Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/3130332e3135352e36342e302f32332d3233203d3e20313331373137.roa
File:                     3130332e3135352e36342e302f32332d3233203d3e20313331373137.roa (raw, json)
Hash identifier:          awYnR/wtXmrMoCXsfzzcdKYkXdEwusjVJ52Sboh2Np0=
Subject key identifier:   2F:51:7B:FE:36:0A:2D:1D:03:D8:0B:BF:81:EB:B6:5A:C3:99:C0:9F
Certificate issuer:       /CN=571E2EFA23FEA611810611410635E23A090F4550
Certificate serial:       6ECE10699CA66B9C4C08040FA910C872BB7B34E8
Authority key identifier: 57:1E:2E:FA:23:FE:A6:11:81:06:11:41:06:35:E2:3A:09:0F:45:50
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/571E2EFA23FEA611810611410635E23A090F4550.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/3130332e3135352e36342e302f32332d3233203d3e20313331373137.roa
Signing time:             Sun 31 Jul 2022 04:16:08 +0000
ROA not before:           Sun 31 Jul 2022 04:11:08 +0000
ROA not after:            Sun 30 Jul 2023 04:16:08 +0000
asID:                     131717
IP address blocks:        103.155.64.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:ce:10:69:9c:a6:6b:9c:4c:08:04:0f:a9:10:c8:72:bb:7b:34:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=571E2EFA23FEA611810611410635E23A090F4550
        Validity
            Not Before: Jul 31 04:11:08 2022 GMT
            Not After : Jul 30 04:16:08 2023 GMT
        Subject: CN=2F517BFE360A2D1D03D80BBF81EBB65AC399C09F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:0b:89:93:cc:fa:1c:6e:13:08:d1:50:39:ab:
                    e7:80:42:da:eb:92:bf:32:b4:aa:8f:ba:a1:81:19:
                    9a:78:81:eb:44:9c:70:85:23:00:59:34:7b:32:e2:
                    9a:4c:ad:8d:24:d8:69:2e:9f:27:ad:31:9c:86:61:
                    0b:8c:40:15:b9:1d:11:be:1f:4f:ad:10:49:86:55:
                    0a:ea:7e:57:ab:3a:ce:d9:fb:03:0f:fd:6f:37:93:
                    ac:63:e2:2a:97:88:9b:63:b2:80:ec:9b:36:81:93:
                    5f:f7:a8:e8:61:1c:33:f1:d6:2e:33:24:dc:30:75:
                    57:ff:36:c6:18:a2:61:5e:f9:16:a7:77:e3:52:3e:
                    67:83:27:50:06:2d:c7:c7:e0:d4:23:66:6c:0b:9c:
                    d4:cc:b8:cf:25:5a:99:b6:39:87:d7:eb:bf:26:3d:
                    ed:83:8d:b5:07:e4:57:02:92:f9:3e:26:dc:b7:a6:
                    40:d8:94:73:55:9a:6f:78:e3:f7:5d:42:d3:97:b2:
                    b6:59:54:f7:a5:09:ca:f2:6a:d4:9f:c7:fe:52:cf:
                    e8:a5:2c:38:54:05:58:78:6c:46:97:ce:d5:e4:c8:
                    27:ab:ab:ac:42:21:9c:00:35:92:81:bd:db:b9:65:
                    04:95:bd:bd:99:48:a6:a8:f6:44:ef:a8:33:06:49:
                    72:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:51:7B:FE:36:0A:2D:1D:03:D8:0B:BF:81:EB:B6:5A:C3:99:C0:9F
            X509v3 Authority Key Identifier:
                keyid:57:1E:2E:FA:23:FE:A6:11:81:06:11:41:06:35:E2:3A:09:0F:45:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/571E2EFA23FEA611810611410635E23A090F4550.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/571E2EFA23FEA611810611410635E23A090F4550.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/3130332e3135352e36342e302f32332d3233203d3e20313331373137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.64.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a0:fd:7f:f8:ca:e1:83:60:c4:b3:7c:17:82:bf:83:7a:2d:09:
         be:12:0e:30:d8:c7:aa:c6:ef:3c:a0:16:90:5c:f7:91:be:f2:
         69:7e:62:9a:ac:86:e6:06:15:4d:03:01:f3:15:40:35:ec:74:
         25:a4:90:2c:bd:69:82:bb:22:3c:f4:f4:7d:0e:c9:b8:56:1c:
         0d:b9:35:67:03:3f:8c:3d:f3:a7:03:1a:7c:d7:d5:e1:48:a4:
         6e:a6:bb:d7:7d:e5:d3:a6:d2:15:f1:bc:42:c1:78:cc:be:a8:
         ac:a8:49:b2:16:f2:b9:b0:1f:7e:55:7b:78:d9:00:2f:17:c0:
         ec:f7:47:ec:04:85:f4:63:10:ce:22:59:b2:1d:ae:46:3c:43:
         79:87:ca:40:54:be:bd:b5:80:36:0b:80:4a:c1:9a:53:6e:d7:
         f2:99:b1:29:bb:97:3c:92:93:e4:fa:93:09:6c:49:61:d4:1f:
         2a:64:66:da:b3:db:b6:8f:22:59:29:2d:1b:17:59:a5:2c:24:
         66:dc:f4:4d:94:10:8e:a3:51:18:ae:b2:43:82:ca:ee:36:e4:
         10:ab:ce:31:99:96:16:e4:44:b8:bf:d0:ba:36:5a:0d:64:1d:
         18:22:eb:9c:47:c5:2f:86:cd:1f:ae:ca:d9:89:14:74:8b:a2:
         4d:10:99:45
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUbs4QaZyma5xMCAQPqRDIcrt7NOgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNTcxRTJFRkEyM0ZFQTYxMTgxMDYxMTQxMDYzNUUyM0Ew
OTBGNDU1MDAeFw0yMjA3MzEwNDExMDhaFw0yMzA3MzAwNDE2MDhaMDMxMTAvBgNV
BAMTKDJGNTE3QkZFMzYwQTJEMUQwM0Q4MEJCRjgxRUJCNjVBQzM5OUMwOUYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCsC4mTzPocbhMI0VA5q+eAQtrr
kr8ytKqPuqGBGZp4getEnHCFIwBZNHsy4ppMrY0k2GkunyetMZyGYQuMQBW5HRG+
H0+tEEmGVQrqflerOs7Z+wMP/W83k6xj4iqXiJtjsoDsmzaBk1/3qOhhHDPx1i4z
JNwwdVf/NsYYomFe+Rand+NSPmeDJ1AGLcfH4NQjZmwLnNTMuM8lWpm2OYfX678m
Pe2DjbUH5FcCkvk+Jty3pkDYlHNVmm944/ddQtOXsrZZVPelCcryatSfx/5Sz+il
LDhUBVh4bEaXztXkyCerq6xCIZwANZKBvdu5ZQSVvb2ZSKao9kTvqDMGSXL3AgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUL1F7/jYKLR0D2Au/geu2WsOZwJ8wHwYDVR0j
BBgwFoAUVx4u+iP+phGBBhFBBjXiOgkPRVAwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
NTY0YWJmYi0xOTYyLTQ0YTktODM3Ni1jYmZiMWVmY2RhYmEvMC81NzFFMkVGQTIz
RkVBNjExODEwNjExNDEwNjM1RTIzQTA5MEY0NTUwLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNTcxRTJFRkEyM0ZFQTYxMTgxMDYxMTQxMDYzNUUyM0EwOTBG
NDU1MC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzM1NjRhYmZiLTE5NjItNDRhOS04
Mzc2LWNiZmIxZWZjZGFiYS8wLzMxMzAzMzJlMzEzNTM1MmUzNjM0MmUzMDJmMzIz
MzJkMzIzMzIwM2QzZTIwMzEzMzMxMzczMTM3LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ5tAMA0GCSqG
SIb3DQEBCwUAA4IBAQCg/X/4yuGDYMSzfBeCv4N6LQm+Eg4w2Meqxu88oBaQXPeR
vvJpfmKarIbmBhVNAwHzFUA17HQlpJAsvWmCuyI89PR9Dsm4VhwNuTVnAz+MPfOn
Axp819XhSKRuprvXfeXTptIV8bxCwXjMvqisqEmyFvK5sB9+VXt42QAvF8Ds90fs
BIX0YxDOIlmyHa5GPEN5h8pAVL69tYA2C4BKwZpTbtfymbEpu5c8kpPk+pMJbElh
1B8qZGbas9u2jyJZKS0bF1mlLCRm3PRNlBCOo1EYrrJDgsruNuQQq84xmZYW5ES4
v9C6NloNZB0YIuucR8Uvhs0frsrZiRR0i6JNEJlF
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:02 2024 by rpki-client on console-fra.rpki-client.org