Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/3130332e3137392e3133342e302f32342d3234203d3e20313531303030.roa
File:                     3130332e3137392e3133342e302f32342d3234203d3e20313531303030.roa (raw, json)
Hash identifier:          vSphzUcj+cLHf5dZ5zeYODqGtXvsX2Cul8Bvrmz9B/8=
Subject key identifier:   B1:31:F6:07:7E:1E:21:A4:B4:E1:BF:62:0B:DC:FD:35:C5:96:51:D8
Certificate issuer:       /CN=402D9F1E05A26B41164E25B73A5B07C88E32AB43
Certificate serial:       6CFD5D3A3D2BC443BBF18D0FC916BEE1F27F5763
Authority key identifier: 40:2D:9F:1E:05:A2:6B:41:16:4E:25:B7:3A:5B:07:C8:8E:32:AB:43
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/402D9F1E05A26B41164E25B73A5B07C88E32AB43.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/3130332e3137392e3133342e302f32342d3234203d3e20313531303030.roa
Signing time:             Tue 06 Jun 2023 19:00:37 +0000
ROA not before:           Tue 06 Jun 2023 18:55:37 +0000
ROA not after:            Tue 04 Jun 2024 19:00:37 +0000
asID:                     151000
IP address blocks:        103.179.134.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:fd:5d:3a:3d:2b:c4:43:bb:f1:8d:0f:c9:16:be:e1:f2:7f:57:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=402D9F1E05A26B41164E25B73A5B07C88E32AB43
        Validity
            Not Before: Jun  6 18:55:37 2023 GMT
            Not After : Jun  4 19:00:37 2024 GMT
        Subject: CN=B131F6077E1E21A4B4E1BF620BDCFD35C59651D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:68:8d:d2:45:7b:19:65:34:1b:69:10:91:d0:
                    11:10:46:2d:59:02:1d:7c:4d:a4:77:2b:4f:c8:3e:
                    ee:9a:04:cc:5d:91:9e:d3:f8:c1:57:ef:ae:f9:61:
                    29:f3:44:cc:9b:db:68:d7:2e:90:88:f1:ea:fc:0a:
                    c1:f3:44:ab:be:6d:56:23:89:ce:bf:71:aa:51:04:
                    06:a0:a6:c0:df:51:1a:d2:a3:c1:72:1b:40:27:07:
                    68:7c:8c:4e:ca:a0:55:9a:54:e5:fe:49:54:ea:16:
                    77:f7:b2:4c:8b:90:b5:3a:b4:36:93:c8:34:55:55:
                    5e:55:11:f2:d2:a2:34:6d:7e:cf:7a:cd:50:2e:67:
                    80:13:c9:86:4d:ec:b5:e0:df:3d:ff:b8:db:1a:e1:
                    2e:18:9a:67:0f:20:6e:6d:1d:6e:47:8a:12:a1:6f:
                    30:03:94:e0:22:ae:b5:d2:14:49:5f:4e:cf:a1:25:
                    7c:25:09:27:5c:4e:87:3a:46:f2:8a:f6:21:17:43:
                    41:90:3d:7f:90:67:e6:d2:5e:eb:43:14:54:1b:d1:
                    3d:30:54:b6:ed:90:04:1b:4b:68:3f:e9:df:5e:e6:
                    d5:bf:ae:b9:a6:47:6b:40:a8:06:00:8d:d8:00:74:
                    a5:40:fa:2b:a5:35:c5:d9:a8:52:39:74:6f:3b:0b:
                    c6:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:31:F6:07:7E:1E:21:A4:B4:E1:BF:62:0B:DC:FD:35:C5:96:51:D8
            X509v3 Authority Key Identifier:
                keyid:40:2D:9F:1E:05:A2:6B:41:16:4E:25:B7:3A:5B:07:C8:8E:32:AB:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/402D9F1E05A26B41164E25B73A5B07C88E32AB43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/402D9F1E05A26B41164E25B73A5B07C88E32AB43.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/3130332e3137392e3133342e302f32342d3234203d3e20313531303030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.179.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3b:31:e3:b0:37:71:16:f2:be:42:77:d1:4b:01:8a:4a:d4:6f:
         4f:69:17:2b:42:54:77:74:02:be:a7:44:0d:9f:38:3d:0b:1f:
         51:74:36:01:37:76:2e:40:f6:2f:13:07:79:39:2c:ed:84:a8:
         d1:86:57:47:73:f9:77:78:2e:1f:8c:20:fe:ec:87:5c:d7:c8:
         88:c6:93:28:af:a2:e8:04:71:c8:b2:72:f2:30:67:54:aa:b9:
         76:02:ca:2c:8e:aa:b9:38:1b:4c:0d:25:e3:10:44:86:82:db:
         2d:58:4c:66:56:ec:ef:ab:62:75:c2:f0:6a:89:b5:51:19:71:
         f1:df:e0:be:68:2b:c4:45:ba:69:ac:19:2d:2c:64:27:3d:e0:
         6b:fd:1e:0c:db:50:cf:78:b5:f4:e9:0e:ed:b3:3f:0c:68:bb:
         26:4e:4b:46:8b:4f:de:76:2e:06:f5:d3:d2:e6:f7:ef:db:8e:
         3c:45:15:d4:8c:6a:50:a3:ec:71:67:8d:37:58:a8:5d:7a:f4:
         96:ae:1e:8c:2b:aa:7f:b6:8a:ba:2e:aa:e2:e7:8a:d8:02:52:
         49:94:3d:2d:42:2b:9b:26:dd:42:39:0c:12:58:62:60:8f:c9:
         e2:19:7d:1c:f5:47:04:d6:36:36:f4:cb:ef:0e:18:b9:8b:a6:
         0b:1a:97:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:39 2024 by rpki-client on console-ams.rpki-client.org