Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/3130332e3131312e3131382e302f32332d3233203d3e20313439393531.roa
File:                     3130332e3131312e3131382e302f32332d3233203d3e20313439393531.roa (raw, json)
Hash identifier:          +XmL0HWrnrHRDs4sX+vChccj90/J0a+nbrDUo0ZW3n8=
Subject key identifier:   BF:18:0F:0B:A2:55:DD:27:13:DD:46:25:98:E6:4A:D5:FF:B9:5D:C1
Certificate issuer:       /CN=CA14F96C33329D8CA42315C2B500AB2D57B1E35B
Certificate serial:       539D30D8F3B79A487B2D9314C02D4FD04A906060
Authority key identifier: CA:14:F9:6C:33:32:9D:8C:A4:23:15:C2:B5:00:AB:2D:57:B1:E3:5B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA14F96C33329D8CA42315C2B500AB2D57B1E35B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/3130332e3131312e3131382e302f32332d3233203d3e20313439393531.roa
Signing time:             Tue 30 Aug 2022 05:49:00 +0000
ROA not before:           Tue 30 Aug 2022 05:44:00 +0000
ROA not after:            Tue 29 Aug 2023 05:49:00 +0000
asID:                     149951
IP address blocks:        103.111.118.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:9d:30:d8:f3:b7:9a:48:7b:2d:93:14:c0:2d:4f:d0:4a:90:60:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA14F96C33329D8CA42315C2B500AB2D57B1E35B
        Validity
            Not Before: Aug 30 05:44:00 2022 GMT
            Not After : Aug 29 05:49:00 2023 GMT
        Subject: CN=BF180F0BA255DD2713DD462598E64AD5FFB95DC1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c5:08:e2:54:2c:ab:89:6e:8b:d6:2c:51:7d:
                    d8:5f:c3:88:a3:dc:64:49:86:61:e4:a5:5a:9f:2b:
                    dd:2f:e4:22:22:39:51:c4:36:f6:68:98:de:57:89:
                    f4:a9:40:ca:6c:43:4f:b3:4c:95:38:56:c5:83:17:
                    8d:57:b0:7a:69:93:c0:61:dd:9f:87:37:4b:13:64:
                    7d:1d:32:e6:4d:05:99:ab:21:41:de:89:bd:1d:82:
                    c3:e5:55:bb:9a:33:5d:04:a3:f8:33:ce:aa:19:4d:
                    aa:2d:6c:4a:31:82:a8:01:e4:4e:1d:4f:0c:03:3d:
                    14:2a:63:eb:7d:e6:be:4e:da:28:e5:11:94:bc:f1:
                    62:17:e2:bf:0c:a1:b6:c3:bc:ff:75:43:62:a1:2a:
                    95:a8:cf:8c:4c:22:84:b0:d5:1b:e0:1d:b3:3b:ad:
                    3b:06:c9:85:49:af:4f:62:4f:61:25:c9:75:ed:84:
                    14:eb:4d:d9:f3:9f:52:46:a6:7e:e7:89:23:74:bc:
                    ee:db:7a:49:32:1b:15:98:8a:9b:0e:ce:af:16:7a:
                    a4:42:89:12:9c:3c:04:a7:c0:cf:07:fd:3d:41:00:
                    33:a5:b4:37:b3:c1:1b:a7:02:62:3d:38:55:cd:22:
                    ea:d4:a0:f3:14:54:a6:08:f2:9d:f6:91:d5:4d:01:
                    85:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:18:0F:0B:A2:55:DD:27:13:DD:46:25:98:E6:4A:D5:FF:B9:5D:C1
            X509v3 Authority Key Identifier:
                keyid:CA:14:F9:6C:33:32:9D:8C:A4:23:15:C2:B5:00:AB:2D:57:B1:E3:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/CA14F96C33329D8CA42315C2B500AB2D57B1E35B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA14F96C33329D8CA42315C2B500AB2D57B1E35B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/51f16c45-96fb-4c92-804e-64b0bf280302/0/3130332e3131312e3131382e302f32332d3233203d3e20313439393531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.111.118.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1e:72:ec:6c:cd:cb:38:1e:52:a8:b0:ed:a2:b3:56:1b:01:4a:
         d6:3c:a3:b1:d6:57:08:da:c9:a6:b0:c1:1d:ed:07:98:5d:0a:
         07:2c:74:69:c5:03:d5:7e:38:b2:2f:8b:dc:a3:57:5c:79:1d:
         c1:11:19:f6:c8:be:a8:6f:71:4f:ec:b9:5e:a8:92:9a:d3:dd:
         ba:d7:99:12:2a:5b:fc:7c:88:53:93:d3:4b:db:42:95:80:1b:
         ab:50:45:0e:f1:50:55:e0:f4:4f:18:79:49:03:81:67:5b:41:
         12:2c:ee:63:6a:c9:9c:d8:71:14:3b:4c:f7:07:b5:a2:76:72:
         4c:98:5d:43:24:8c:92:fc:a6:98:aa:18:19:6a:55:b7:a0:33:
         5e:51:cb:a5:e9:4b:43:b6:63:17:80:12:29:ba:1d:14:11:cf:
         88:60:8d:1b:2a:36:21:68:8d:10:d1:e3:cb:b4:e2:97:a4:c9:
         61:fd:11:fd:4b:3d:5e:eb:be:29:f1:23:73:4d:bb:5f:3c:a7:
         7e:18:58:6c:b1:0f:a8:df:cb:be:67:74:fc:ff:1a:32:0d:33:
         da:81:21:0f:61:da:24:ae:8a:5d:b6:61:c4:19:bb:08:bb:dc:
         67:07:2b:a3:32:c3:aa:74:a8:83:3d:53:52:0d:ef:98:59:36:
         ab:e9:25:39
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUU50w2PO3mkh7LZMUwC1P0EqQYGAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0ExNEY5NkMzMzMyOUQ4Q0E0MjMxNUMyQjUwMEFCMkQ1
N0IxRTM1QjAeFw0yMjA4MzAwNTQ0MDBaFw0yMzA4MjkwNTQ5MDBaMDMxMTAvBgNV
BAMTKEJGMTgwRjBCQTI1NUREMjcxM0RENDYyNTk4RTY0QUQ1RkZCOTVEQzEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwxQjiVCyriW6L1ixRfdhfw4ij
3GRJhmHkpVqfK90v5CIiOVHENvZomN5XifSpQMpsQ0+zTJU4VsWDF41XsHppk8Bh
3Z+HN0sTZH0dMuZNBZmrIUHeib0dgsPlVbuaM10Eo/gzzqoZTaotbEoxgqgB5E4d
TwwDPRQqY+t95r5O2ijlEZS88WIX4r8MobbDvP91Q2KhKpWoz4xMIoSw1RvgHbM7
rTsGyYVJr09iT2ElyXXthBTrTdnzn1JGpn7niSN0vO7bekkyGxWYipsOzq8WeqRC
iRKcPASnwM8H/T1BADOltDezwRunAmI9OFXNIurUoPMUVKYI8p32kdVNAYVfAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUvxgPC6JV3ScT3UYlmOZK1f+5XcEwHwYDVR0j
BBgwFoAUyhT5bDMynYykIxXCtQCrLVex41swDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby81
MWYxNmM0NS05NmZiLTRjOTItODA0ZS02NGIwYmYyODAzMDIvMC9DQTE0Rjk2QzMz
MzI5RDhDQTQyMzE1QzJCNTAwQUIyRDU3QjFFMzVCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQ0ExNEY5NkMzMzMyOUQ4Q0E0MjMxNUMyQjUwMEFCMkQ1N0Ix
RTM1Qi5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzUxZjE2YzQ1LTk2ZmItNGM5Mi04
MDRlLTY0YjBiZjI4MDMwMi8wLzMxMzAzMzJlMzEzMTMxMmUzMTMxMzgyZTMwMmYz
MjMzMmQzMjMzMjAzZDNlMjAzMTM0MzkzOTM1MzEucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnb3YwDQYJ
KoZIhvcNAQELBQADggEBAB5y7GzNyzgeUqiw7aKzVhsBStY8o7HWVwjayaawwR3t
B5hdCgcsdGnFA9V+OLIvi9yjV1x5HcERGfbIvqhvcU/suV6okprT3brXmRIqW/x8
iFOT00vbQpWAG6tQRQ7xUFXg9E8YeUkDgWdbQRIs7mNqyZzYcRQ7TPcHtaJ2ckyY
XUMkjJL8ppiqGBlqVbegM15Ry6XpS0O2YxeAEim6HRQRz4hgjRsqNiFojRDR48u0
4pekyWH9Ef1LPV7rvinxI3NNu188p34YWGyxD6jfy75ndPz/GjINM9qBIQ9h2iSu
il22YcQZuwi73GcHK6Myw6p0qIM9U1IN75hZNqvpJTk=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:07 2024 by rpki-client on console-fra.rpki-client.org