Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/3130332e3131382e3137342e302f32332d3234203d3e20313439393533.roa
File:                     3130332e3131382e3137342e302f32332d3234203d3e20313439393533.roa (raw, json)
Hash identifier:          jWJ6G5QsMAfVMPz+h3j7MWZKU3aBjQWFYTVbPTUxm1k=
Subject key identifier:   0A:C9:D0:DA:03:97:F2:C3:84:A6:3D:BF:5D:70:47:7C:A5:A3:51:36
Certificate issuer:       /CN=DBB18CCF58914524AFB113FE13359CC6B08EFBF3
Certificate serial:       7E01EA0B6CF4387ACD6C5C30AD463484C6992288
Authority key identifier: DB:B1:8C:CF:58:91:45:24:AF:B1:13:FE:13:35:9C:C6:B0:8E:FB:F3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/3130332e3131382e3137342e302f32332d3234203d3e20313439393533.roa
Signing time:             Fri 12 Aug 2022 10:09:48 +0000
ROA not before:           Fri 12 Aug 2022 10:04:48 +0000
ROA not after:            Fri 11 Aug 2023 10:09:48 +0000
asID:                     149953
IP address blocks:        103.118.174.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:01:ea:0b:6c:f4:38:7a:cd:6c:5c:30:ad:46:34:84:c6:99:22:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBB18CCF58914524AFB113FE13359CC6B08EFBF3
        Validity
            Not Before: Aug 12 10:04:48 2022 GMT
            Not After : Aug 11 10:09:48 2023 GMT
        Subject: CN=0AC9D0DA0397F2C384A63DBF5D70477CA5A35136
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:fb:2e:a6:da:4c:0e:f0:7f:47:bf:43:c3:da:
                    e5:a8:7e:f8:57:37:38:4a:5c:78:be:c1:0b:63:9b:
                    8e:23:ae:95:04:0b:0e:a8:20:4d:83:29:1b:0f:75:
                    e3:01:fa:70:45:0c:54:20:85:c5:b8:ae:2e:e8:5b:
                    88:f3:94:01:24:c2:32:b1:b0:fc:50:7b:cd:91:68:
                    81:63:d4:ea:c9:f1:a6:cc:da:f1:e7:60:81:03:77:
                    47:b2:74:a6:1e:73:3d:83:79:ba:fe:15:dc:12:45:
                    29:8e:47:37:c9:31:de:e3:d4:dc:3f:be:ba:1c:ce:
                    43:e0:4c:df:ba:53:13:6b:a1:9b:f8:17:a0:c1:9c:
                    ba:cd:bd:49:bd:16:d2:60:08:18:72:28:a4:6f:90:
                    59:0f:af:6f:e6:03:a8:a2:cb:f8:ad:a6:25:d8:b0:
                    ba:97:48:7c:00:e3:63:11:1a:39:c7:d1:f9:02:3c:
                    ef:f5:56:60:64:08:1a:62:64:ad:c0:7e:0b:0d:9e:
                    2c:22:ac:4c:46:11:77:71:c7:5f:86:07:13:81:0b:
                    06:80:e7:bd:ef:b3:c2:b2:ca:0a:48:d0:75:2b:7e:
                    3f:a4:2f:c9:2d:e5:5d:de:65:ef:ee:68:b6:94:b9:
                    2f:22:ee:19:53:81:bc:41:c4:dd:8a:5b:d6:3d:61:
                    d9:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:C9:D0:DA:03:97:F2:C3:84:A6:3D:BF:5D:70:47:7C:A5:A3:51:36
            X509v3 Authority Key Identifier:
                keyid:DB:B1:8C:CF:58:91:45:24:AF:B1:13:FE:13:35:9C:C6:B0:8E:FB:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DBB18CCF58914524AFB113FE13359CC6B08EFBF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/27d9d7cb-6cfb-4de0-9daa-d222b7a89072/0/3130332e3131382e3137342e302f32332d3234203d3e20313439393533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.118.174.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9b:b8:d5:d8:eb:31:4e:15:4e:7e:7e:8a:30:84:11:ed:82:b3:
         37:24:be:27:45:72:07:5e:3f:41:a6:ac:4c:2a:39:6a:3e:f6:
         b5:61:2c:01:f2:ac:e6:8a:81:3e:ce:15:f4:f7:ac:0b:f7:5d:
         ab:7e:ae:6a:f9:1e:8e:e6:6f:3d:35:0c:09:8a:0e:0c:2b:5b:
         c6:5c:99:fe:c5:b4:1e:a6:38:77:70:17:fc:ee:33:88:28:7c:
         7d:d3:2d:86:02:6d:f7:e4:8c:1e:13:7a:29:b2:4b:bd:6d:d0:
         69:ab:52:ee:c4:93:09:45:94:09:1e:8a:8d:c9:0d:eb:23:47:
         93:51:48:24:db:ae:73:66:ab:94:18:e1:5d:0f:97:1a:a4:d7:
         00:c9:11:72:35:ac:67:ed:7b:6c:0a:94:0d:80:3e:3d:e4:84:
         19:0b:99:ef:9c:74:c1:32:af:49:a1:17:e0:e8:f7:21:43:ee:
         68:f9:aa:30:93:3d:f5:0c:ce:3c:6d:db:4d:21:89:47:03:ea:
         33:c3:32:0d:cf:26:4a:58:ce:54:e7:c1:93:55:b7:df:d5:81:
         a0:2a:87:eb:4f:46:e9:99:6e:f7:84:a8:87:09:6f:e2:53:52:
         02:49:04:c5:65:db:3d:95:d7:66:59:db:b4:81:41:f5:c0:b8:
         2e:2b:8d:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:02 2024 by rpki-client on console-fra.rpki-client.org