Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/3130332e3232342e3130302e302f32322d3234203d3e203539313535.roa
File:                     3130332e3232342e3130302e302f32322d3234203d3e203539313535.roa (raw, json)
Hash identifier:          GPpIBETWBmlGcuo2kDq5qC9MFAvtfH792yfi+jSa1gE=
Subject key identifier:   67:87:C3:CE:FC:A1:FA:69:99:B5:6D:9A:AC:5D:2B:9C:C4:9E:21:DC
Certificate issuer:       /CN=EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02
Certificate serial:       36310E1D5A87B60AE03044B27AF11711BE3286F6
Authority key identifier: EF:C4:76:AB:80:A5:D0:AD:9F:CC:AA:14:41:C1:F6:41:83:8E:2E:02
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/3130332e3232342e3130302e302f32322d3234203d3e203539313535.roa
Signing time:             Sat 25 Sep 2021 22:00:46 +0000
ROA not before:           Sat 25 Sep 2021 21:55:46 +0000
ROA not after:            Sun 25 Sep 2022 22:00:46 +0000
asID:                     59155
IP address blocks:        103.224.100.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:31:0e:1d:5a:87:b6:0a:e0:30:44:b2:7a:f1:17:11:be:32:86:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02
        Validity
            Not Before: Sep 25 21:55:46 2021 GMT
            Not After : Sep 25 22:00:46 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:3c:0f:39:81:ba:11:48:04:0b:04:31:60:80:
                    ca:4c:cd:74:de:97:5e:7b:c6:ff:34:2f:29:5c:10:
                    07:08:61:19:78:c0:3b:be:92:4a:0f:d1:31:61:33:
                    d4:de:40:48:4e:87:47:a9:fd:99:25:06:86:9a:f6:
                    a1:30:ea:30:ab:32:08:54:3a:4f:43:4f:c7:98:ef:
                    19:b1:0c:db:bf:00:b6:83:45:96:b7:9c:81:80:80:
                    14:01:77:50:43:0d:46:d8:63:ea:04:11:df:d9:08:
                    3e:61:35:c3:6a:17:c4:5e:2a:83:07:0e:52:94:64:
                    32:1f:80:ad:fd:da:8f:a2:ae:9a:f8:31:e5:29:c9:
                    bf:a0:73:55:c8:db:43:ac:80:eb:c5:fe:3b:1f:00:
                    e6:75:58:39:ec:72:6f:d4:f1:c7:e4:a7:1a:0a:59:
                    13:a8:cf:5b:99:07:45:b5:fb:ee:92:5e:e6:c7:4b:
                    d8:93:5a:9b:f2:8b:8e:a3:35:94:f3:84:05:5b:1f:
                    ff:2f:9f:e4:a6:e1:f9:57:e7:7d:91:72:54:93:7e:
                    d3:91:f0:79:91:c1:34:9f:c0:fc:29:f7:31:01:d5:
                    d0:45:4c:68:a4:db:d2:fe:df:be:10:d6:79:75:b1:
                    c4:2e:a9:c7:89:8c:c9:04:fa:6e:95:af:bc:b7:42:
                    f7:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:87:C3:CE:FC:A1:FA:69:99:B5:6D:9A:AC:5D:2B:9C:C4:9E:21:DC
            X509v3 Authority Key Identifier:
                keyid:EF:C4:76:AB:80:A5:D0:AD:9F:CC:AA:14:41:C1:F6:41:83:8E:2E:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/3130332e3232342e3130302e302f32322d3234203d3e203539313535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.224.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         11:86:0f:54:0e:54:65:56:bc:8b:ce:d5:78:82:04:9c:6b:d8:
         92:8a:22:ea:7b:b8:f1:67:32:b3:3b:4b:d6:a9:df:cf:f0:b6:
         fd:48:6a:99:41:cc:65:c7:3f:76:f9:59:20:d0:83:a2:e7:c4:
         a0:aa:ad:6b:ca:ba:28:9d:d9:0e:03:2c:5d:3f:e7:6d:10:fe:
         c9:f6:f3:af:9e:e6:61:32:25:51:4a:a8:01:01:27:06:45:6f:
         06:40:89:92:f7:fe:f0:63:c3:c7:8a:9e:6f:30:fb:6e:ce:a9:
         a0:43:1e:a0:eb:2e:09:87:1a:e3:39:08:65:a4:43:3b:1a:71:
         3e:bc:1e:bc:cc:2d:2c:e6:f2:05:ac:11:08:56:f6:9d:0b:7d:
         83:f0:e4:0b:32:ad:c5:c0:a4:92:fe:bc:4f:24:a3:13:e8:9d:
         24:01:71:ad:b4:ec:4c:ea:6e:51:b3:8c:61:2d:b1:d6:71:24:
         9b:1d:c7:4d:54:b9:44:f5:b3:6f:9a:90:c0:5c:83:8e:4c:eb:
         55:88:7e:c5:2e:51:0a:a6:93:5a:49:0a:42:f8:0f:e6:43:f4:
         0d:82:55:b2:91:cb:b9:92:7d:02:33:4a:97:7a:08:4a:57:d0:
         33:5f:73:9a:97:8e:75:44:67:09:24:8b:74:e2:4d:be:c2:52:
         1c:fd:b3:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:46 2023 by rpki-client on console-fra.rpki-client.org