Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/3130332e3138392e302e302f32342d3234203d3e203137393232.roa
File:                     3130332e3138392e302e302f32342d3234203d3e203137393232.roa (raw, json)
Hash identifier:          lQYcVUbU4RV4edBvIkUJGS8gOEZpKdsEqNiolC7+960=
Subject key identifier:   E4:47:AB:E1:C2:B6:4F:F3:6D:2C:14:4F:F7:EB:93:C3:F8:7B:E4:01
Certificate issuer:       /CN=26D5C063BEB580B38F28F3CC16B958634FF7A48B
Certificate serial:       6F1797AA945586D997C29985F6692D872536FE5F
Authority key identifier: 26:D5:C0:63:BE:B5:80:B3:8F:28:F3:CC:16:B9:58:63:4F:F7:A4:8B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26D5C063BEB580B38F28F3CC16B958634FF7A48B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/3130332e3138392e302e302f32342d3234203d3e203137393232.roa
Signing time:             Thu 07 Jul 2022 11:01:51 +0000
ROA not before:           Thu 07 Jul 2022 10:56:51 +0000
ROA not after:            Thu 06 Jul 2023 11:01:51 +0000
asID:                     17922
IP address blocks:        103.189.0.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:17:97:aa:94:55:86:d9:97:c2:99:85:f6:69:2d:87:25:36:fe:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26D5C063BEB580B38F28F3CC16B958634FF7A48B
        Validity
            Not Before: Jul  7 10:56:51 2022 GMT
            Not After : Jul  6 11:01:51 2023 GMT
        Subject: CN=E447ABE1C2B64FF36D2C144FF7EB93C3F87BE401
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:1b:8d:d6:1f:2d:69:84:c1:d1:7d:39:0c:21:
                    65:5c:b2:48:17:ea:3c:4c:8a:1a:06:35:db:1b:43:
                    6e:cb:c9:3b:ae:55:b6:bd:0f:b3:58:6c:8b:43:8d:
                    7d:2f:e9:22:fd:07:53:aa:af:fd:6f:37:b4:aa:c6:
                    b6:06:bf:3f:a2:cb:e0:21:19:65:00:bb:f9:74:35:
                    80:34:25:bc:03:1e:83:9d:c8:84:a3:67:bb:4f:03:
                    c4:ef:4b:20:9d:12:20:39:29:d0:00:d0:0d:05:01:
                    30:76:e2:e7:2d:f1:65:7e:a0:10:e3:4f:c5:d1:78:
                    83:f3:31:38:a7:35:46:f7:62:f3:22:d0:22:0d:8c:
                    6c:3e:b6:f2:ba:60:f5:d4:1b:e1:48:68:5b:7c:af:
                    fd:e8:69:04:84:f3:34:9e:d8:6f:e5:8f:88:32:36:
                    03:d5:8e:88:a0:93:25:7f:5b:98:a3:0b:c2:0e:18:
                    ab:2c:96:a6:c9:6d:b2:3c:e7:2c:1b:1d:c8:61:29:
                    7d:8c:0e:11:d9:87:e6:3a:b9:1f:95:e0:c6:bc:9d:
                    2b:91:c7:ae:39:79:b6:da:b4:81:08:d2:8f:61:a7:
                    a0:10:52:b9:5b:de:9e:e9:28:99:30:77:db:ed:01:
                    19:48:ac:d3:58:68:55:25:3b:a0:d1:7a:96:57:ad:
                    10:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:47:AB:E1:C2:B6:4F:F3:6D:2C:14:4F:F7:EB:93:C3:F8:7B:E4:01
            X509v3 Authority Key Identifier:
                keyid:26:D5:C0:63:BE:B5:80:B3:8F:28:F3:CC:16:B9:58:63:4F:F7:A4:8B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/26D5C063BEB580B38F28F3CC16B958634FF7A48B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26D5C063BEB580B38F28F3CC16B958634FF7A48B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/59a74ac9-8fa5-439b-8f21-08f284677aa3/0/3130332e3138392e302e302f32342d3234203d3e203137393232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.189.0.0/24

    Signature Algorithm: sha256WithRSAEncryption
         36:71:64:d1:1b:fc:b9:29:f9:92:0b:87:c3:ce:24:64:77:04:
         ec:27:2e:4b:98:cb:31:b4:bc:f6:51:40:5d:88:09:22:05:ab:
         e4:67:2c:bd:a5:fe:4f:0b:a9:a0:db:c8:c3:61:ea:3f:8f:5e:
         41:30:63:1b:45:0d:ae:6a:4b:82:79:58:4b:3b:62:83:ac:83:
         2a:c6:42:9d:9a:8b:d0:85:5f:00:2b:72:03:15:0c:e3:42:c3:
         66:de:92:87:05:28:f5:af:8b:56:d2:80:12:d2:dc:12:9c:44:
         01:55:cf:cc:99:fa:8e:d6:ce:85:0e:db:99:4b:9e:a0:18:12:
         87:f4:c6:1c:6f:48:dc:ad:3b:2b:15:18:fc:0a:ec:73:1c:0c:
         af:d1:b1:86:18:eb:58:0b:b0:3d:c2:e1:89:89:fe:61:98:c7:
         a0:85:c0:a9:c4:eb:e5:e6:29:fc:f2:28:69:1f:8d:79:d4:cc:
         fd:ed:73:b3:79:cb:0a:18:ad:ef:1e:10:69:62:b9:2f:df:33:
         4c:85:82:63:b8:1d:c6:e4:c1:20:a0:5a:dd:e7:07:30:84:f8:
         c4:d3:8b:56:2b:bd:5f:74:10:91:f7:39:b5:f1:cd:aa:9e:70:
         09:e0:85:15:36:f2:26:28:b5:d1:44:d6:f4:c6:7b:2e:e2:29:
         b2:e8:e9:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:40 2024 by rpki-client on console-ams.rpki-client.org