Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/221126d3-13be-4508-b97d-13fe65a5b4d6/0/3130332e3138392e3235302e302f32332d3234203d3e203538333932.roa
File:                     3130332e3138392e3235302e302f32332d3234203d3e203538333932.roa (raw, json)
Hash identifier:          mBQRMIvKLlk1oxKcwtxrhlmIKNOAU/kLkb3m7GWGh24=
Subject key identifier:   66:78:BE:28:D9:AB:FB:A8:B5:BE:79:04:A0:C6:50:53:76:6C:2C:80
Certificate issuer:       /CN=1326A8A42137891A70B3C0BB301CD6CB2BA8E2E6
Certificate serial:       09B15E6820E60387E5B4D2324445B75F5605FC4D
Authority key identifier: 13:26:A8:A4:21:37:89:1A:70:B3:C0:BB:30:1C:D6:CB:2B:A8:E2:E6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1326A8A42137891A70B3C0BB301CD6CB2BA8E2E6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/221126d3-13be-4508-b97d-13fe65a5b4d6/0/3130332e3138392e3235302e302f32332d3234203d3e203538333932.roa
Signing time:             Sun 17 Jul 2022 14:38:07 +0000
ROA not before:           Sun 17 Jul 2022 14:33:07 +0000
ROA not after:            Sun 16 Jul 2023 14:38:07 +0000
asID:                     58392
IP address blocks:        103.189.250.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:b1:5e:68:20:e6:03:87:e5:b4:d2:32:44:45:b7:5f:56:05:fc:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1326A8A42137891A70B3C0BB301CD6CB2BA8E2E6
        Validity
            Not Before: Jul 17 14:33:07 2022 GMT
            Not After : Jul 16 14:38:07 2023 GMT
        Subject: CN=6678BE28D9ABFBA8B5BE7904A0C65053766C2C80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ec:48:da:36:03:77:3b:f1:19:f7:14:9e:d4:
                    cb:15:bc:65:a7:6f:d9:6f:a7:35:6f:59:02:3d:5f:
                    a5:20:94:10:5d:a2:5d:83:8d:3d:dc:2f:3d:86:1d:
                    c1:37:99:56:9c:ae:0a:e5:3e:d3:d5:44:ee:2b:2a:
                    c9:58:ce:e0:9c:5d:90:ba:08:ee:8e:27:96:7c:f6:
                    42:28:83:f7:f1:22:a9:fc:e6:75:74:67:e0:c9:c4:
                    93:10:88:8a:1c:5e:e6:95:42:43:8b:ae:16:c7:2b:
                    ff:36:6b:26:a8:da:ec:80:13:11:18:5d:91:95:57:
                    a7:1f:7f:dc:aa:d8:a9:bc:0a:74:75:12:c3:7c:6b:
                    b0:1a:2b:6a:0f:5e:65:f2:32:b0:8e:73:09:20:73:
                    fd:e4:ac:ac:4c:a2:21:6d:bb:78:41:2d:1a:43:3f:
                    8a:77:f6:69:8f:5d:6d:43:bd:19:17:7c:1a:84:22:
                    b5:fc:3a:9c:23:d6:6c:48:e7:5f:f9:ae:cf:de:c4:
                    ee:47:c9:6a:7d:06:2a:fd:bf:c1:b5:d6:e7:46:af:
                    71:42:32:42:67:9c:9c:4e:34:ec:bd:50:79:cd:dc:
                    2c:a3:c6:a6:cd:94:f4:98:c8:05:a5:08:04:14:6e:
                    6b:70:a1:64:e1:05:a6:89:6f:7c:86:38:b2:80:11:
                    f7:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:78:BE:28:D9:AB:FB:A8:B5:BE:79:04:A0:C6:50:53:76:6C:2C:80
            X509v3 Authority Key Identifier:
                keyid:13:26:A8:A4:21:37:89:1A:70:B3:C0:BB:30:1C:D6:CB:2B:A8:E2:E6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/221126d3-13be-4508-b97d-13fe65a5b4d6/0/1326A8A42137891A70B3C0BB301CD6CB2BA8E2E6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1326A8A42137891A70B3C0BB301CD6CB2BA8E2E6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/221126d3-13be-4508-b97d-13fe65a5b4d6/0/3130332e3138392e3235302e302f32332d3234203d3e203538333932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.189.250.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b7:86:79:d3:ec:f6:85:3c:74:5b:0f:20:aa:cc:b0:73:4a:76:
         95:33:30:e5:1a:89:fd:3d:6a:67:65:36:20:28:6d:c3:7d:3f:
         9f:89:71:fb:c6:bd:f4:9a:1d:e3:2d:97:46:1f:f8:6e:73:2e:
         0a:38:4f:72:07:95:72:f8:1b:22:ac:7a:8d:e1:d7:2f:60:bc:
         69:b2:97:85:9a:fa:75:42:bb:cd:15:99:72:55:3e:cb:a5:b5:
         33:b2:0e:ad:71:7f:7e:12:1c:92:d8:5e:48:46:78:5a:3c:8c:
         3a:a5:01:ef:40:5c:e9:56:4e:fd:f1:96:a7:29:c5:0e:56:48:
         82:7c:ff:e7:81:53:2a:a7:e1:cc:9a:ea:4f:da:22:b9:86:d2:
         3c:92:36:be:84:b5:5c:96:37:bf:d1:84:ab:8e:4c:d3:48:f0:
         15:5b:49:70:52:2f:a3:f3:c5:f5:e1:cb:1a:77:fa:34:41:90:
         06:92:1c:17:49:45:20:c0:bd:14:89:ca:fb:06:7c:c4:81:7b:
         8d:cf:21:19:8d:8d:38:45:0a:75:ff:4d:f7:57:e6:cf:b1:43:
         cd:42:83:ad:74:11:53:08:9d:e1:fb:6c:ee:ec:b6:1f:b3:b5:
         87:e6:ea:0a:38:5e:b4:e1:a5:94:f5:08:18:7e:f6:b5:89:85:
         30:4d:4b:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:02 2024 by rpki-client on console-fra.rpki-client.org