Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/3130332e3135382e3139322e302f32332d3233203d3e20313331373735.roa
File:                     3130332e3135382e3139322e302f32332d3233203d3e20313331373735.roa (raw, json)
Hash identifier:          KxLzsSmAdVQrhZCueenAWW7cWP9Dz5QF+GikKbsT/ZA=
Subject key identifier:   22:3D:1A:A5:F6:14:5E:2F:AE:75:27:AC:E8:D5:89:6D:1B:92:C9:C5
Certificate issuer:       /CN=A0021383E40D55B69009CDEA313E654C3CE463B0
Certificate serial:       51FCB0B3CCB7D55C131C80F70999782BAA365777
Authority key identifier: A0:02:13:83:E4:0D:55:B6:90:09:CD:EA:31:3E:65:4C:3C:E4:63:B0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0021383E40D55B69009CDEA313E654C3CE463B0.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/3130332e3135382e3139322e302f32332d3233203d3e20313331373735.roa
Signing time:             Tue 01 Feb 2022 02:54:34 +0000
ROA not before:           Tue 01 Feb 2022 02:49:34 +0000
ROA not after:            Wed 01 Feb 2023 02:54:34 +0000
asID:                     131775
IP address blocks:        103.158.192.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:fc:b0:b3:cc:b7:d5:5c:13:1c:80:f7:09:99:78:2b:aa:36:57:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0021383E40D55B69009CDEA313E654C3CE463B0
        Validity
            Not Before: Feb  1 02:49:34 2022 GMT
            Not After : Feb  1 02:54:34 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:69:65:53:a9:c5:36:f0:79:a6:01:93:7a:db:
                    87:6b:4a:ad:7c:6d:99:4e:86:31:8c:39:49:88:cd:
                    b1:0d:7d:0a:ab:d7:4d:e1:39:c4:ac:56:1c:f7:ad:
                    5c:79:22:29:71:7a:bb:12:23:02:7a:71:31:5e:a0:
                    b0:ad:46:7d:c5:7b:0d:ff:a0:12:ca:21:f3:7e:35:
                    61:1f:81:73:13:ae:94:5b:73:bc:ca:d3:20:e6:5b:
                    b2:73:8a:18:0b:52:3b:41:d9:fd:c3:4f:b3:07:de:
                    74:4a:bd:c1:6b:28:a1:d8:c1:76:73:80:32:db:20:
                    cd:e5:f6:d2:e1:64:ee:5c:73:f8:78:54:55:41:64:
                    38:c4:48:3d:94:3a:d0:0f:2e:2b:37:47:71:3c:23:
                    0a:f8:ee:b8:c1:8c:72:e6:06:de:32:94:95:f8:3b:
                    8a:00:c0:39:09:4f:c4:04:42:5e:fa:91:ae:0a:fb:
                    1a:11:d4:b0:c9:b9:8a:ba:ec:b9:ad:05:4e:a0:9e:
                    54:96:18:ce:e8:f7:37:fd:89:ee:6c:81:d7:d9:4c:
                    6c:a2:4a:99:2d:b4:cb:52:c7:c6:ce:c8:57:b2:d2:
                    8a:ca:66:9e:8e:a5:f6:78:73:0e:b2:48:90:39:dd:
                    0e:bb:29:19:b9:05:61:b5:52:96:33:36:9a:82:d0:
                    fe:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:3D:1A:A5:F6:14:5E:2F:AE:75:27:AC:E8:D5:89:6D:1B:92:C9:C5
            X509v3 Authority Key Identifier:
                keyid:A0:02:13:83:E4:0D:55:B6:90:09:CD:EA:31:3E:65:4C:3C:E4:63:B0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/A0021383E40D55B69009CDEA313E654C3CE463B0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A0021383E40D55B69009CDEA313E654C3CE463B0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/1b6c614f-d0ff-41a9-92d0-3a213581537b/0/3130332e3135382e3139322e302f32332d3233203d3e20313331373735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.158.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5c:cd:91:ab:13:9f:78:8e:1a:69:5c:9a:22:47:04:e9:6f:7b:
         99:11:f0:5d:26:d2:65:20:55:ac:c1:f8:db:76:9e:09:6e:4a:
         5a:96:71:04:cf:99:00:63:83:e5:5c:75:ba:02:ed:87:fd:04:
         1a:4a:02:a7:1e:68:f4:97:ec:17:ca:88:9d:e4:22:de:eb:fe:
         3a:37:ff:4a:df:e2:6d:38:f6:ad:bc:b1:35:fd:c2:a2:c3:59:
         cb:2d:41:6a:3d:ea:30:7e:3e:46:0f:23:a7:e1:ea:7e:2e:4d:
         8c:37:72:3d:2d:dc:40:2c:62:d3:95:4f:f7:d8:99:58:84:37:
         f1:d8:a4:f0:3f:3a:09:3c:b5:51:a4:c0:20:97:12:54:d4:db:
         11:86:0c:c3:91:db:04:fd:27:1e:8f:49:b3:98:1a:83:77:05:
         0a:52:c3:51:ef:ea:52:09:84:82:e0:22:61:50:49:41:79:42:
         67:7c:4e:9d:c0:b8:60:3a:01:78:49:24:08:a9:37:42:d8:71:
         a6:5d:e8:b4:7f:63:3b:b9:a5:23:0c:67:c6:8a:35:10:11:db:
         91:f1:4d:64:07:74:05:84:f2:eb:30:b3:a7:33:27:07:43:96:
         3e:7a:85:4e:ef:0a:e3:b1:8f:5d:a3:b5:fe:8b:79:e7:31:5b:
         23:a6:56:a9
-----BEGIN CERTIFICATE-----
MIIHKDCCBhCgAwIBAgIUUfyws8y31VwTHID3CZl4K6o2V3cwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTAwMjEzODNFNDBENTVCNjkwMDlDREVBMzEzRTY1NEMz
Q0U0NjNCMDAeFw0yMjAyMDEwMjQ5MzRaFw0yMzAyMDEwMjU0MzRaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzg2OTY1NTNBOUM1MzZGMDc5
QTYwMTkzN0FEQjg3NkI0QUFEN0M2RDk5NEU4NjMxOEMzOTQ5ODhDREIxMEQ3RDBB
QUJENzRERTEzOUM0QUM1NjFDRjdBRDVDNzkyMjI5NzE3QUJCMTIyMzAyN0E3MTMx
NUVBMEIwQUQ0NjdEQzU3QjBERkZBMDEyQ0EyMUYzN0UzNTYxMUY4MTczMTNBRTk0
NUI3M0JDQ0FEMzIwRTY1QkIyNzM4QTE4MEI1MjNCNDFEOUZEQzM0RkIzMDdERTc0
NEFCREMxNkIyOEExRDhDMTc2NzM4MDMyREIyMENERTVGNkQyRTE2NEVFNUM3M0Y4
Nzg1NDU1NDE2NDM4QzQ0ODNEOTQzQUQwMEYyRTJCMzc0NzcxM0MyMzBBRjhFRUI4
QzE4QzcyRTYwNkRFMzI5NDk1RjgzQjhBMDBDMDM5MDk0RkM0MDQ0MjVFRkE5MUFF
MEFGQjFBMTFENEIwQzlCOThBQkFFQ0I5QUQwNTRFQTA5RTU0OTYxOENFRThGNzM3
RkQ4OUVFNkM4MUQ3RDk0QzZDQTI0QTk5MkRCNENCNTJDN0M2Q0VDODU3QjJEMjhB
Q0E2NjlFOEVBNUY2Nzg3MzBFQjI0ODkwMzlERDBFQkIyOTE5QjkwNTYxQjU1Mjk2
MzMzNjlBODJEMEZFNUQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAyGllU6nFNvB5pgGTetuHa0qtfG2ZToYxjDlJiM2xDX0Kq9dN4TnE
rFYc961ceSIpcXq7EiMCenExXqCwrUZ9xXsN/6ASyiHzfjVhH4FzE66UW3O8ytMg
5luyc4oYC1I7Qdn9w0+zB950Sr3Bayih2MF2c4Ay2yDN5fbS4WTuXHP4eFRVQWQ4
xEg9lDrQDy4rN0dxPCMK+O64wYxy5gbeMpSV+DuKAMA5CU/EBEJe+pGuCvsaEdSw
ybmKuuy5rQVOoJ5UlhjO6Pc3/YnubIHX2UxsokqZLbTLUsfGzshXstKKymaejqX2
eHMOskiQOd0OuykZuQVhtVKWMzaagtD+XQIDAQABo4ICNjCCAjIwHQYDVR0OBBYE
FCI9GqX2FF4vrnUnrOjViW0bksnFMB8GA1UdIwQYMBaAFKACE4PkDVW2kAnN6jE+
ZUw85GOwMA4GA1UdDwEB/wQEAwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMWI2YzYxNGYtZDBmZi00MWE5LTky
ZDAtM2EyMTM1ODE1MzdiLzAvQTAwMjEzODNFNDBENTVCNjkwMDlDREVBMzEzRTY1
NEMzQ0U0NjNCMC5jcmwwdAYIKwYBBQUHAQEEaDBmMGQGCCsGAQUFBzAChlhyc3lu
YzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8yL0EwMDIxMzgz
RTQwRDU1QjY5MDA5Q0RFQTMxM0U2NTRDM0NFNDYzQjAuY2VyMIGmBggrBgEFBQcB
CwSBmTCBljCBkwYIKwYBBQUHMAuGgYZyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby8xYjZjNjE0Zi1kMGZmLTQxYTktOTJkMC0zYTIxMzU4MTUzN2IvMC8z
MTMwMzMyZTMxMzUzODJlMzEzOTMyMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzEz
MzMxMzczNzM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQBZ57AMA0GCSqGSIb3DQEBCwUAA4IBAQBczZGr
E594jhppXJoiRwTpb3uZEfBdJtJlIFWswfjbdp4JbkpalnEEz5kAY4PlXHW6Au2H
/QQaSgKnHmj0l+wXyoid5CLe6/46N/9K3+JtOPatvLE1/cKiw1nLLUFqPeowfj5G
DyOn4ep+Lk2MN3I9LdxALGLTlU/32JlYhDfx2KTwPzoJPLVRpMAglxJU1NsRhgzD
kdsE/Scej0mzmBqDdwUKUsNR7+pSCYSC4CJhUElBeUJnfE6dwLhgOgF4SSQIqTdC
2HGmXei0f2M7uaUjDGfGijUQEduR8U1kB3QFhPLrMLOnMycHQ5Y+eoVO7wrjsY9d
o7X+i3nnMVsjplap
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:01 2024 by rpki-client on console-fra.rpki-client.org