Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/13fa7d5c-368d-4af3-b8e7-1786246dd62f/0/3130332e3137322e3134342e302f32342d3234203d3e20313432333839.roa
File:                     3130332e3137322e3134342e302f32342d3234203d3e20313432333839.roa (raw, json)
Hash identifier:          mzHt3y7qN3x7xPCaIBHjXUeR2zVCWOrnNlMlpU8GOq4=
Subject key identifier:   27:B3:54:2C:0D:6A:07:70:3B:A4:0C:15:49:3D:02:5F:34:1D:AB:C1
Certificate issuer:       /CN=0690815B5E9C2228263F17C9B3F5F99DD6882F9C
Certificate serial:       4D65B3D2A63FAF938A610497335D331AE88D5659
Authority key identifier: 06:90:81:5B:5E:9C:22:28:26:3F:17:C9:B3:F5:F9:9D:D6:88:2F:9C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0690815B5E9C2228263F17C9B3F5F99DD6882F9C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/13fa7d5c-368d-4af3-b8e7-1786246dd62f/0/3130332e3137322e3134342e302f32342d3234203d3e20313432333839.roa
Signing time:             Mon 29 May 2023 10:42:51 +0000
ROA not before:           Mon 29 May 2023 10:37:51 +0000
ROA not after:            Mon 27 May 2024 10:42:51 +0000
asID:                     142389
IP address blocks:        103.172.144.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:65:b3:d2:a6:3f:af:93:8a:61:04:97:33:5d:33:1a:e8:8d:56:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0690815B5E9C2228263F17C9B3F5F99DD6882F9C
        Validity
            Not Before: May 29 10:37:51 2023 GMT
            Not After : May 27 10:42:51 2024 GMT
        Subject: CN=27B3542C0D6A07703BA40C15493D025F341DABC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:f7:a0:e2:5c:64:75:61:66:92:53:7b:ad:1c:
                    4a:96:99:63:d6:aa:3c:6d:74:16:4a:18:de:cd:26:
                    6d:a9:07:f4:b0:2d:69:ad:b1:e3:76:bc:a4:de:a1:
                    78:0b:8a:b6:ad:f6:ac:bd:b9:07:dd:66:55:fd:18:
                    e1:0d:08:2a:13:a3:fa:c2:33:1e:d8:82:5d:e5:a5:
                    14:44:07:4f:65:10:d2:8f:c6:b4:58:1c:f2:b8:7b:
                    1c:b4:dc:0e:bb:41:d4:33:63:1a:ef:5f:27:0b:82:
                    fd:c9:3c:c8:b4:52:a7:23:a5:54:f8:69:4b:1a:c3:
                    58:53:7d:4d:2d:60:41:1d:11:44:24:29:e3:43:d3:
                    b0:0a:6b:04:21:ce:c6:86:89:41:04:31:2b:18:41:
                    df:c5:72:59:2f:fe:3d:6d:b9:75:67:87:f0:b2:29:
                    b6:ed:d5:66:bd:7f:31:73:47:a9:01:01:80:b0:43:
                    b6:4f:21:25:da:47:ac:39:2e:28:16:a1:69:6d:2d:
                    a2:da:0d:62:a0:5e:c3:7e:f3:c6:f1:ea:2d:0f:6f:
                    15:c1:5b:88:14:4b:46:9f:bc:a8:4d:7b:f1:eb:90:
                    aa:ea:17:cc:eb:7a:f4:2e:3b:ba:07:77:db:d1:c7:
                    f1:f3:65:29:65:72:2d:5d:9c:1b:fa:3d:5b:cb:97:
                    19:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:B3:54:2C:0D:6A:07:70:3B:A4:0C:15:49:3D:02:5F:34:1D:AB:C1
            X509v3 Authority Key Identifier:
                keyid:06:90:81:5B:5E:9C:22:28:26:3F:17:C9:B3:F5:F9:9D:D6:88:2F:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/13fa7d5c-368d-4af3-b8e7-1786246dd62f/0/0690815B5E9C2228263F17C9B3F5F99DD6882F9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0690815B5E9C2228263F17C9B3F5F99DD6882F9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/13fa7d5c-368d-4af3-b8e7-1786246dd62f/0/3130332e3137322e3134342e302f32342d3234203d3e20313432333839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.172.144.0/24

    Signature Algorithm: sha256WithRSAEncryption
         66:72:06:4a:d6:d6:c9:c2:ea:54:f8:b4:a7:3d:c7:fa:63:fc:
         b7:36:04:03:e1:d4:2f:57:0b:70:fb:f5:40:e3:fe:4f:da:11:
         c8:63:37:25:7e:b3:ef:c4:45:2e:d9:55:d9:2f:30:50:1a:9f:
         29:7b:99:d0:1b:4f:d5:20:ba:5f:17:23:70:40:1e:31:81:09:
         da:31:a4:68:4b:5b:7a:1c:af:ef:e9:75:ee:20:6b:d3:4c:9c:
         24:a5:33:86:f8:de:6b:f3:8f:32:20:f1:d1:be:61:bf:51:24:
         46:99:bf:1a:1f:66:a2:30:2e:66:12:c1:5f:ab:b3:b7:1d:5f:
         40:48:94:ac:91:41:fb:1b:b8:c5:07:da:43:af:6a:91:86:a2:
         4e:78:56:6c:23:66:56:c2:f4:ba:94:71:3c:97:80:96:1e:44:
         10:2b:aa:4b:67:a1:4e:d3:30:eb:68:f9:99:20:a8:97:3e:de:
         0c:f0:a0:94:79:fd:6e:2f:d2:00:3c:cf:f1:bd:dc:71:e1:3a:
         a6:35:74:05:00:bb:44:70:b7:b2:62:94:b6:7c:4b:f5:81:e2:
         99:07:60:b6:2f:f2:f1:0b:a7:e5:48:67:1b:f7:0e:19:40:e1:
         ae:bb:8c:d0:d9:6a:96:76:93:22:49:6d:d2:10:2b:05:e6:7a:
         90:64:14:79
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUTWWz0qY/r5OKYQSXM10zGuiNVlkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMDY5MDgxNUI1RTlDMjIyODI2M0YxN0M5QjNGNUY5OURE
Njg4MkY5QzAeFw0yMzA1MjkxMDM3NTFaFw0yNDA1MjcxMDQyNTFaMDMxMTAvBgNV
BAMTKDI3QjM1NDJDMEQ2QTA3NzAzQkE0MEMxNTQ5M0QwMjVGMzQxREFCQzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDe96DiXGR1YWaSU3utHEqWmWPW
qjxtdBZKGN7NJm2pB/SwLWmtseN2vKTeoXgLirat9qy9uQfdZlX9GOENCCoTo/rC
Mx7Ygl3lpRREB09lENKPxrRYHPK4exy03A67QdQzYxrvXycLgv3JPMi0UqcjpVT4
aUsaw1hTfU0tYEEdEUQkKeND07AKawQhzsaGiUEEMSsYQd/Fclkv/j1tuXVnh/Cy
Kbbt1Wa9fzFzR6kBAYCwQ7ZPISXaR6w5LigWoWltLaLaDWKgXsN+88bx6i0PbxXB
W4gUS0afvKhNe/HrkKrqF8zrevQuO7oHd9vRx/HzZSllci1dnBv6PVvLlxmlAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUJ7NULA1qB3A7pAwVST0CXzQdq8EwHwYDVR0j
BBgwFoAUBpCBW16cIigmPxfJs/X5ndaIL5wwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8x
M2ZhN2Q1Yy0zNjhkLTRhZjMtYjhlNy0xNzg2MjQ2ZGQ2MmYvMC8wNjkwODE1QjVF
OUMyMjI4MjYzRjE3QzlCM0Y1Rjk5REQ2ODgyRjlDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMDY5MDgxNUI1RTlDMjIyODI2M0YxN0M5QjNGNUY5OURENjg4
MkY5Qy5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzEzZmE3ZDVjLTM2OGQtNGFmMy1i
OGU3LTE3ODYyNDZkZDYyZi8wLzMxMzAzMzJlMzEzNzMyMmUzMTM0MzQyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzIzMzM4Mzkucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnrJAwDQYJ
KoZIhvcNAQELBQADggEBAGZyBkrW1snC6lT4tKc9x/pj/Lc2BAPh1C9XC3D79UDj
/k/aEchjNyV+s+/ERS7ZVdkvMFAanyl7mdAbT9Ugul8XI3BAHjGBCdoxpGhLW3oc
r+/pde4ga9NMnCSlM4b43mvzjzIg8dG+Yb9RJEaZvxofZqIwLmYSwV+rs7cdX0BI
lKyRQfsbuMUH2kOvapGGok54VmwjZlbC9LqUcTyXgJYeRBArqktnoU7TMOto+Zkg
qJc+3gzwoJR5/W4v0gA8z/G93HHhOqY1dAUAu0Rwt7JilLZ8S/WB4pkHYLYv8vEL
p+VIZxv3DhlA4a67jNDZapZ2kyJJbdIQKwXmepBkFHk=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:01 2024 by rpki-client on console-fra.rpki-client.org