3d:37:f1:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
        Validity
            Not Before: Nov 16 11:56:26 2022 GMT
            Not After : Nov 15 12:01:26 2023 GMT
        Subject: CN=CCD4EC0656FA21B49E7D502C271B5EDA5812AB7B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:78:5d:76:70:40:7e:60:45:f2:d2:73:2e:56:
                    44:1b:b2:71:92:b5:c2:37:43:4f:f8:f1:0d:79:bb:
                    82:3d:2d:d4:b2:c7:ed:a9:b3:1e:52:0a:a8:2b:0e:
                    99:d7:ea:01:b4:8c:e3:74:01:9a:94:49:7f:06:23:
                    87:16:ca:55:c3:ba:8d:5a:96:a2:16:f9:5d:70:ff:
                    d7:43:e1:16:4e:67:5f:c9:87:6c:46:e1:c0:df:6a:
                    79:09:c2:aa:fd:c3:14:fc:24:f8:bd:d2:bc:6f:fb:
                    82:09:46:50:55:4f:f6:9f:44:23:fd:0a:c7:bb:ef:
                    76:18:fa:16:c6:8b:98:11:95:c3:75:b7:a6:ee:01:
                    ff:c0:6d:17:50:c6:ae:6b:33:86:f3:f1:3b:12:bb:
                    82:8a:42:53:53:aa:67:e2:23:54:d4:04:22:b5:29:
                    4c:a9:ab:fd:02:90:c5:e8:b0:44:91:b2:cc:e4:28:
                    fe:73:69:b1:bd:a2:9c:b6:b3:d2:6d:38:fb:b2:6d:
                    fb:a2:a8:6a:5e:f3:e1:92:59:7e:80:8d:2f:c7:0d:
                    c8:c0:96:eb:3f:b8:5f:9e:ee:69:1f:6b:c1:b8:21:
                    3a:1e:a8:69:28:13:a2:2c:31:fc:36:aa:72:61:6c:
                    d2:ea:d6:79:2a:0b:f1:ee:a4:1f:94:43:4f:cb:24:
                    de:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:D4:EC:06:56:FA:21:B4:9E:7D:50:2C:27:1B:5E:DA:58:12:AB:7B
            X509v3 Authority Key Identifier:
                keyid:6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3131342e33312e3234372e302f32342d3234203d3e203338373638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.31.247.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2c:4e:33:a9:8c:01:9a:1d:82:dd:af:66:70:61:a1:73:07:fe:
         6f:ff:9c:81:f4:1e:a3:ab:7b:00:ed:66:c8:e7:70:01:a1:ed:
         46:85:de:13:97:9a:64:49:cd:78:72:e1:f8:c2:6d:9e:f7:92:
         53:9f:61:f6:26:4e:89:ef:ed:2a:99:d5:c0:73:58:b0:18:25:
         0b:ca:31:de:36:b5:a9:cf:4e:cc:23:0f:6c:f5:ab:d2:38:aa:
         22:f7:67:60:55:2b:98:11:1f:7d:45:e2:63:67:bf:14:ce:c2:
         fd:5f:96:c3:00:b8:a8:de:8c:84:f9:b4:c6:2e:be:72:06:47:
         d4:02:67:7f:c3:0a:9b:a5:8c:5b:d2:92:02:6a:00:de:29:af:
         4c:31:ce:ef:d5:9d:e6:fa:b3:b7:b1:0f:c6:19:2d:71:be:ce:
         8a:00:97:8d:ad:a5:66:8c:2d:07:9a:7f:d0:f9:e4:c3:ec:9d:
         85:1d:99:4c:f0:f5:fc:e5:e7:1c:7f:38:ba:34:e0:2f:18:e9:
         40:a0:41:f8:14:15:e6:f3:74:96:0c:a3:cc:d4:5d:6a:eb:f5:
         3c:fd:d9:08:af:19:a2:06:c9:75:66:75:e4:0d:50:3a:88:f4:
         b9:9e:64:87:e2:af:65:15:6d:07:23:4c:84:c8:af:dd:a0:92:
         20:52:e1:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:16 2024 by rpki-client on console-fra.rpki-client.org