Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/3130332e3132342e3133392e302f32342d3234203d3e20313431363733.roa
File:                     3130332e3132342e3133392e302f32342d3234203d3e20313431363733.roa (raw, json)
Hash identifier:          RvUcfhXdwL7GD2mjYryGL26fUiE51AX8GSm6Q4HeYrc=
Subject key identifier:   36:AA:91:0C:43:49:8C:D8:B6:D6:87:AC:7D:AB:CD:2E:A0:B3:59:C7
Certificate issuer:       /CN=7D4F0D007B60134996AC3198B9E5B71EAF70E733
Certificate serial:       69E6A0CF9BB52F4C330E3121DB93BDE93D2EDB80
Authority key identifier: 7D:4F:0D:00:7B:60:13:49:96:AC:31:98:B9:E5:B7:1E:AF:70:E7:33
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D4F0D007B60134996AC3198B9E5B71EAF70E733.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/3130332e3132342e3133392e302f32342d3234203d3e20313431363733.roa
Signing time:             Sun 20 Jun 2021 13:24:17 +0000
ROA not before:           Sun 20 Jun 2021 13:19:17 +0000
ROA not after:            Mon 20 Jun 2022 13:24:17 +0000
asID:                     141673
IP address blocks:        103.124.139.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:e6:a0:cf:9b:b5:2f:4c:33:0e:31:21:db:93:bd:e9:3d:2e:db:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D4F0D007B60134996AC3198B9E5B71EAF70E733
        Validity
            Not Before: Jun 20 13:19:17 2021 GMT
            Not After : Jun 20 13:24:17 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:a9:6f:f8:6e:6c:c4:cc:2a:3c:e7:ed:bf:df:
                    6f:49:25:91:cc:b1:a7:85:9f:46:dd:7c:9a:e7:6a:
                    a5:77:a2:57:35:06:bf:e1:7f:37:16:4f:4c:87:4b:
                    22:ee:31:77:40:ee:36:5c:a6:6f:12:1a:40:80:dd:
                    4e:0f:cf:d1:c3:80:fe:2e:ef:0f:5c:6a:f7:ca:7a:
                    00:4b:e0:90:d1:bf:42:62:8f:ce:61:ef:9d:d1:f6:
                    d6:1f:87:75:7e:eb:6d:78:0a:72:1c:a0:9e:e3:cb:
                    b1:95:ce:88:a6:70:4c:42:e5:db:42:99:e0:e5:e3:
                    cf:7c:e9:01:58:c0:9b:61:d6:6b:2a:fe:ec:d5:db:
                    7f:c5:f8:4e:aa:af:45:7f:48:14:36:bc:a9:3b:6a:
                    13:ee:a4:a9:96:d4:0b:35:2b:53:89:87:18:98:24:
                    43:b9:b0:ef:d8:a5:24:ae:dd:8f:3d:aa:c8:b7:e7:
                    2a:17:17:ef:60:fe:38:31:eb:a5:1d:4d:33:ca:ea:
                    fe:86:2f:52:ac:43:cd:68:8f:58:91:9d:88:1c:57:
                    6f:55:75:b2:97:06:a2:2a:40:7c:40:c9:b2:3a:bf:
                    b4:47:b8:a1:05:ba:53:78:94:03:fe:c6:5a:0f:89:
                    f7:56:38:e3:4e:ed:4d:29:f3:26:52:ce:8b:66:b7:
                    25:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:AA:91:0C:43:49:8C:D8:B6:D6:87:AC:7D:AB:CD:2E:A0:B3:59:C7
            X509v3 Authority Key Identifier:
                keyid:7D:4F:0D:00:7B:60:13:49:96:AC:31:98:B9:E5:B7:1E:AF:70:E7:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/7D4F0D007B60134996AC3198B9E5B71EAF70E733.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/7D4F0D007B60134996AC3198B9E5B71EAF70E733.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5aba4e59-fb31-41b5-88e7-0b2ced1f201c/0/3130332e3132342e3133392e302f32342d3234203d3e20313431363733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.124.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c4:9a:e1:b4:35:39:2d:0a:89:07:58:5c:dd:bb:05:bd:b1:ef:
         bf:b0:1a:6f:75:81:1e:e0:9d:15:db:1f:49:27:75:a6:8b:b8:
         c6:87:5c:ab:2a:d0:e6:b2:47:d2:02:9b:57:85:49:cc:d1:4d:
         16:7f:eb:b5:03:63:5d:fa:29:19:e1:81:aa:ea:30:07:b4:b0:
         a6:82:3c:75:02:27:4c:c6:b9:6d:ed:c9:55:79:f7:9d:dd:d2:
         76:96:d4:f5:e7:6f:67:8b:13:4b:66:50:42:7e:7a:63:bf:16:
         5b:50:9c:1c:b8:3e:7e:28:80:29:c9:5d:ff:a3:84:0d:fd:69:
         b1:ef:d2:76:65:36:b8:dd:03:7e:8a:90:6f:d3:b4:74:3a:42:
         3c:1c:42:8f:d5:18:c8:24:bc:9f:bb:9d:ad:50:0c:f1:ad:79:
         5b:40:ff:c5:1d:da:5e:e4:b9:a7:ba:97:3a:fa:06:df:ed:40:
         a9:83:02:f4:06:56:e8:7d:d9:5a:82:20:d3:55:20:37:bf:56:
         97:45:2f:53:b3:26:89:6c:fe:7c:25:6b:ff:bd:8e:44:34:c5:
         70:03:12:dc:37:4e:80:af:76:27:ad:f2:48:06:af:5c:55:5c:
         ff:9d:0d:e1:b4:1b:10:5a:b7:60:11:99:34:4f:9f:58:18:85:
         ac:3b:f8:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:07 2024 by rpki-client on console-fra.rpki-client.org