Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/3130332e3232342e3133372e302f32342d3234203d3e203539313539.roa
File:                     3130332e3232342e3133372e302f32342d3234203d3e203539313539.roa (raw, json)
Hash identifier:          9eSpHv0AGtTVJoi6KtUdDpdDJLs8JtydsaxVzXlDjlA=
Subject key identifier:   A9:86:07:3B:44:42:36:B9:A2:31:3D:F7:21:AF:6F:1F:A8:ED:5F:61
Certificate issuer:       /CN=988E0377882A4782CADFC665BEA75BF64BFBAF8E
Certificate serial:       2F6CD0511D5D85D69322DB027B8DBDA0EEF7AA24
Authority key identifier: 98:8E:03:77:88:2A:47:82:CA:DF:C6:65:BE:A7:5B:F6:4B:FB:AF:8E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/988E0377882A4782CADFC665BEA75BF64BFBAF8E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/3130332e3232342e3133372e302f32342d3234203d3e203539313539.roa
Signing time:             Wed 08 Dec 2021 03:31:56 +0000
ROA not before:           Wed 08 Dec 2021 03:26:56 +0000
ROA not after:            Thu 08 Dec 2022 03:31:56 +0000
asID:                     59159
IP address blocks:        103.224.137.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:6c:d0:51:1d:5d:85:d6:93:22:db:02:7b:8d:bd:a0:ee:f7:aa:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=988E0377882A4782CADFC665BEA75BF64BFBAF8E
        Validity
            Not Before: Dec  8 03:26:56 2021 GMT
            Not After : Dec  8 03:31:56 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:c7:41:10:25:b8:88:98:71:07:41:66:f4:c3:
                    99:4d:87:6e:25:75:cd:c2:0b:fc:4e:9d:bb:c2:de:
                    93:8e:a9:d6:ff:41:a6:c0:de:1a:6c:be:02:9f:80:
                    11:8e:ba:1b:92:4b:24:59:da:5f:d2:52:a6:13:2f:
                    a8:ba:f4:89:b0:9c:b0:d4:7b:ae:60:68:c4:d0:93:
                    7c:18:e1:b7:05:9b:b0:83:de:fa:c3:0c:3a:17:26:
                    10:c0:39:4c:3b:82:33:99:78:dd:37:94:5f:5a:7d:
                    23:96:bc:0a:d7:d4:17:b2:72:ee:3f:20:2a:48:47:
                    1e:74:3e:20:ab:42:07:22:f7:0f:92:ee:ac:a6:1b:
                    6a:65:57:9b:b8:9b:03:7e:8e:1a:c3:41:e8:a1:12:
                    ee:1a:17:33:e3:a1:bf:6f:b0:34:1a:c2:a6:5b:cc:
                    73:bd:0b:f0:59:5a:8a:a0:10:9e:d1:e3:a4:5c:48:
                    24:62:3c:9f:3c:2b:36:6e:e2:f6:a4:92:a4:78:b7:
                    ad:73:bc:c2:e0:31:7f:75:dd:1b:60:e4:c0:32:95:
                    9e:ba:5f:b2:aa:7a:d0:b6:8f:54:ba:49:28:7c:78:
                    de:66:ad:39:77:bc:9a:95:56:8d:df:06:ef:52:bb:
                    1b:75:40:4f:d2:4b:41:e4:e7:ea:90:1d:ad:3d:55:
                    b2:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:86:07:3B:44:42:36:B9:A2:31:3D:F7:21:AF:6F:1F:A8:ED:5F:61
            X509v3 Authority Key Identifier:
                keyid:98:8E:03:77:88:2A:47:82:CA:DF:C6:65:BE:A7:5B:F6:4B:FB:AF:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/988E0377882A4782CADFC665BEA75BF64BFBAF8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/988E0377882A4782CADFC665BEA75BF64BFBAF8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/3130332e3232342e3133372e302f32342d3234203d3e203539313539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.224.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:b6:b2:6f:f6:61:25:1b:d5:e1:8e:ae:87:12:80:e4:28:b6:
         09:85:c7:85:75:48:0e:70:3b:5d:cd:0c:35:80:bc:9e:0c:4f:
         8b:0c:41:b1:5d:0f:49:19:64:14:b9:65:cc:56:b4:63:50:b8:
         44:e2:3b:d5:24:e5:21:29:d3:65:08:08:c4:84:79:8a:bc:b8:
         fc:5b:b6:6d:85:94:99:a0:21:87:f3:e3:49:e1:b0:a5:72:33:
         28:98:a3:e2:10:a6:69:8a:2a:c5:e2:bc:f7:73:cf:ec:5a:f2:
         82:d7:96:13:67:08:0b:f4:56:dc:ae:a4:55:97:86:f8:68:ad:
         f9:5a:f1:6c:60:15:65:d2:bb:23:bd:73:07:db:a3:bd:4d:c0:
         5d:be:1b:4c:80:03:16:f6:08:ec:bb:c4:ff:96:65:cd:1a:89:
         af:b5:b0:d5:61:c3:35:df:f9:5f:b8:6b:21:fc:99:fe:d1:18:
         9e:4f:52:39:ef:f0:70:80:49:e4:1c:17:68:e8:f2:23:55:b2:
         d9:ab:99:85:fc:35:61:c9:29:53:4c:28:42:f1:25:ab:34:e5:
         49:d3:c2:5e:62:2b:38:3d:e6:15:2a:d6:93:43:1a:f2:60:b1:
         01:bf:82:03:c1:fc:f8:c3:0b:e6:6c:82:05:66:b5:9b:99:9b:
         b0:cd:f3:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:39 2024 by rpki-client on console-ams.rpki-client.org