Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/3130332e3232342e3130302e302f32322d3234203d3e20313431363731.roa
File:                     3130332e3232342e3130302e302f32322d3234203d3e20313431363731.roa (raw, json)
Hash identifier:          PQi9rpn7Fbk5LUA7mMPBCpEDaVK+AZ66t3hmh2OU5Bc=
Subject key identifier:   8A:8F:14:74:03:03:4F:29:70:48:55:88:49:42:90:9F:B6:EF:9B:A7
Certificate issuer:       /CN=EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02
Certificate serial:       4D92092BD9CBEAE0CFE3484BCF360664E5390EF0
Authority key identifier: EF:C4:76:AB:80:A5:D0:AD:9F:CC:AA:14:41:C1:F6:41:83:8E:2E:02
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/3130332e3232342e3130302e302f32322d3234203d3e20313431363731.roa
Signing time:             Fri 11 Feb 2022 18:25:39 +0000
ROA not before:           Fri 11 Feb 2022 18:20:39 +0000
ROA not after:            Sat 11 Feb 2023 18:25:39 +0000
asID:                     141671
IP address blocks:        103.224.100.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:92:09:2b:d9:cb:ea:e0:cf:e3:48:4b:cf:36:06:64:e5:39:0e:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02
        Validity
            Not Before: Feb 11 18:20:39 2022 GMT
            Not After : Feb 11 18:25:39 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:9b:3d:f3:e9:25:f5:d7:5f:00:f5:35:51:fc:
                    c3:d1:33:97:5f:ea:34:c2:00:3c:f3:e4:ea:04:45:
                    6f:36:4c:d6:dd:94:22:3b:3a:1b:3f:4b:ea:98:28:
                    03:a1:8b:59:b4:f2:d5:6d:68:e9:c2:e7:ea:69:1b:
                    f0:e6:5b:51:e6:d4:52:40:9e:f5:cd:88:a3:64:9c:
                    56:c4:72:85:ff:93:0a:44:74:56:eb:c1:76:de:62:
                    8b:df:69:84:8b:e7:7c:48:cd:ef:3e:d1:4e:ed:ce:
                    5f:c2:24:7a:09:48:c8:b5:66:da:b0:b0:0f:f9:3c:
                    7d:d8:dd:0b:01:8b:91:7c:0b:78:90:5f:41:32:be:
                    87:7b:4b:63:5c:1f:c4:40:56:d2:98:1d:a0:8c:82:
                    13:40:7f:b4:4b:de:17:5b:71:cb:54:0d:2a:c3:e4:
                    f1:2f:19:30:f5:d0:32:f9:41:3f:4b:1a:9b:10:41:
                    91:01:77:81:46:2b:27:89:2c:15:52:08:87:42:61:
                    6a:0d:57:5f:df:58:c8:36:2b:ac:a8:b6:39:62:a3:
                    6e:b1:9c:80:9e:26:1f:4a:5e:33:b5:a6:7d:65:d2:
                    ed:b8:ae:d6:d9:51:4c:18:78:4e:fb:ec:88:e5:50:
                    72:b0:21:dd:d3:fc:8e:11:a7:74:89:73:e4:5a:63:
                    2f:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:8F:14:74:03:03:4F:29:70:48:55:88:49:42:90:9F:B6:EF:9B:A7
            X509v3 Authority Key Identifier:
                keyid:EF:C4:76:AB:80:A5:D0:AD:9F:CC:AA:14:41:C1:F6:41:83:8E:2E:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EFC476AB80A5D0AD9FCCAA1441C1F641838E2E02.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3e8fdeb0-3513-4f3d-9259-82b9d19a3556/0/3130332e3232342e3130302e302f32322d3234203d3e20313431363731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.224.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6b:23:10:9d:9f:e6:84:ad:63:d2:d7:d0:26:05:77:4c:29:d6:
         3d:7b:d8:17:ac:22:ea:8f:2a:dd:30:b2:bf:04:c5:05:93:5a:
         6a:83:57:93:f2:e3:10:7c:bb:b2:ff:33:be:a2:4e:2d:9a:9d:
         50:e5:e8:f8:8d:f6:21:ee:f1:dd:52:fa:2a:7d:c0:6d:e0:a5:
         8e:4d:aa:82:11:61:55:45:e8:f1:15:89:d2:03:fa:a8:e5:2b:
         ca:92:a1:cf:45:09:cd:fe:5d:19:bb:6e:ac:52:82:86:63:36:
         3a:52:e9:80:13:f6:45:8f:3c:c8:69:8e:e6:66:5b:ee:04:f0:
         62:a6:c0:2b:28:4c:b7:0b:0e:8e:43:3e:18:ad:87:5e:66:db:
         43:cf:75:99:f3:10:20:58:15:a2:26:9b:86:b8:8f:b0:7a:e9:
         10:45:cb:b9:1a:60:50:7c:39:b4:0b:fc:71:57:49:a1:16:86:
         2c:f5:d3:d5:1a:b5:88:a1:31:c4:07:ea:97:42:80:6d:b2:47:
         7d:7c:20:88:5a:dd:34:ad:6d:9b:7d:7a:58:45:e6:57:e2:4c:
         26:34:3e:07:1b:b1:ee:1f:a0:ed:2b:2a:34:86:03:6e:97:5d:
         56:a1:3c:b4:42:8b:ac:3a:c8:3f:fb:f1:59:a1:9e:dd:73:51:
         31:f9:70:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:39 2024 by rpki-client on console-ams.rpki-client.org