Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/53384497-772d-4179-b247-b01c64ed10d1/0/3130332e3130322e32362e302f32342d3234203d3e203538333639.roa
File:                     3130332e3130322e32362e302f32342d3234203d3e203538333639.roa (raw, json)
Hash identifier:          j8nww6mlZkza5x+iu+dzNLGo6TEm9hvq/S8kxMHPHzI=
Subject key identifier:   87:A0:39:6F:EE:C1:F6:46:F9:B1:06:CE:33:42:45:94:4C:FE:78:BD
Certificate issuer:       /CN=056930DE7F7401B4CCAB5EC010FBE292D6553EE0
Certificate serial:       328B8BD1F718E27244C6FD47C9DF43DC03EE787C
Authority key identifier: 05:69:30:DE:7F:74:01:B4:CC:AB:5E:C0:10:FB:E2:92:D6:55:3E:E0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/056930DE7F7401B4CCAB5EC010FBE292D6553EE0.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/53384497-772d-4179-b247-b01c64ed10d1/0/3130332e3130322e32362e302f32342d3234203d3e203538333639.roa
Signing time:             Tue 28 Feb 2023 05:04:45 +0000
ROA not before:           Tue 28 Feb 2023 04:59:45 +0000
ROA not after:            Tue 27 Feb 2024 05:04:45 +0000
asID:                     58369
IP address blocks:        103.102.26.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:8b:8b:d1:f7:18:e2:72:44:c6:fd:47:c9:df:43:dc:03:ee:78:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=056930DE7F7401B4CCAB5EC010FBE292D6553EE0
        Validity
            Not Before: Feb 28 04:59:45 2023 GMT
            Not After : Feb 27 05:04:45 2024 GMT
        Subject: CN=87A0396FEEC1F646F9B106CE334245944CFE78BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:ed:74:a0:a1:04:eb:1e:36:34:40:24:65:75:
                    72:48:c8:ac:c6:53:b2:b9:89:72:54:4e:8c:6e:8a:
                    a9:30:50:58:d6:f5:85:65:fc:cd:cb:42:48:b6:4f:
                    3f:1a:94:ee:d6:36:ca:ee:cf:c4:06:2c:fd:66:6b:
                    b9:d0:bd:a2:c2:b3:88:a5:88:10:bc:4d:03:f0:67:
                    fa:26:62:05:93:0d:cd:56:95:0a:84:c9:ec:73:98:
                    fe:57:f6:4a:36:be:a9:e9:11:59:c6:ee:35:96:08:
                    52:f4:70:8e:33:92:c9:f9:59:af:e2:4f:13:2b:60:
                    1a:ed:d0:25:bf:4d:be:09:90:1b:9f:cb:79:b8:ba:
                    b9:e7:68:95:8f:46:c6:14:c2:81:58:b8:63:0a:97:
                    c3:63:f1:02:60:70:7d:34:77:d8:63:7c:9e:af:7e:
                    78:1a:69:cb:65:70:bc:38:06:97:98:08:a2:31:1c:
                    4e:77:af:98:b9:9c:b9:40:28:c8:e3:49:d6:01:9e:
                    3a:69:2c:a0:0e:96:c4:16:7a:f9:69:c0:3a:e8:e2:
                    37:84:81:70:cc:53:8d:b2:99:dd:2f:10:c3:9f:2c:
                    2b:7a:ef:67:99:b5:fc:57:6d:d5:ee:0d:e6:6d:35:
                    ff:d9:0e:b3:ab:59:35:6f:4f:8d:be:e4:ef:35:29:
                    ad:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:A0:39:6F:EE:C1:F6:46:F9:B1:06:CE:33:42:45:94:4C:FE:78:BD
            X509v3 Authority Key Identifier:
                keyid:05:69:30:DE:7F:74:01:B4:CC:AB:5E:C0:10:FB:E2:92:D6:55:3E:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/53384497-772d-4179-b247-b01c64ed10d1/0/056930DE7F7401B4CCAB5EC010FBE292D6553EE0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/056930DE7F7401B4CCAB5EC010FBE292D6553EE0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/53384497-772d-4179-b247-b01c64ed10d1/0/3130332e3130322e32362e302f32342d3234203d3e203538333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.102.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         47:48:c3:1c:c5:e9:02:c7:e4:ef:22:22:86:ac:c9:36:86:f9:
         9c:60:16:0c:9a:45:3e:85:db:45:59:f8:54:a5:51:76:e2:44:
         d4:d9:2b:b2:1b:ff:bf:ee:05:b7:c9:3b:02:f2:62:40:7e:63:
         5d:50:23:03:c1:d3:b2:5d:09:6b:ba:fb:28:39:ec:b7:81:14:
         0e:5f:f4:f3:fb:82:2d:89:28:4e:4c:de:51:40:83:30:9c:e5:
         51:19:9f:64:f4:33:55:65:17:1c:06:4c:bd:8e:1f:29:fc:31:
         bf:ba:7c:7a:ef:51:a5:c6:ca:00:52:72:81:d2:5b:c4:c2:84:
         64:86:ba:be:3c:84:d7:2b:84:b4:03:db:60:cb:3c:f2:94:bb:
         fe:79:d7:29:9c:de:64:7a:b1:1d:fa:37:ab:1b:b0:fc:1b:e1:
         f7:a0:f7:40:17:b5:26:5b:8c:74:1a:29:55:5d:82:85:0f:53:
         67:26:89:ab:1f:c3:f8:1b:ed:57:e3:09:78:23:a4:6f:b6:97:
         b5:18:95:94:5e:17:43:56:36:37:bc:45:4f:3d:91:f2:45:d8:
         0a:4f:97:26:23:8a:ff:b6:35:4a:a4:7f:38:e2:c5:55:cb:5d:
         70:b4:96:8c:9e:cd:67:57:2f:79:42:13:4a:36:53:15:81:d6:
         c1:cc:a6:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:40 2024 by rpki-client on console-ams.rpki-client.org