Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/3130332e3137392e3133352e302f32342d3234203d3e20313531303030.roa
File:                     3130332e3137392e3133352e302f32342d3234203d3e20313531303030.roa (raw, json)
Hash identifier:          D328KxDaQ3SHlWP28GE3i6mfpF3eIDdXzcSF6GIGyp0=
Subject key identifier:   30:02:FF:D6:FC:6B:12:A3:23:9A:38:26:F9:69:70:EB:3C:5A:19:44
Certificate issuer:       /CN=402D9F1E05A26B41164E25B73A5B07C88E32AB43
Certificate serial:       751189A189ED649CEF536EB7E2BD52B1BFD93A7F
Authority key identifier: 40:2D:9F:1E:05:A2:6B:41:16:4E:25:B7:3A:5B:07:C8:8E:32:AB:43
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/402D9F1E05A26B41164E25B73A5B07C88E32AB43.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/3130332e3137392e3133352e302f32342d3234203d3e20313531303030.roa
Signing time:             Tue 06 Jun 2023 19:02:15 +0000
ROA not before:           Tue 06 Jun 2023 18:57:15 +0000
ROA not after:            Tue 04 Jun 2024 19:02:15 +0000
asID:                     151000
IP address blocks:        103.179.135.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:11:89:a1:89:ed:64:9c:ef:53:6e:b7:e2:bd:52:b1:bf:d9:3a:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=402D9F1E05A26B41164E25B73A5B07C88E32AB43
        Validity
            Not Before: Jun  6 18:57:15 2023 GMT
            Not After : Jun  4 19:02:15 2024 GMT
        Subject: CN=3002FFD6FC6B12A3239A3826F96970EB3C5A1944
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:66:e5:5a:ef:e5:6d:c5:c0:92:68:f8:2b:18:
                    e3:ce:9b:63:ef:fe:97:73:f4:be:17:70:26:d0:7a:
                    71:8d:74:03:d0:f5:0b:6a:90:9e:c7:57:68:66:33:
                    49:30:e2:41:3f:fc:b3:bf:17:82:14:7a:59:2f:a0:
                    af:0e:0a:ae:19:bd:a3:2e:ea:3f:60:97:1d:47:7e:
                    7d:41:be:02:0f:33:26:80:ad:42:ff:d2:76:29:b6:
                    12:b8:6e:6a:c6:96:f5:7b:76:ab:c7:23:e7:99:1a:
                    26:2c:13:8b:33:11:84:1b:c8:e2:40:42:65:42:41:
                    18:fb:0c:1e:09:7b:2c:d0:d8:31:58:e7:4a:39:cb:
                    5a:aa:a8:cc:a8:ff:03:b6:23:77:99:ad:09:1e:fa:
                    85:c3:56:24:7b:54:0d:a1:18:a8:15:d3:15:b0:7b:
                    ad:3f:65:9d:e0:59:d3:fa:7a:aa:65:76:0e:11:e7:
                    24:57:69:4f:cb:84:2a:85:d8:2f:fe:f0:c7:e2:ee:
                    cf:15:44:b9:1f:ff:2f:f4:60:98:5b:4c:01:5e:6f:
                    3a:cd:e5:a9:41:18:32:9b:6d:18:3c:c9:f8:7b:4c:
                    7d:4c:2a:70:a8:43:52:1f:a0:b9:5e:e3:ea:c0:4c:
                    6d:46:0d:83:e3:82:3b:4b:33:d8:d7:31:cb:57:83:
                    8b:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:02:FF:D6:FC:6B:12:A3:23:9A:38:26:F9:69:70:EB:3C:5A:19:44
            X509v3 Authority Key Identifier:
                keyid:40:2D:9F:1E:05:A2:6B:41:16:4E:25:B7:3A:5B:07:C8:8E:32:AB:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/402D9F1E05A26B41164E25B73A5B07C88E32AB43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/402D9F1E05A26B41164E25B73A5B07C88E32AB43.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3b3df6af-d9ee-4076-81a4-264872748970/0/3130332e3137392e3133352e302f32342d3234203d3e20313531303030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.179.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         01:b3:b2:bb:3e:67:1d:5f:a1:97:72:13:62:79:bd:42:18:98:
         96:38:e2:99:0e:6c:a9:be:eb:4e:06:6c:05:09:e9:4f:9f:7c:
         5d:0b:24:38:e5:51:ef:33:ff:0f:f5:70:0f:b7:46:68:dc:18:
         d7:90:1f:1c:7e:f1:2c:0c:9b:27:91:10:ec:73:30:f2:9f:3d:
         aa:a1:b5:aa:ca:60:4b:96:14:91:d6:86:13:ba:e2:22:cf:7f:
         ee:09:e9:ee:05:ed:0c:3e:88:b8:81:50:91:84:08:1e:2a:e1:
         ae:fc:03:bc:58:e5:ff:29:a6:c0:22:4c:2a:48:8a:e1:60:35:
         0d:30:03:58:21:bf:20:db:cd:6c:fa:b5:4f:ac:7b:ce:96:79:
         92:86:2a:69:d1:35:51:21:95:18:0f:68:e9:84:66:13:59:c1:
         74:a5:97:8e:6c:5c:7e:75:8c:46:1d:44:c6:ac:e7:cc:ff:02:
         73:db:1d:2b:a6:09:96:81:e5:cc:66:c8:48:8f:3c:98:77:89:
         4a:fd:59:1b:08:11:e7:f1:6f:62:74:71:44:cc:09:98:44:8f:
         bf:1b:83:ec:aa:d4:36:03:6e:d2:29:0d:12:90:3e:b3:c9:ff:
         71:56:4d:67:a5:0b:8e:96:3d:47:cb:a4:c8:d8:54:8f:dd:dc:
         c7:9e:27:ab
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUdRGJoYntZJzvU2634r1Ssb/ZOn8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNDAyRDlGMUUwNUEyNkI0MTE2NEUyNUI3M0E1QjA3Qzg4
RTMyQUI0MzAeFw0yMzA2MDYxODU3MTVaFw0yNDA2MDQxOTAyMTVaMDMxMTAvBgNV
BAMTKDMwMDJGRkQ2RkM2QjEyQTMyMzlBMzgyNkY5Njk3MEVCM0M1QTE5NDQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDFZuVa7+VtxcCSaPgrGOPOm2Pv
/pdz9L4XcCbQenGNdAPQ9QtqkJ7HV2hmM0kw4kE//LO/F4IUelkvoK8OCq4ZvaMu
6j9glx1Hfn1BvgIPMyaArUL/0nYpthK4bmrGlvV7dqvHI+eZGiYsE4szEYQbyOJA
QmVCQRj7DB4JeyzQ2DFY50o5y1qqqMyo/wO2I3eZrQke+oXDViR7VA2hGKgV0xWw
e60/ZZ3gWdP6eqpldg4R5yRXaU/LhCqF2C/+8Mfi7s8VRLkf/y/0YJhbTAFebzrN
5alBGDKbbRg8yfh7TH1MKnCoQ1IfoLle4+rATG1GDYPjgjtLM9jXMctXg4sxAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUMAL/1vxrEqMjmjgm+Wlw6zxaGUQwHwYDVR0j
BBgwFoAUQC2fHgWia0EWTiW3OlsHyI4yq0MwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
YjNkZjZhZi1kOWVlLTQwNzYtODFhNC0yNjQ4NzI3NDg5NzAvMC80MDJEOUYxRTA1
QTI2QjQxMTY0RTI1QjczQTVCMDdDODhFMzJBQjQzLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNDAyRDlGMUUwNUEyNkI0MTE2NEUyNUI3M0E1QjA3Qzg4RTMy
QUI0My5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzNiM2RmNmFmLWQ5ZWUtNDA3Ni04
MWE0LTI2NDg3Mjc0ODk3MC8wLzMxMzAzMzJlMzEzNzM5MmUzMTMzMzUyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM1MzEzMDMwMzAucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABns4cwDQYJ
KoZIhvcNAQELBQADggEBAAGzsrs+Zx1foZdyE2J5vUIYmJY44pkObKm+604GbAUJ
6U+ffF0LJDjlUe8z/w/1cA+3RmjcGNeQHxx+8SwMmyeREOxzMPKfPaqhtarKYEuW
FJHWhhO64iLPf+4J6e4F7Qw+iLiBUJGECB4q4a78A7xY5f8ppsAiTCpIiuFgNQ0w
A1ghvyDbzWz6tU+se86WeZKGKmnRNVEhlRgPaOmEZhNZwXSll45sXH51jEYdRMas
58z/AnPbHSumCZaB5cxmyEiPPJh3iUr9WRsIEefxb2J0cUTMCZhEj78bg+yq1DYD
btIpDRKQPrPJ/3FWTWelC46WPUfLpMjYVI/d3MeeJ6s=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:39 2024 by rpki-client on console-ams.rpki-client.org