Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/3130332e3137372e382e302f32332d3234203d3e20313437313337.roa
File:                     3130332e3137372e382e302f32332d3234203d3e20313437313337.roa (raw, json)
Hash identifier:          bTlAjOSiqSxwPTkosINhx9FBaFN8s6yq2ONjQeOUXgQ=
Subject key identifier:   4D:F8:EB:8F:00:AF:6A:FF:92:4C:3F:7F:C6:FA:72:6F:7D:B6:DD:84
Certificate issuer:       /CN=9A52B6405ED406A7B17C4478D516DF3E37282980
Certificate serial:       6B7B5A3036EB610913EB91EDDBA3234AC53FD233
Authority key identifier: 9A:52:B6:40:5E:D4:06:A7:B1:7C:44:78:D5:16:DF:3E:37:28:29:80
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A52B6405ED406A7B17C4478D516DF3E37282980.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/3130332e3137372e382e302f32332d3234203d3e20313437313337.roa
Signing time:             Thu 28 Jul 2022 04:58:00 +0000
ROA not before:           Thu 28 Jul 2022 04:53:00 +0000
ROA not after:            Thu 27 Jul 2023 04:58:00 +0000
asID:                     147137
IP address blocks:        103.177.8.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:7b:5a:30:36:eb:61:09:13:eb:91:ed:db:a3:23:4a:c5:3f:d2:33
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A52B6405ED406A7B17C4478D516DF3E37282980
        Validity
            Not Before: Jul 28 04:53:00 2022 GMT
            Not After : Jul 27 04:58:00 2023 GMT
        Subject: CN=4DF8EB8F00AF6AFF924C3F7FC6FA726F7DB6DD84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:b2:60:e8:de:67:a7:dc:a8:c6:c2:30:5a:86:
                    07:9f:9a:b4:0d:3e:4c:7b:94:5c:d8:3b:0f:b5:05:
                    b2:46:ed:4e:39:b1:40:02:88:21:4e:6b:e8:48:56:
                    07:c3:b0:9a:21:33:ba:8e:a2:4b:28:f8:f0:17:dc:
                    96:43:57:79:ee:38:39:de:85:cf:c4:c9:1d:9d:d7:
                    1d:8a:5a:e0:dc:cc:1a:dc:b9:2a:51:70:3b:e6:51:
                    c0:42:6f:be:69:7e:f0:7d:cd:6a:5f:f1:45:9c:55:
                    c5:4d:22:90:78:ec:f5:24:d7:94:f8:ff:83:3c:fd:
                    14:91:c1:54:19:0a:1d:42:34:2b:98:52:4f:ea:17:
                    a6:d6:ae:30:df:76:1b:14:c0:a2:80:3b:4d:40:3f:
                    6a:67:09:e1:46:6a:c4:41:6e:1b:83:29:b5:c6:59:
                    48:9c:11:84:3c:ed:bb:9d:57:c7:88:34:88:95:b5:
                    42:7d:24:28:88:e3:f2:c7:7b:e6:c5:7e:81:40:0d:
                    78:33:8b:fc:6e:ec:ef:99:7c:bb:33:09:53:1d:74:
                    42:91:f6:fc:02:b3:0e:39:43:70:f6:fb:67:7e:18:
                    ae:f9:cd:5e:4d:b2:fc:00:23:81:64:c0:52:20:1f:
                    20:3f:a6:db:94:c0:e7:57:f3:e4:32:c9:f7:d5:f8:
                    fd:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:F8:EB:8F:00:AF:6A:FF:92:4C:3F:7F:C6:FA:72:6F:7D:B6:DD:84
            X509v3 Authority Key Identifier:
                keyid:9A:52:B6:40:5E:D4:06:A7:B1:7C:44:78:D5:16:DF:3E:37:28:29:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/9A52B6405ED406A7B17C4478D516DF3E37282980.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9A52B6405ED406A7B17C4478D516DF3E37282980.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a665c32-6daf-472b-bce6-317d5d6c789e/0/3130332e3137372e382e302f32332d3234203d3e20313437313337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.177.8.0/23

    Signature Algorithm: sha256WithRSAEncryption
         52:d5:ac:7c:e0:aa:ec:ae:57:ef:51:9b:3b:74:7f:2e:84:66:
         8a:8d:4a:e5:4b:46:17:b9:b0:01:57:fb:b6:f7:45:dd:38:c9:
         87:d0:00:29:15:9c:e8:84:9a:41:b9:d6:ad:2d:37:50:f1:1d:
         3e:9a:cc:86:83:3c:2c:fc:63:b4:11:d1:ad:ef:36:fe:6b:c2:
         db:b1:4b:3d:f5:61:34:6f:e4:20:31:91:09:5a:16:ae:40:a4:
         35:33:ff:b9:e2:dd:a5:fc:7d:39:53:b3:d4:1f:b5:98:d4:27:
         70:91:14:ce:f9:a7:4c:54:17:bf:29:33:56:71:17:57:20:72:
         10:fc:46:c9:77:5b:fa:bb:8c:82:67:d4:cd:1f:7f:f7:a1:bc:
         d4:50:02:4d:4d:b2:8e:c6:ad:98:01:c8:eb:1a:0b:a5:58:4c:
         31:9d:8d:7e:ab:0c:16:7f:7a:99:15:94:ec:7a:88:e2:8b:ee:
         fe:2f:05:a9:11:62:fa:3e:59:c1:12:41:b1:ff:98:18:34:8e:
         29:8e:cf:be:5b:b3:cf:69:9b:dd:8d:69:ea:76:7a:e7:b6:c7:
         fa:b5:8f:f9:c3:e6:0c:8b:f9:5d:8c:64:e1:c2:c2:f2:d1:8e:
         3c:b8:39:94:41:32:6f:18:98:a1:cb:d7:86:71:2e:48:41:6b:
         b9:d6:28:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:39 2024 by rpki-client on console-ams.rpki-client.org