Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/0e05a1ce-849f-417c-b673-fdd33f0d7447/0/3130332e3137302e3130302e302f32332d3234203d3e20313432333634.roa
File:                     3130332e3137302e3130302e302f32332d3234203d3e20313432333634.roa (raw, json)
Hash identifier:          AOoaNkWhdvOYTPX3zuwNCVdCMopEh2XrNjzuZ0OiZ9A=
Subject key identifier:   B0:8B:A4:B2:DC:17:72:F8:15:65:FA:33:7E:8C:41:D2:DF:8D:EA:93
Certificate issuer:       /CN=B0AAB728B88975526C1741CCA8673CBC88F7697C
Certificate serial:       27240AB98F36F7BF2B92CBF5A499B7C618F546A5
Authority key identifier: B0:AA:B7:28:B8:89:75:52:6C:17:41:CC:A8:67:3C:BC:88:F7:69:7C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0AAB728B88975526C1741CCA8673CBC88F7697C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/0e05a1ce-849f-417c-b673-fdd33f0d7447/0/3130332e3137302e3130302e302f32332d3234203d3e20313432333634.roa
Signing time:             Fri 30 Dec 2022 02:00:01 +0000
ROA not before:           Fri 30 Dec 2022 01:55:01 +0000
ROA not after:            Fri 29 Dec 2023 02:00:01 +0000
asID:                     142364
IP address blocks:        103.170.100.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:24:0a:b9:8f:36:f7:bf:2b:92:cb:f5:a4:99:b7:c6:18:f5:46:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0AAB728B88975526C1741CCA8673CBC88F7697C
        Validity
            Not Before: Dec 30 01:55:01 2022 GMT
            Not After : Dec 29 02:00:01 2023 GMT
        Subject: CN=B08BA4B2DC1772F81565FA337E8C41D2DF8DEA93
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:2e:5a:9c:39:9b:7f:f6:90:87:bf:4f:f4:29:
                    6e:13:a4:ed:92:c0:5f:cc:38:74:c0:1f:16:ff:00:
                    b0:bf:76:c0:be:5f:86:29:05:23:d8:d8:fc:72:3a:
                    e6:eb:3d:bc:98:09:37:51:90:0b:03:fc:e3:ca:f4:
                    df:8e:ac:f8:d9:94:df:c1:a9:49:cf:ee:8c:b3:31:
                    db:86:87:30:e2:a9:de:5c:2e:20:8e:45:c3:c3:c0:
                    55:c0:fd:df:c3:40:94:2f:cc:cd:3a:86:92:c4:66:
                    62:05:03:c3:f9:0a:cb:f0:5e:d4:61:11:f8:f1:50:
                    64:08:df:e7:37:08:a8:42:d0:89:60:92:7e:48:83:
                    e4:68:70:16:5e:a6:c3:58:42:d7:d8:6c:e3:9d:03:
                    80:95:1b:64:6e:6b:eb:e1:5a:e8:3d:d5:99:53:23:
                    ab:15:09:25:21:c1:ca:56:ed:0c:84:c1:c1:18:91:
                    ef:6b:b0:03:4b:a5:c0:19:d4:7e:16:6f:db:c9:29:
                    1a:c2:5e:ce:a1:89:71:27:ce:4e:35:39:1a:fe:40:
                    29:12:e2:6c:4b:e9:7c:63:80:67:5b:e9:97:13:f9:
                    49:c0:b1:82:ad:f0:90:50:ca:b7:d2:e0:e5:37:ef:
                    7c:2a:38:2b:6b:f4:be:e2:06:b1:7f:7c:10:cb:d0:
                    2a:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:8B:A4:B2:DC:17:72:F8:15:65:FA:33:7E:8C:41:D2:DF:8D:EA:93
            X509v3 Authority Key Identifier:
                keyid:B0:AA:B7:28:B8:89:75:52:6C:17:41:CC:A8:67:3C:BC:88:F7:69:7C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/0e05a1ce-849f-417c-b673-fdd33f0d7447/0/B0AAB728B88975526C1741CCA8673CBC88F7697C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B0AAB728B88975526C1741CCA8673CBC88F7697C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0e05a1ce-849f-417c-b673-fdd33f0d7447/0/3130332e3137302e3130302e302f32332d3234203d3e20313432333634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.170.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         12:37:cb:07:a4:5d:de:34:9d:f7:91:15:ca:ab:f2:c3:43:9e:
         da:19:e9:71:3b:f4:77:01:0b:43:eb:a5:de:e2:b2:27:74:59:
         b4:7e:4d:49:a6:23:0a:e3:58:9b:51:5d:95:c5:70:1d:56:8a:
         08:42:29:2d:9a:5f:00:e6:0c:5e:48:d7:43:fe:93:4a:db:6d:
         a0:a8:20:42:84:48:45:e3:83:2a:d9:ea:5b:61:b3:1c:c1:f6:
         61:20:7f:bb:62:f4:82:05:fe:71:12:4b:27:8f:32:2a:11:ad:
         58:84:d2:95:65:01:61:48:69:28:fd:2c:32:5e:b6:94:33:23:
         e9:c4:87:e3:21:12:75:e3:e8:34:e7:51:91:2d:10:31:0f:5d:
         12:e6:e9:0a:c7:af:e5:fb:ba:47:cd:c4:13:18:fc:3e:76:73:
         2f:43:25:1e:a2:ca:c7:e4:0c:da:0f:c9:3f:69:4c:6a:62:67:
         0e:61:f5:76:19:b6:62:7a:91:1a:a3:fe:ef:4b:88:64:4e:c7:
         c6:46:00:51:e6:e7:47:28:fd:fc:69:49:c9:1d:c9:51:47:64:
         99:6b:bb:fb:2a:59:7e:27:b5:ff:a7:dd:3f:55:ac:30:fe:4b:
         c5:89:00:fb:94:f2:68:ee:c8:25:a7:c8:17:93:ea:da:ee:64:
         cd:cb:e6:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:01 2024 by rpki-client on console-fra.rpki-client.org