Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/221126d3-13be-4508-b97d-13fe65a5b4d6/0/3130332e3138392e3235302e302f32332d3234203d3e20313439373134.roa
File:                     3130332e3138392e3235302e302f32332d3234203d3e20313439373134.roa (raw, json)
Hash identifier:          ulPxry3sF2POqf2GVg4TYwun/a9aDcRZMKWYooxMdLQ=
Subject key identifier:   05:FB:5D:22:87:9A:65:60:09:B2:53:66:13:62:3A:48:01:69:89:3C
Certificate issuer:       /CN=1326A8A42137891A70B3C0BB301CD6CB2BA8E2E6
Certificate serial:       09DF1F8A7E20A3391EEAEC0EA737AE777AD02956
Authority key identifier: 13:26:A8:A4:21:37:89:1A:70:B3:C0:BB:30:1C:D6:CB:2B:A8:E2:E6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1326A8A42137891A70B3C0BB301CD6CB2BA8E2E6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/221126d3-13be-4508-b97d-13fe65a5b4d6/0/3130332e3138392e3235302e302f32332d3234203d3e20313439373134.roa
Signing time:             Mon 05 Sep 2022 02:50:51 +0000
ROA not before:           Mon 05 Sep 2022 02:45:51 +0000
ROA not after:            Mon 04 Sep 2023 02:50:51 +0000
asID:                     149714
IP address blocks:        103.189.250.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:df:1f:8a:7e:20:a3:39:1e:ea:ec:0e:a7:37:ae:77:7a:d0:29:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1326A8A42137891A70B3C0BB301CD6CB2BA8E2E6
        Validity
            Not Before: Sep  5 02:45:51 2022 GMT
            Not After : Sep  4 02:50:51 2023 GMT
        Subject: CN=05FB5D22879A656009B2536613623A480169893C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:de:de:02:99:79:42:65:8a:b7:4e:45:4f:3a:
                    56:9a:b0:6d:e5:49:cf:5b:64:ea:48:a0:95:dc:c2:
                    f6:fa:1e:bb:d8:19:66:6c:c4:3a:6f:15:e7:a2:26:
                    b5:d6:8f:c1:36:2e:06:76:0d:4c:48:0b:9a:1e:df:
                    b6:7e:72:e7:fc:25:f1:c5:3e:aa:44:f8:4b:37:9c:
                    b4:7b:e6:b7:ac:42:3d:ac:04:5a:34:da:71:f6:3e:
                    ff:57:85:9d:a8:20:66:88:78:7a:56:f9:23:e1:a4:
                    33:2a:45:1f:7d:86:ff:ac:30:a0:66:91:2d:0f:92:
                    ca:59:ae:d5:89:5a:f4:b7:49:1c:01:3f:35:f7:07:
                    ca:01:9d:0b:4b:18:86:0e:c3:a3:b7:58:c3:be:2c:
                    aa:98:bb:8a:7f:50:8f:aa:6c:26:50:07:ae:67:92:
                    37:26:65:d7:91:6d:b3:0a:7b:93:96:78:f4:3f:fe:
                    4a:8d:f7:3d:06:d1:dd:96:d5:e5:76:74:cf:3c:7f:
                    e0:39:7f:2b:19:29:e1:b6:dd:2a:87:8a:cf:ae:4f:
                    81:96:be:e0:d3:ee:ba:57:64:09:94:40:73:81:fc:
                    e9:ca:e0:21:a1:ca:03:5b:18:32:e7:6f:7b:13:b4:
                    dd:05:87:f9:c6:27:45:23:91:19:56:3d:09:53:f6:
                    da:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:FB:5D:22:87:9A:65:60:09:B2:53:66:13:62:3A:48:01:69:89:3C
            X509v3 Authority Key Identifier:
                keyid:13:26:A8:A4:21:37:89:1A:70:B3:C0:BB:30:1C:D6:CB:2B:A8:E2:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/221126d3-13be-4508-b97d-13fe65a5b4d6/0/1326A8A42137891A70B3C0BB301CD6CB2BA8E2E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1326A8A42137891A70B3C0BB301CD6CB2BA8E2E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/221126d3-13be-4508-b97d-13fe65a5b4d6/0/3130332e3138392e3235302e302f32332d3234203d3e20313439373134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.189.250.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a1:d2:3a:3e:f9:fa:c1:0a:eb:39:60:a2:51:4f:69:6c:5c:0c:
         0b:8d:7b:9b:cd:8d:58:44:a9:f1:df:12:8b:92:83:65:78:69:
         e7:04:1a:11:d4:b6:a1:d3:68:db:5a:ae:c5:6f:a6:9f:0d:5c:
         ad:c1:7a:45:c3:5d:1d:d1:b2:c4:35:12:9f:67:d5:6f:4f:87:
         85:fd:fa:d4:1b:13:8d:55:c1:57:00:90:5f:4a:c1:4e:7a:eb:
         e8:eb:ce:5e:18:dd:82:93:8d:da:ec:fa:16:16:d3:1a:f2:83:
         c6:f2:2b:d0:e8:1d:69:fa:05:65:05:80:d0:41:0e:c5:51:f0:
         94:f1:ad:6f:64:cb:e3:f5:8c:dd:fd:46:fd:43:13:23:db:95:
         be:45:ec:67:b9:3d:5a:71:2a:26:c9:11:23:0b:f7:78:77:26:
         16:68:31:e1:5e:53:eb:e3:f6:8f:e3:59:e6:b8:a4:6d:92:42:
         98:3f:e0:eb:68:03:df:3d:18:4d:eb:c0:c3:de:39:71:29:f5:
         0d:5e:36:02:8b:2d:fc:05:c9:c9:58:a8:63:57:24:5d:aa:97:
         1e:0b:32:b1:af:91:c4:de:d8:84:91:28:a2:44:80:99:ef:72:
         5f:7e:1d:1a:dc:93:11:8e:e5:06:47:19:f1:5a:0e:60:73:c5:
         46:4f:16:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:01 2024 by rpki-client on console-fra.rpki-client.org