Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/3130332e3138392e302e302f32332d3233203d3e20313439383830.roa
File:                     3130332e3138392e302e302f32332d3233203d3e20313439383830.roa (raw, json)
Hash identifier:          4l19V9Sy6adu9tXe18uLmaoP69E3f5CZT9GMV4qTMTU=
Subject key identifier:   A6:1A:6F:3B:BB:CB:47:A7:DF:80:D9:FD:27:D1:5D:4A:CD:1C:A7:74
Certificate issuer:       /CN=26D5C063BEB580B38F28F3CC16B958634FF7A48B
Certificate serial:       67DE60F872B01C9756D1DCF35CC1A4EF41CAA480
Authority key identifier: 26:D5:C0:63:BE:B5:80:B3:8F:28:F3:CC:16:B9:58:63:4F:F7:A4:8B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26D5C063BEB580B38F28F3CC16B958634FF7A48B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/3130332e3138392e302e302f32332d3233203d3e20313439383830.roa
Signing time:             Sat 02 Jul 2022 12:49:53 +0000
ROA not before:           Sat 02 Jul 2022 12:44:53 +0000
ROA not after:            Sat 01 Jul 2023 12:49:53 +0000
asID:                     149880
IP address blocks:        103.189.0.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:de:60:f8:72:b0:1c:97:56:d1:dc:f3:5c:c1:a4:ef:41:ca:a4:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26D5C063BEB580B38F28F3CC16B958634FF7A48B
        Validity
            Not Before: Jul  2 12:44:53 2022 GMT
            Not After : Jul  1 12:49:53 2023 GMT
        Subject: CN=A61A6F3BBBCB47A7DF80D9FD27D15D4ACD1CA774
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:d5:90:e2:33:08:fa:ca:39:cf:e2:ae:1d:56:
                    e6:5f:cd:44:42:e6:aa:4d:eb:9f:ff:87:26:d7:d3:
                    a8:6f:08:29:dc:36:cd:6d:4a:39:8e:82:94:df:6d:
                    3f:d9:24:1a:93:16:a4:5b:91:c2:e7:22:f6:b6:40:
                    e8:1e:ce:05:09:5b:bc:e1:37:40:4e:f1:a8:bc:88:
                    e6:d3:b8:e4:cc:fe:c4:65:58:13:3e:aa:03:21:2e:
                    ff:e5:89:e0:51:a8:0c:8d:65:96:2b:e6:fa:5a:91:
                    be:c5:b0:c5:9f:e2:f2:d1:8a:88:72:4c:17:22:64:
                    28:0b:b4:b1:93:25:73:8a:f9:92:cb:ca:60:3e:ad:
                    86:52:9f:a3:e7:47:db:a8:51:20:9a:79:a7:d7:e4:
                    85:74:62:45:29:b8:62:18:cc:9e:32:cb:89:c9:5e:
                    e2:3e:31:39:9a:4f:af:07:ef:36:89:cb:3e:68:61:
                    a3:8f:58:b0:55:2f:5d:ab:db:ac:15:70:71:26:56:
                    3a:60:65:da:ad:e6:ab:8c:68:93:f2:93:ca:b6:27:
                    e8:2c:d2:8d:34:1c:b7:88:2b:6c:d3:c7:c7:5f:80:
                    06:00:86:47:b3:8d:1e:3d:ca:75:ad:29:41:2d:90:
                    80:b3:c3:a5:07:d8:3b:e6:9a:4d:85:6a:71:d8:c5:
                    7b:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:1A:6F:3B:BB:CB:47:A7:DF:80:D9:FD:27:D1:5D:4A:CD:1C:A7:74
            X509v3 Authority Key Identifier:
                keyid:26:D5:C0:63:BE:B5:80:B3:8F:28:F3:CC:16:B9:58:63:4F:F7:A4:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/26D5C063BEB580B38F28F3CC16B958634FF7A48B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26D5C063BEB580B38F28F3CC16B958634FF7A48B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/3130332e3138392e302e302f32332d3233203d3e20313439383830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.189.0.0/23

    Signature Algorithm: sha256WithRSAEncryption
         91:2f:e7:17:be:0e:b6:78:01:61:3d:98:1d:dd:db:01:06:9b:
         e2:f0:09:b1:87:5e:db:31:0b:1d:41:95:43:ef:cb:91:a6:44:
         c4:c5:80:34:26:b3:a0:cf:56:1c:ff:04:1b:c3:df:9d:24:e2:
         23:5b:6a:b7:ac:52:41:27:83:e5:74:fa:09:e3:ff:ca:a3:5b:
         62:a4:7d:b3:39:63:45:a1:ad:50:fd:4e:85:66:74:9a:e4:5c:
         c8:cb:ec:85:b1:0f:81:ad:ed:bf:02:37:d0:24:2f:1b:b3:08:
         a6:30:2a:b0:8c:eb:da:11:7a:d4:b7:cb:89:b5:af:a8:2c:b2:
         ef:f7:f3:a8:d4:f3:8f:e8:3b:f0:ec:0f:7f:4f:a7:cf:83:88:
         88:d8:cd:cc:da:db:cb:98:b4:60:3f:23:3b:2e:fc:33:c7:7f:
         58:26:bf:97:98:a1:d1:7c:0f:f0:47:60:75:57:c4:a5:6a:95:
         1e:69:cc:26:fa:70:60:82:dd:06:6d:d7:6b:f0:a4:e7:1a:64:
         5d:30:57:09:20:70:a1:43:7e:2f:f8:ea:e8:11:8a:10:b5:84:
         9a:bc:f1:a1:14:b3:0b:7a:5e:87:24:a2:68:c2:eb:f9:c9:66:
         c1:ac:ee:b4:c9:0f:30:f1:a6:b8:60:63:00:1c:4c:4a:3b:7b:
         78:1c:02:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:40 2024 by rpki-client on console-ams.rpki-client.org