Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/3130332e3232342e3133392e302f32342d3234203d3e203539313539.roa
File:                     3130332e3232342e3133392e302f32342d3234203d3e203539313539.roa (raw, json)
Hash identifier:          o0euwnIwQbfRiukn92M2sKIlc5WrMO+GJ5DEL2n43Rc=
Subject key identifier:   AC:16:93:4F:5E:A6:7F:2E:22:A5:7A:1E:75:28:E3:83:71:9D:58:1F
Certificate issuer:       /CN=988E0377882A4782CADFC665BEA75BF64BFBAF8E
Certificate serial:       1E50F6459CABF0FF8763BE95C6ABD59572DA6C5E
Authority key identifier: 98:8E:03:77:88:2A:47:82:CA:DF:C6:65:BE:A7:5B:F6:4B:FB:AF:8E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/988E0377882A4782CADFC665BEA75BF64BFBAF8E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/3130332e3232342e3133392e302f32342d3234203d3e203539313539.roa
Signing time:             Wed 08 Dec 2021 03:33:35 +0000
ROA not before:           Wed 08 Dec 2021 03:28:35 +0000
ROA not after:            Thu 08 Dec 2022 03:33:35 +0000
asID:                     59159
IP address blocks:        103.224.139.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:50:f6:45:9c:ab:f0:ff:87:63:be:95:c6:ab:d5:95:72:da:6c:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=988E0377882A4782CADFC665BEA75BF64BFBAF8E
        Validity
            Not Before: Dec  8 03:28:35 2021 GMT
            Not After : Dec  8 03:33:35 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:8d:a7:40:75:3b:62:f7:54:08:b2:01:80:d5:
                    0b:ca:40:ac:14:53:f5:0d:7f:da:a2:75:a8:5a:37:
                    65:02:98:93:60:f7:e0:be:ed:1b:de:fb:b7:f0:bb:
                    c3:5b:43:ee:51:ca:9c:68:a8:3b:a1:e3:c7:d1:df:
                    20:54:45:f9:05:ab:02:c1:f6:04:0c:98:88:ec:be:
                    cf:68:18:0e:b2:41:c5:a1:86:51:63:8a:ac:11:c0:
                    12:9d:ae:f1:88:d2:d8:98:8b:7e:27:c1:35:3d:06:
                    d4:af:9c:1f:0d:c5:24:b0:53:92:f9:cb:91:24:35:
                    b8:3f:6f:38:9c:b9:69:ac:16:45:21:2b:4e:74:ed:
                    8e:a1:fa:ca:0f:98:59:bf:01:57:5c:cf:2b:00:38:
                    04:30:f3:c4:a9:42:92:32:4a:b5:bd:3b:1b:d1:d5:
                    96:ff:9b:0d:f0:26:8a:41:ec:f2:ff:4a:4e:09:62:
                    07:a2:ae:65:b5:a8:59:d0:df:75:5c:66:b6:55:19:
                    ef:02:68:79:6a:0d:3d:72:59:c4:dd:3e:6c:08:1f:
                    82:f4:5b:0b:9a:57:9a:d2:b8:1c:ee:8b:0e:f9:7b:
                    c1:07:e1:0c:00:d1:20:37:ab:ed:69:3b:51:9b:d5:
                    94:a0:36:8c:37:0b:59:e5:6f:f1:e6:e4:ef:2c:63:
                    89:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:16:93:4F:5E:A6:7F:2E:22:A5:7A:1E:75:28:E3:83:71:9D:58:1F
            X509v3 Authority Key Identifier:
                keyid:98:8E:03:77:88:2A:47:82:CA:DF:C6:65:BE:A7:5B:F6:4B:FB:AF:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/988E0377882A4782CADFC665BEA75BF64BFBAF8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/988E0377882A4782CADFC665BEA75BF64BFBAF8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/42f39c17-6725-42be-bed4-f0ebbba2d4fd/0/3130332e3232342e3133392e302f32342d3234203d3e203539313539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.224.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         44:a8:21:c7:0c:0d:70:fe:0b:7f:32:32:56:c7:b2:0a:bc:29:
         b1:09:44:7d:1d:ae:dd:5d:13:58:4e:0e:fe:7d:25:03:72:01:
         17:ab:e5:d0:43:7f:87:ea:71:9a:20:d3:94:83:f5:ee:39:64:
         66:d1:a5:fe:22:56:a0:58:07:9e:bd:59:45:c4:11:97:af:66:
         74:d1:fc:47:98:9a:4a:26:d1:6b:b2:03:26:6c:79:3b:47:c4:
         e0:58:ee:da:ff:aa:f2:5d:27:ae:94:9b:41:9e:15:60:1a:19:
         bf:cc:29:c2:6a:67:41:be:0e:84:fb:ae:f5:7c:7e:73:a5:a5:
         c3:f7:f0:ce:fa:9d:d2:4d:8d:4a:e2:2c:1f:08:09:91:7f:f4:
         5e:02:19:2b:1d:83:8a:57:05:01:d7:8b:ca:3e:6c:f0:29:6a:
         ac:1d:73:33:22:e0:68:c9:f5:35:dc:de:10:79:37:60:6b:d9:
         5e:c6:bc:16:ff:76:d2:9d:be:4e:dc:9f:12:f9:ae:e7:87:21:
         77:e5:d9:c4:3c:a7:ca:34:f2:90:ad:86:a9:db:ea:e8:cd:aa:
         52:34:c0:c3:b3:ea:c4:fb:51:21:9d:23:60:59:7e:43:92:c7:
         73:27:dd:0d:62:d8:4c:c4:2f:c6:38:67:77:31:f2:6a:27:0e:
         4e:ab:1a:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:39 2024 by rpki-client on console-ams.rpki-client.org