Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/3130332e3130322e31352e302f32342d3234203d3e20313336383635.roa
File:                     3130332e3130322e31352e302f32342d3234203d3e20313336383635.roa (raw, json)
Hash identifier:          4nngizPSIsZSWb5NAuf5u5n/G/Qcq3zsrCVkAvTZnng=
Subject key identifier:   7E:DB:09:34:59:CC:0A:D3:F4:7B:6D:07:44:95:3E:08:A7:B7:B2:E0
Certificate issuer:       /CN=08773191FBFC21A3C8615A3E36A2ACB187F63C25
Certificate serial:       06F6ADB5404FCAEFB6102E3A930C6A4596C1FC32
Authority key identifier: 08:77:31:91:FB:FC:21:A3:C8:61:5A:3E:36:A2:AC:B1:87:F6:3C:25
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08773191FBFC21A3C8615A3E36A2ACB187F63C25.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/3130332e3130322e31352e302f32342d3234203d3e20313336383635.roa
Signing time:             Tue 17 Jan 2023 00:12:01 +0000
ROA not before:           Tue 17 Jan 2023 00:07:01 +0000
ROA not after:            Tue 16 Jan 2024 00:12:01 +0000
asID:                     136865
IP address blocks:        103.102.15.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:f6:ad:b5:40:4f:ca:ef:b6:10:2e:3a:93:0c:6a:45:96:c1:fc:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08773191FBFC21A3C8615A3E36A2ACB187F63C25
        Validity
            Not Before: Jan 17 00:07:01 2023 GMT
            Not After : Jan 16 00:12:01 2024 GMT
        Subject: CN=7EDB093459CC0AD3F47B6D0744953E08A7B7B2E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:d2:f2:67:0b:8b:9e:51:04:9f:7c:49:b3:2e:
                    dd:cf:7a:67:37:a3:1d:41:ca:17:5c:17:e0:4b:d1:
                    7e:f9:52:ef:c0:25:f9:61:91:16:67:09:74:9d:bd:
                    e2:3a:4d:e8:15:7b:30:db:a8:5c:45:71:b9:0a:1e:
                    58:6f:0c:c3:72:5a:8b:8a:d0:0d:93:7e:6a:42:52:
                    a3:53:21:8f:bb:f1:d7:1d:a5:9a:ca:f7:50:96:3f:
                    be:07:a9:c1:20:1e:d1:94:70:bb:bd:49:1a:0a:1f:
                    88:58:37:a2:16:5a:fa:73:45:ea:80:22:c5:87:97:
                    b0:e7:d6:4b:51:ad:ec:b9:52:97:9b:ec:2b:bb:bb:
                    cf:c9:fd:2a:15:a1:07:d6:39:5b:72:cc:05:0f:e6:
                    d4:51:6b:47:a3:72:ba:1b:ca:87:59:aa:3c:4a:0b:
                    b1:a6:f0:db:00:d4:28:8e:69:f8:74:66:3b:2a:63:
                    70:b7:3a:cc:de:6d:65:63:b5:32:4c:71:21:0b:99:
                    f0:ec:a6:dc:1c:1c:b7:1d:e2:82:14:bd:ca:93:fc:
                    b5:fb:da:3c:69:a7:94:bc:df:4e:e5:18:4c:de:6e:
                    be:3b:c0:2f:08:f4:11:00:77:30:4d:7e:fa:1b:83:
                    d7:7c:33:33:7f:a2:9a:f0:b7:44:f5:06:d7:f6:fc:
                    2f:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:DB:09:34:59:CC:0A:D3:F4:7B:6D:07:44:95:3E:08:A7:B7:B2:E0
            X509v3 Authority Key Identifier:
                keyid:08:77:31:91:FB:FC:21:A3:C8:61:5A:3E:36:A2:AC:B1:87:F6:3C:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/08773191FBFC21A3C8615A3E36A2ACB187F63C25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/08773191FBFC21A3C8615A3E36A2ACB187F63C25.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5f86b12e-e574-426b-aa6b-4939e3b030ba/0/3130332e3130322e31352e302f32342d3234203d3e20313336383635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.102.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:f1:72:f1:3c:49:d4:9a:25:af:14:3d:db:de:d0:f7:f3:0d:
         d5:38:ea:7d:03:99:49:69:91:f2:cc:2c:3a:82:cc:bb:a5:99:
         45:b0:6d:fd:8c:18:2f:0c:86:09:c8:36:f5:a1:49:95:35:4f:
         80:57:ee:d0:64:70:4c:0a:09:76:4d:2c:55:f7:db:b8:8d:9e:
         3d:ef:f8:08:55:a8:6e:d9:22:37:04:80:b8:20:03:15:82:a1:
         47:61:62:a8:1b:e5:00:2f:96:33:71:a7:b6:df:a1:9a:43:7a:
         57:95:e8:81:f5:b2:54:cb:a1:fb:89:8e:ba:41:de:b8:91:f4:
         05:92:68:9e:9b:e2:cd:e0:4f:f9:58:62:78:ef:12:f2:33:87:
         1b:e1:f2:3d:bd:7d:ee:22:a6:d9:73:76:c8:b4:0f:3a:ab:fe:
         ab:f4:29:a8:62:8b:0f:20:3e:3c:b1:27:6e:6d:8a:94:f9:46:
         72:a9:ea:ba:14:42:59:b9:55:de:c3:76:42:21:e4:2a:f7:c5:
         3a:62:7a:a7:3a:a3:9d:ab:60:19:8c:71:bc:f6:d3:54:e8:48:
         3b:ba:93:71:f8:3e:27:ac:f3:82:72:ca:26:b0:c7:9a:80:af:
         e1:1c:b9:e4:7d:42:d4:01:a0:1a:b4:8c:ac:52:00:6a:97:80:
         30:dc:21:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:07 2024 by rpki-client on console-fra.rpki-client.org