Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/3130332e3135352e36342e302f32342d3234203d3e20313331373137.roa
File:                     3130332e3135352e36342e302f32342d3234203d3e20313331373137.roa (raw, json)
Hash identifier:          ZboZlwwRn6H0onTaA4dJ54V1sPuAOUz+PCTt3tT/UIc=
Subject key identifier:   7B:29:46:32:19:7C:6D:D9:44:E8:B7:DE:0E:E6:FE:42:77:61:F3:4B
Certificate issuer:       /CN=571E2EFA23FEA611810611410635E23A090F4550
Certificate serial:       1600F3D72751853C9EF04835ADF5CF9C9E45AB05
Authority key identifier: 57:1E:2E:FA:23:FE:A6:11:81:06:11:41:06:35:E2:3A:09:0F:45:50
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/571E2EFA23FEA611810611410635E23A090F4550.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/3130332e3135352e36342e302f32342d3234203d3e20313331373137.roa
Signing time:             Sun 31 Jul 2022 04:16:25 +0000
ROA not before:           Sun 31 Jul 2022 04:11:25 +0000
ROA not after:            Sun 30 Jul 2023 04:16:25 +0000
asID:                     131717
IP address blocks:        103.155.64.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:00:f3:d7:27:51:85:3c:9e:f0:48:35:ad:f5:cf:9c:9e:45:ab:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=571E2EFA23FEA611810611410635E23A090F4550
        Validity
            Not Before: Jul 31 04:11:25 2022 GMT
            Not After : Jul 30 04:16:25 2023 GMT
        Subject: CN=7B294632197C6DD944E8B7DE0EE6FE427761F34B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:7d:bc:7b:d2:c1:d3:58:64:68:d0:a6:31:dc:
                    48:76:1e:89:f0:b2:2b:3c:91:53:46:00:07:be:b2:
                    e1:33:de:e8:05:2b:95:4c:53:2f:5f:b2:e6:c9:2f:
                    ac:da:47:f1:05:4f:10:39:8c:c2:61:78:4f:fd:37:
                    83:8e:9c:fe:67:cf:3c:a0:c4:6f:a5:42:e9:d2:a2:
                    f5:c6:b2:82:0d:8e:52:32:19:37:08:e6:f4:cf:dc:
                    d4:30:74:35:b9:36:23:c4:e2:f6:97:65:fe:a8:10:
                    22:a4:a4:bd:a3:81:6a:54:e0:01:b5:36:4f:60:2a:
                    87:0c:4c:e8:c0:ca:cb:0c:7a:cb:07:01:11:01:b3:
                    75:34:8f:ca:9c:9f:00:d0:9e:8b:5f:5c:53:3c:f5:
                    88:c8:25:ab:21:bd:d2:67:2f:f2:16:ac:26:58:1e:
                    a7:e3:25:7a:dc:23:bb:ed:b2:0d:3f:ed:b0:b7:02:
                    08:80:10:dc:c9:77:31:35:31:4c:c6:80:ab:f8:dd:
                    53:bb:e6:53:d5:54:99:c6:52:38:68:70:67:d1:bd:
                    25:1f:0f:e3:3b:3c:db:7c:e5:b4:15:7f:c0:b2:80:
                    b5:fe:51:66:51:d2:46:f5:22:ca:11:63:f9:b6:f1:
                    48:21:67:6f:49:f1:bc:df:4a:d0:0f:cb:f2:0b:cd:
                    2c:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:29:46:32:19:7C:6D:D9:44:E8:B7:DE:0E:E6:FE:42:77:61:F3:4B
            X509v3 Authority Key Identifier:
                keyid:57:1E:2E:FA:23:FE:A6:11:81:06:11:41:06:35:E2:3A:09:0F:45:50

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/571E2EFA23FEA611810611410635E23A090F4550.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/571E2EFA23FEA611810611410635E23A090F4550.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3564abfb-1962-44a9-8376-cbfb1efcdaba/0/3130332e3135352e36342e302f32342d3234203d3e20313331373137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.155.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:c0:21:dd:39:17:50:ff:ba:17:aa:0b:98:1f:8d:7c:ef:69:
         1b:3d:36:4f:7c:93:4f:8a:2e:1f:2a:3c:b9:31:50:f9:f7:e7:
         a0:1c:3f:b7:78:b3:c7:24:90:95:77:70:77:5e:27:8a:bc:e1:
         a4:13:36:14:0c:8f:89:27:5a:b2:01:d4:24:ca:d2:60:50:c3:
         8a:8a:ff:40:58:2f:dc:dd:08:a5:85:96:65:4d:36:1c:34:0f:
         8d:e4:26:22:c7:53:47:71:c1:5a:59:47:3d:b1:09:a3:6f:7f:
         13:7a:8a:f2:9f:8e:21:30:0b:09:a7:0d:05:91:25:aa:a4:9a:
         9a:28:17:af:78:9f:53:07:b4:30:13:57:98:83:39:2e:c6:60:
         f8:33:64:4d:a3:5f:f1:bc:72:f7:2a:84:44:61:f1:9a:3b:e7:
         47:30:5f:aa:35:e6:18:cf:11:45:08:8f:7a:a6:73:03:44:93:
         32:3c:50:be:8e:e9:0d:96:bf:3e:ed:03:52:38:85:02:18:d8:
         a6:b3:af:d9:11:bf:85:2e:57:a5:a0:c9:c0:1b:8b:24:d4:2b:
         55:13:92:bc:5d:12:10:7c:1a:c3:24:a7:c7:ed:bd:f1:15:d2:
         87:4e:73:c5:85:27:1c:35:c4:75:74:8f:05:ab:ea:99:95:fa:
         ff:b1:cd:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:02 2024 by rpki-client on console-fra.rpki-client.org