Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/3130332e3138302e302e302f32332d3233203d3e203338373630.roa
File:                     3130332e3138302e302e302f32332d3233203d3e203338373630.roa (raw, json)
Hash identifier:          rXa7kcoos3DmdhZXZaIa1pvfAH6i7K6KK3FLJRS6Sg0=
Subject key identifier:   AE:47:EE:45:C1:4C:36:36:ED:A2:FD:2D:CF:3F:44:37:2F:53:51:C9
Certificate issuer:       /CN=26B04331F3DBA70B694F2FFF371C85EE023FB70F
Certificate serial:       0F784816DF458DE70EB9AC845663A838ECC066FB
Authority key identifier: 26:B0:43:31:F3:DB:A7:0B:69:4F:2F:FF:37:1C:85:EE:02:3F:B7:0F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26B04331F3DBA70B694F2FFF371C85EE023FB70F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/3130332e3138302e302e302f32332d3233203d3e203338373630.roa
Signing time:             Tue 01 Mar 2022 15:54:11 +0000
ROA not before:           Tue 01 Mar 2022 15:49:11 +0000
ROA not after:            Wed 01 Mar 2023 15:54:11 +0000
asID:                     38760
IP address blocks:        103.180.0.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:78:48:16:df:45:8d:e7:0e:b9:ac:84:56:63:a8:38:ec:c0:66:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26B04331F3DBA70B694F2FFF371C85EE023FB70F
        Validity
            Not Before: Mar  1 15:49:11 2022 GMT
            Not After : Mar  1 15:54:11 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:91:cd:51:8d:c8:5d:38:7e:48:dc:51:a8:a0:
                    3a:a1:f3:06:72:da:eb:59:21:df:80:b0:f5:aa:d6:
                    55:a0:c8:d8:69:d0:aa:92:28:77:d7:08:b2:af:ea:
                    a1:cc:89:3b:03:e4:0d:d3:ee:f7:b8:9d:4f:a1:bf:
                    4b:1a:7e:8f:e8:0c:30:03:91:65:38:69:90:fa:95:
                    72:50:f8:d6:26:76:f0:92:2e:5a:cb:45:32:96:6e:
                    85:74:7c:2d:76:c9:ce:eb:41:48:b7:c0:86:e1:0b:
                    2e:3f:31:70:5b:e9:34:9a:b3:d1:a4:38:8e:75:27:
                    0b:76:36:9c:b4:5c:97:5d:f2:29:63:40:a9:e3:d8:
                    e7:f1:e8:99:26:16:81:fd:48:ef:62:81:ab:55:e2:
                    1e:fc:f0:1f:a1:9a:66:5e:77:db:52:9b:73:c6:60:
                    69:27:ad:df:8d:92:e1:7a:bc:ea:50:4e:3f:ef:98:
                    0c:33:ed:b4:55:e2:1f:8d:32:a0:b6:5f:48:d5:93:
                    67:55:e4:c7:28:df:32:01:11:6d:ca:e7:57:20:94:
                    b5:81:a9:de:b1:4a:a3:f6:1c:8d:dd:51:5c:71:c7:
                    fd:6c:ac:6b:02:92:65:4f:77:b9:33:53:ca:d6:bc:
                    50:10:a8:76:52:42:33:27:dc:14:91:e8:49:b0:64:
                    af:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:47:EE:45:C1:4C:36:36:ED:A2:FD:2D:CF:3F:44:37:2F:53:51:C9
            X509v3 Authority Key Identifier:
                keyid:26:B0:43:31:F3:DB:A7:0B:69:4F:2F:FF:37:1C:85:EE:02:3F:B7:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/26B04331F3DBA70B694F2FFF371C85EE023FB70F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26B04331F3DBA70B694F2FFF371C85EE023FB70F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3a8a9a81-0a52-4a50-b7f6-a36f86f3d2c7/0/3130332e3138302e302e302f32332d3233203d3e203338373630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.180.0.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2b:4a:c4:3e:6e:19:d7:f1:92:2e:72:52:49:70:e2:29:ec:ea:
         2c:6b:ad:17:41:42:2c:6d:8b:cc:97:a5:64:45:b1:52:f5:82:
         a1:40:17:ab:68:43:0e:f2:3f:67:78:36:bb:e6:ff:aa:0d:3e:
         23:80:cb:6b:2f:8f:cb:e4:d8:48:c3:b4:1c:eb:7a:3b:0f:5f:
         fa:b0:2c:75:b8:4e:3b:4d:38:a1:cc:c5:de:26:c1:76:d9:58:
         a0:89:24:e1:66:59:5c:47:49:57:61:91:a7:5c:f6:66:85:2f:
         90:f3:b7:a2:b8:e3:b2:d2:7b:6c:a6:f3:7a:4c:db:a3:1c:88:
         12:6c:e0:b7:f6:09:d3:a8:bc:2e:97:91:57:f2:41:82:96:3a:
         56:1f:25:50:f5:ab:8e:f7:29:bb:ed:4c:8d:cc:5e:ef:73:34:
         38:7e:4c:0a:12:9a:a6:be:c8:c6:2f:2a:4b:23:c9:56:a6:b3:
         8e:fe:c0:61:87:a1:83:b6:b5:35:90:9d:c1:45:1e:9a:d5:06:
         22:97:b9:5a:99:7f:4f:4d:ec:8e:27:ab:6f:46:c4:cd:46:1f:
         9c:81:a3:4f:d5:d3:41:bb:b6:3e:de:ef:99:c2:cb:d2:b4:d5:
         5c:de:d7:c0:da:29:08:d3:1f:ea:15:23:9b:20:8f:f0:14:2f:
         f8:f2:85:78
-----BEGIN CERTIFICATE-----
MIIHIjCCBgqgAwIBAgIUD3hIFt9FjecOuayEVmOoOOzAZvswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjZCMDQzMzFGM0RCQTcwQjY5NEYyRkZGMzcxQzg1RUUw
MjNGQjcwRjAeFw0yMjAzMDExNTQ5MTFaFw0yMzAzMDExNTU0MTFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjM5MUNENTE4REM4NUQzODdF
NDhEQzUxQThBMDNBQTFGMzA2NzJEQUVCNTkyMURGODBCMEY1QUFENjU1QTBDOEQ4
NjlEMEFBOTIyODc3RDcwOEIyQUZFQUExQ0M4OTNCMDNFNDBERDNFRUY3Qjg5RDRG
QTFCRjRCMUE3RThGRTgwQzMwMDM5MTY1Mzg2OTkwRkE5NTcyNTBGOEQ2MjY3NkYw
OTIyRTVBQ0I0NTMyOTY2RTg1NzQ3QzJENzZDOUNFRUI0MTQ4QjdDMDg2RTEwQjJF
M0YzMTcwNUJFOTM0OUFCM0QxQTQzODhFNzUyNzBCNzYzNjlDQjQ1Qzk3NURGMjI5
NjM0MEE5RTNEOEU3RjFFODk5MjYxNjgxRkQ0OEVGNjI4MUFCNTVFMjFFRkNGMDFG
QTE5QTY2NUU3N0RCNTI5QjczQzY2MDY5MjdBRERGOEQ5MkUxN0FCQ0VBNTA0RTNG
RUY5ODBDMzNFREI0NTVFMjFGOEQzMkEwQjY1RjQ4RDU5MzY3NTVFNEM3MjhERjMy
MDExMTZEQ0FFNzU3MjA5NEI1ODFBOURFQjE0QUEzRjYxQzhEREQ1MTVDNzFDN0ZE
NkNBQzZCMDI5MjY1NEY3N0I5MzM1M0NBRDZCQzUwMTBBODc2NTI0MjMzMjdEQzE0
OTFFODQ5QjA2NEFGMzMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAs5HNUY3IXTh+SNxRqKA6ofMGctrrWSHfgLD1qtZVoMjYadCqkih3
1wiyr+qhzIk7A+QN0+73uJ1Pob9LGn6P6AwwA5FlOGmQ+pVyUPjWJnbwki5ay0Uy
lm6FdHwtdsnO60FIt8CG4QsuPzFwW+k0mrPRpDiOdScLdjactFyXXfIpY0Cp49jn
8eiZJhaB/UjvYoGrVeIe/PAfoZpmXnfbUptzxmBpJ63fjZLherzqUE4/75gMM+20
VeIfjTKgtl9I1ZNnVeTHKN8yARFtyudXIJS1ganesUqj9hyN3VFcccf9bKxrApJl
T3e5M1PK1rxQEKh2UkIzJ9wUkehJsGSvMwIDAQABo4ICMDCCAiwwHQYDVR0OBBYE
FK5H7kXBTDY27aL9Lc8/RDcvU1HJMB8GA1UdIwQYMBaAFCawQzHz26cLaU8v/zcc
he4CP7cPMA4GA1UdDwEB/wQEAwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vM2E4YTlhODEtMGE1Mi00YTUwLWI3
ZjYtYTM2Zjg2ZjNkMmM3LzAvMjZCMDQzMzFGM0RCQTcwQjY5NEYyRkZGMzcxQzg1
RUUwMjNGQjcwRi5jcmwwdAYIKwYBBQUHAQEEaDBmMGQGCCsGAQUFBzAChlhyc3lu
YzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8yLzI2QjA0MzMx
RjNEQkE3MEI2OTRGMkZGRjM3MUM4NUVFMDIzRkI3MEYuY2VyMIGgBggrBgEFBQcB
CwSBkzCBkDCBjQYIKwYBBQUHMAuGgYByc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby8zYThhOWE4MS0wYTUyLTRhNTAtYjdmNi1hMzZmODZmM2QyYzcvMC8z
MTMwMzMyZTMxMzgzMDJlMzAyZTMwMmYzMjMzMmQzMjMzMjAzZDNlMjAzMzM4Mzcz
NjMwLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/
BBAwDjAMBAIAATAGAwQBZ7QAMA0GCSqGSIb3DQEBCwUAA4IBAQArSsQ+bhnX8ZIu
clJJcOIp7Oosa60XQUIsbYvMl6VkRbFS9YKhQBeraEMO8j9neDa75v+qDT4jgMtr
L4/L5NhIw7Qc63o7D1/6sCx1uE47TTihzMXeJsF22VigiSThZllcR0lXYZGnXPZm
hS+Q87eiuOOy0ntspvN6TNujHIgSbOC39gnTqLwul5FX8kGCljpWHyVQ9auO9ym7
7UyNzF7vczQ4fkwKEpqmvsjGLypLI8lWprOO/sBhh6GDtrU1kJ3BRR6a1QYil7la
mX9PTeyOJ6tvRsTNRh+cgaNP1dNBu7Y+3u+ZwsvStNVc3tfA2ikI0x/qFSObII/w
FC/48oV4
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:06 2024 by rpki-client on console-fra.rpki-client.org