Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/3130332e3137382e3134362e302f32342d3234203d3e20313336383733.roa
File:                     3130332e3137382e3134362e302f32342d3234203d3e20313336383733.roa (raw, json)
Hash identifier:          Rb87swNqRpkjKETD2eTichJG+Tm32KLQw5Ma24awfgw=
Subject key identifier:   AD:C1:3C:E4:31:F5:CF:26:C1:83:3A:DC:49:34:77:83:37:03:A5:F0
Certificate issuer:       /CN=31F2586537E4318089C855DE0883A690E2FB398B
Certificate serial:       29D055A9F9F3EBCCC9024B9942DAA01B8BC813BF
Authority key identifier: 31:F2:58:65:37:E4:31:80:89:C8:55:DE:08:83:A6:90:E2:FB:39:8B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31F2586537E4318089C855DE0883A690E2FB398B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/3130332e3137382e3134362e302f32342d3234203d3e20313336383733.roa
Signing time:             Thu 13 Jan 2022 01:59:29 +0000
ROA not before:           Thu 13 Jan 2022 01:54:29 +0000
ROA not after:            Fri 13 Jan 2023 01:59:29 +0000
asID:                     136873
IP address blocks:        103.178.146.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:d0:55:a9:f9:f3:eb:cc:c9:02:4b:99:42:da:a0:1b:8b:c8:13:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31F2586537E4318089C855DE0883A690E2FB398B
        Validity
            Not Before: Jan 13 01:54:29 2022 GMT
            Not After : Jan 13 01:59:29 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:66:f0:43:73:02:7c:60:0b:72:3e:9c:96:27:
                    67:e5:6e:0c:a1:36:df:92:ab:be:d8:1e:da:8c:46:
                    f2:ed:4a:7e:89:ae:4b:50:0b:62:85:60:a8:95:a4:
                    5f:c5:cf:51:fb:12:c3:d9:6b:18:62:ad:e2:2a:04:
                    c9:c7:45:27:5f:35:88:dc:2f:33:ec:ef:a3:73:56:
                    11:0a:e7:f8:d6:c2:66:af:93:cf:95:c5:41:7e:4f:
                    9b:b9:de:f8:66:3f:5a:ef:31:e7:c7:1b:d8:65:4b:
                    18:62:c8:c4:3d:43:5b:b0:76:9f:f2:2b:e3:5d:e4:
                    70:a9:a4:8f:82:67:4b:cb:eb:cf:22:1f:c6:a6:5e:
                    e9:9e:8c:d3:18:3e:18:bc:04:82:ea:03:92:bd:89:
                    eb:47:d7:2e:57:fa:dd:4a:c0:75:20:c5:b4:77:76:
                    89:82:c2:c1:1f:cd:f7:9c:3a:be:96:b0:98:68:a6:
                    6a:20:12:15:b0:49:8f:9c:96:f2:a1:41:7c:f6:7b:
                    ca:11:4a:c6:5d:7f:6c:b7:4c:0b:a9:49:dc:1c:4c:
                    32:97:60:e4:f1:7f:ac:c8:3f:c2:c3:35:12:f0:c0:
                    22:15:d9:8b:83:6c:7d:d4:aa:75:10:87:46:75:06:
                    94:ef:86:d7:08:12:50:79:61:f7:e4:44:3c:28:fd:
                    ff:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:C1:3C:E4:31:F5:CF:26:C1:83:3A:DC:49:34:77:83:37:03:A5:F0
            X509v3 Authority Key Identifier:
                keyid:31:F2:58:65:37:E4:31:80:89:C8:55:DE:08:83:A6:90:E2:FB:39:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/31F2586537E4318089C855DE0883A690E2FB398B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/31F2586537E4318089C855DE0883A690E2FB398B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bab8042-0e1c-43b1-b703-63438be2325b/0/3130332e3137382e3134362e302f32342d3234203d3e20313336383733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.178.146.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a2:af:45:7f:2f:5e:f4:32:50:e8:0b:01:27:3f:79:09:a5:bc:
         82:3e:88:be:9d:5d:e3:e1:cb:58:85:86:a8:a4:27:d7:fc:cf:
         8b:27:91:fb:18:f9:7c:f4:ca:8a:20:8a:16:48:53:a2:10:ee:
         3e:5a:2f:ff:47:87:5c:5f:d1:38:be:f3:96:47:d1:e2:0d:13:
         46:91:3a:f1:86:f4:9b:d1:d9:6e:3b:84:84:03:66:f2:11:f7:
         6b:14:a5:0c:ef:88:5e:9b:dc:f0:22:80:fb:48:71:a6:ba:8d:
         b4:6e:bf:33:d9:7f:08:43:fc:ae:a5:10:d1:73:5c:c4:44:75:
         8b:88:ad:bc:6b:fd:11:ca:45:b7:fc:79:79:03:a8:0a:2d:07:
         39:f4:e7:da:05:a2:00:7f:1b:f2:a9:f3:be:c4:ac:dc:4d:91:
         4e:f6:7d:90:d0:99:0e:30:00:9a:30:fc:c1:cc:ff:b8:17:88:
         db:26:d2:bf:1f:66:37:f8:53:b0:95:07:90:15:cf:65:c2:ec:
         8c:72:b3:2f:f9:8e:df:66:9a:52:ce:15:9e:3f:f8:df:f2:2a:
         34:cc:02:1f:52:cd:8f:39:90:34:08:04:54:0e:5c:d1:ca:71:
         1c:53:06:01:7b:16:04:91:73:4e:46:c6:a1:e5:1b:21:f6:71:
         8e:8a:26:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:39 2024 by rpki-client on console-ams.rpki-client.org