Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/100abb0a-a28d-4b4f-b1ac-88f49e58e2a1/0/3130332e3138312e3235342e302f32332d3234203d3e20313439333839.roa
File:                     3130332e3138312e3235342e302f32332d3234203d3e20313439333839.roa (raw, json)
Hash identifier:          2kcricDpUDOeO0eFk7Ah3WmDyIgT8PgBmlGqcdj8adk=
Subject key identifier:   DF:C3:24:78:A3:33:B9:94:B5:2D:74:A2:5E:66:50:EC:F1:52:8A:B4
Certificate issuer:       /CN=73D30A13FBA67782025971B109550DC3C504AC05
Certificate serial:       63B21141F26E87D89F062AA41ECDED9F84351365
Authority key identifier: 73:D3:0A:13:FB:A6:77:82:02:59:71:B1:09:55:0D:C3:C5:04:AC:05
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73D30A13FBA67782025971B109550DC3C504AC05.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/100abb0a-a28d-4b4f-b1ac-88f49e58e2a1/0/3130332e3138312e3235342e302f32332d3234203d3e20313439333839.roa
Signing time:             Fri 15 Jul 2022 07:45:17 +0000
ROA not before:           Fri 15 Jul 2022 07:40:17 +0000
ROA not after:            Fri 14 Jul 2023 07:45:17 +0000
asID:                     149389
IP address blocks:        103.181.254.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:b2:11:41:f2:6e:87:d8:9f:06:2a:a4:1e:cd:ed:9f:84:35:13:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73D30A13FBA67782025971B109550DC3C504AC05
        Validity
            Not Before: Jul 15 07:40:17 2022 GMT
            Not After : Jul 14 07:45:17 2023 GMT
        Subject: CN=DFC32478A333B994B52D74A25E6650ECF1528AB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:7d:48:3a:8f:93:98:b7:60:45:d1:51:e8:48:
                    29:f7:83:22:e8:f3:01:79:a9:a0:0e:dc:51:6e:eb:
                    3b:7e:3f:c7:86:f2:6b:63:2d:53:0a:a9:59:77:4d:
                    cd:8d:ed:ad:5f:c3:74:cb:2e:a2:4c:d4:22:8b:de:
                    2c:75:9b:6c:1f:ff:3a:6b:f6:bb:5b:dd:2a:49:1d:
                    51:d7:9a:49:31:5b:a3:07:b6:d5:4b:8d:49:64:5c:
                    45:e3:de:39:62:ba:90:00:fe:16:25:b7:7e:87:72:
                    d0:fe:4c:82:aa:46:91:af:9c:65:3d:c6:3f:13:4d:
                    5f:cf:3d:36:30:f7:c3:ed:1a:b4:21:5d:01:fc:0a:
                    06:8c:3d:1f:f6:6b:99:04:93:db:1b:43:3d:c5:a9:
                    fa:7a:50:34:d4:85:9b:0e:74:37:90:39:90:aa:a6:
                    9c:51:97:c0:b6:10:6e:b2:a3:3a:f1:0d:bf:f2:9a:
                    91:32:03:55:d7:40:c6:3d:41:f6:a8:a8:3a:1b:69:
                    81:08:e5:13:a2:01:16:9d:10:c7:01:d7:78:7b:a9:
                    b5:79:80:34:aa:a4:ae:ee:74:19:5e:48:53:5c:a1:
                    45:ad:f9:27:f7:c9:c8:e3:4d:2a:65:c7:e3:9e:74:
                    a8:a7:fc:fa:11:bf:a1:4d:18:21:07:42:e3:96:c5:
                    d7:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:C3:24:78:A3:33:B9:94:B5:2D:74:A2:5E:66:50:EC:F1:52:8A:B4
            X509v3 Authority Key Identifier:
                keyid:73:D3:0A:13:FB:A6:77:82:02:59:71:B1:09:55:0D:C3:C5:04:AC:05

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/100abb0a-a28d-4b4f-b1ac-88f49e58e2a1/0/73D30A13FBA67782025971B109550DC3C504AC05.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/73D30A13FBA67782025971B109550DC3C504AC05.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/100abb0a-a28d-4b4f-b1ac-88f49e58e2a1/0/3130332e3138312e3235342e302f32332d3234203d3e20313439333839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.181.254.0/23

    Signature Algorithm: sha256WithRSAEncryption
         13:e4:20:28:91:03:16:53:83:67:51:3e:bc:c7:1f:8d:26:be:
         11:6e:9a:c7:57:f1:80:34:46:be:1f:84:48:48:95:98:4e:e9:
         69:05:db:45:7b:f2:0f:0b:a5:ac:46:22:13:39:4e:c4:64:9f:
         5b:a2:04:e8:94:c8:2d:39:4e:13:b2:41:cc:b3:d0:26:1d:f0:
         4c:4a:ce:09:91:f5:0a:2d:55:88:43:52:85:a8:49:cc:a9:b2:
         dd:fa:d8:00:30:39:8a:93:e6:99:1b:0f:b3:6f:9c:e8:76:61:
         8c:f2:f5:10:71:f3:d0:40:89:ff:59:3a:89:df:60:d6:80:26:
         c4:6f:1c:a9:37:1e:fc:29:11:06:51:dc:f0:21:24:43:f8:88:
         d9:ab:94:19:2f:40:a7:a4:b5:ee:27:05:7d:42:95:7a:48:27:
         1c:e2:58:b5:9e:a2:91:30:07:7e:1c:9e:39:6e:49:15:ef:9d:
         8e:91:2f:a1:b3:aa:54:be:4e:7f:5c:06:49:d2:fd:10:07:47:
         d9:e1:a6:7f:ec:45:2a:1b:8a:14:07:b2:69:da:73:74:37:18:
         86:4d:91:6b:c3:0d:d0:df:ed:ab:0d:21:f6:9c:fe:f2:1d:fa:
         3d:89:8f:96:17:4a:54:a8:46:68:a6:f2:30:77:f1:70:4c:dc:
         95:cf:ef:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:01 2024 by rpki-client on console-fra.rpki-client.org