Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3130332e3137382e382e302f32342d3234203d3e20313437313638.roa
File:                     3130332e3137382e382e302f32342d3234203d3e20313437313638.roa (raw, json)
Hash identifier:          FUT6sXTdXxdVJos7pW6Pa9V0N8H1q2fn6voV57POrYY=
Subject key identifier:   44:D7:7B:F2:61:90:BB:32:0C:C7:48:42:F3:14:5E:37:D7:34:82:8A
Certificate issuer:       /CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512
Certificate serial:       7263C781B40DC969FFD05197D9613B4FCAFD935E
Authority key identifier: 22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3130332e3137382e382e302f32342d3234203d3e20313437313638.roa
Signing time:             Mon 13 Feb 2023 08:06:46 +0000
ROA not before:           Mon 13 Feb 2023 08:01:46 +0000
ROA not after:            Mon 12 Feb 2024 08:06:46 +0000
asID:                     147168
IP address blocks:        103.178.8.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:63:c7:81:b4:0d:c9:69:ff:d0:51:97:d9:61:3b:4f:ca:fd:93:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512
        Validity
            Not Before: Feb 13 08:01:46 2023 GMT
            Not After : Feb 12 08:06:46 2024 GMT
        Subject: CN=44D77BF26190BB320CC74842F3145E37D734828A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:48:26:91:fb:92:18:7b:98:44:25:69:15:0c:
                    fa:d9:cf:02:c6:41:0b:0c:2e:e7:dd:62:7b:64:b2:
                    aa:4c:c3:0d:98:17:86:e0:97:79:d5:df:58:d8:b8:
                    3f:34:6f:d4:a0:33:9d:8a:08:8f:f2:9a:f3:8d:26:
                    73:1c:f9:72:20:4b:46:56:ae:77:17:9b:76:b0:4b:
                    66:03:0f:a8:32:c5:19:56:ee:c3:7b:a5:ce:f0:7e:
                    ab:20:ce:40:94:53:70:a1:0c:5f:50:c3:db:05:0e:
                    b3:fb:b6:2d:57:42:21:ef:74:4f:74:71:b5:6a:e0:
                    c9:44:7f:74:04:9f:ef:cc:14:50:a4:c5:45:cb:89:
                    a6:c1:f5:6a:fa:3d:d7:f8:48:2a:d3:fc:2d:2e:91:
                    a1:8c:ac:0b:28:f7:e3:66:52:b6:83:35:b8:b8:6f:
                    44:4d:9d:f0:0b:ca:e3:00:96:da:8b:0d:cd:b6:a7:
                    9d:4f:74:93:28:d8:23:6f:7a:3e:21:ba:94:4d:fa:
                    b3:72:c7:0f:67:90:a1:b5:9a:16:30:e7:42:60:21:
                    3c:ee:a4:4e:06:a2:d5:4d:3a:52:78:e0:47:71:63:
                    ad:ec:56:46:c2:b7:3c:73:a8:81:ac:0c:60:7e:37:
                    57:05:92:7f:11:d5:ee:32:14:e5:2f:be:56:f9:b9:
                    8e:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:D7:7B:F2:61:90:BB:32:0C:C7:48:42:F3:14:5E:37:D7:34:82:8A
            X509v3 Authority Key Identifier:
                keyid:22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3130332e3137382e382e302f32342d3234203d3e20313437313638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.178.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:c5:57:d8:b4:9f:c2:17:6a:92:e7:86:db:84:52:b5:e7:cf:
         7f:ca:cb:53:e8:18:3c:28:59:c2:94:23:e6:86:6a:ef:d3:5b:
         62:2c:1a:70:ad:7b:30:0a:cb:9a:09:8e:60:b1:3a:94:7d:32:
         2f:5b:67:ab:b6:6f:fe:4e:0e:85:f2:04:b8:ba:68:16:d7:e0:
         50:01:69:32:b7:3b:19:de:b7:cf:87:6a:8f:7f:24:25:45:0f:
         35:f9:83:ca:66:d0:3e:9b:72:62:17:6f:ef:32:40:98:58:8a:
         ce:e8:bc:c4:98:16:28:0f:b6:a1:6b:40:bb:82:fa:a0:65:72:
         0f:1d:4c:9b:75:1e:1d:d4:0e:94:1e:c4:00:0d:cc:cc:50:b5:
         7d:2f:c2:15:d3:7a:77:16:19:e5:74:4e:35:51:10:4a:ec:cd:
         34:f8:63:dc:13:64:e2:53:a1:e8:f4:89:94:2b:1d:ef:30:e4:
         ec:5c:6a:d7:56:43:fd:75:b4:1b:74:22:3d:21:08:a6:2c:70:
         1b:49:1b:1b:4a:98:6e:c4:71:18:d4:62:2a:f2:3b:b5:55:b8:
         d0:9c:b3:96:33:fe:fc:71:44:59:66:0e:f8:29:fb:89:d3:aa:
         09:7d:4c:dc:d8:76:c2:73:9d:03:f1:12:c7:57:30:10:87:c6:
         60:ed:e2:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:02 2024 by rpki-client on console-fra.rpki-client.org