Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/3130332e38322e3132362e302f32342d3234203d3e20313336303537.roa
File:                     3130332e38322e3132362e302f32342d3234203d3e20313336303537.roa (raw, json)
Hash identifier:          St2F99ilreBArDKczX6HebvTVb/4zlDF2vjK4LDBpxg=
Subject key identifier:   95:41:C4:96:35:33:85:4F:52:C4:88:4E:EF:C9:37:09:C2:27:5B:F6
Certificate issuer:       /CN=90173425DBB7D1DBD164BBA26F4657B17A266A97
Certificate serial:       ED5C58FB3CDC9991AD8C95E6AC9856BEF895E2
Authority key identifier: 90:17:34:25:DB:B7:D1:DB:D1:64:BB:A2:6F:46:57:B1:7A:26:6A:97
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90173425DBB7D1DBD164BBA26F4657B17A266A97.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/3130332e38322e3132362e302f32342d3234203d3e20313336303537.roa
Signing time:             Sun 07 May 2023 14:00:00 +0000
ROA not before:           Sun 07 May 2023 13:55:00 +0000
ROA not after:            Sun 05 May 2024 14:00:00 +0000
asID:                     136057
IP address blocks:        103.82.126.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            ed:5c:58:fb:3c:dc:99:91:ad:8c:95:e6:ac:98:56:be:f8:95:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90173425DBB7D1DBD164BBA26F4657B17A266A97
        Validity
            Not Before: May  7 13:55:00 2023 GMT
            Not After : May  5 14:00:00 2024 GMT
        Subject: CN=9541C4963533854F52C4884EEFC93709C2275BF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:58:89:bb:9d:e3:69:bc:c2:f7:53:41:56:45:
                    00:dd:e3:f1:66:7e:49:09:99:ac:26:62:2d:7d:9a:
                    1f:f9:b3:aa:5a:2d:86:09:bc:1e:95:fc:98:bc:99:
                    98:b8:fa:4b:b6:b0:32:d1:e4:29:0b:87:f6:ff:01:
                    f2:a8:df:2f:85:4c:d6:78:21:38:7d:d0:be:0f:19:
                    07:19:68:2f:05:78:6e:b1:39:4f:1d:a8:19:e8:ff:
                    ea:ff:4d:43:a5:71:b2:c6:09:52:85:21:2f:df:1a:
                    6e:46:b0:24:55:4d:56:24:c0:04:99:c7:42:fa:52:
                    56:28:2e:2f:68:cf:f5:db:96:18:2c:a3:bc:74:62:
                    19:8a:fb:97:b1:d0:c8:e6:05:c1:80:54:73:2c:c4:
                    64:d5:fa:97:e7:0c:57:b4:99:28:53:1d:55:56:8a:
                    54:ce:61:78:e5:c8:40:4d:f0:9a:d3:1b:fa:47:dd:
                    ea:8d:3b:87:5b:13:42:79:fe:2e:ee:a2:65:4c:7c:
                    46:f0:9d:56:d8:e6:12:a5:a4:2a:4c:36:2e:9c:95:
                    ad:d5:12:e4:85:f0:0d:e3:0e:4d:3f:ef:9c:ca:96:
                    b2:c2:58:57:59:74:35:79:f8:ed:67:9b:d9:9c:ff:
                    0a:d5:58:dd:34:7b:6d:63:b6:72:2f:b7:b1:dd:58:
                    8f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:41:C4:96:35:33:85:4F:52:C4:88:4E:EF:C9:37:09:C2:27:5B:F6
            X509v3 Authority Key Identifier:
                keyid:90:17:34:25:DB:B7:D1:DB:D1:64:BB:A2:6F:46:57:B1:7A:26:6A:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/90173425DBB7D1DBD164BBA26F4657B17A266A97.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/90173425DBB7D1DBD164BBA26F4657B17A266A97.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5bd4340b-21c4-4fc7-a259-e2354c53fdd2/0/3130332e38322e3132362e302f32342d3234203d3e20313336303537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.82.126.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:fb:f8:75:95:68:8e:ea:6b:da:c5:0f:86:94:81:0a:27:39:
         47:7f:6e:14:84:3e:6c:92:50:03:d5:0b:40:0b:09:c4:2b:fa:
         8c:ce:89:79:b2:ae:96:db:2f:ae:7c:ba:f4:53:60:e2:ec:31:
         7c:6f:8a:76:92:fa:17:cc:8a:4b:f0:fe:82:70:86:c6:7d:23:
         e8:e7:f4:7c:80:0b:66:7b:fe:d9:96:c4:c1:6a:d9:57:bf:45:
         31:4c:ff:97:56:6f:4e:13:63:09:22:b6:f3:84:e5:a3:56:1a:
         10:58:6b:05:ad:5b:f7:28:44:9c:bf:f4:5c:65:11:47:27:be:
         4a:f7:3d:7c:24:9d:a1:45:98:b8:c4:8c:f4:3e:4b:97:93:f5:
         a1:99:c4:17:00:84:20:60:e7:09:8f:97:7d:12:ad:b6:e6:fa:
         cc:82:d7:52:2c:12:a0:c0:97:61:f4:fa:c0:b3:a3:ce:5e:90:
         43:05:62:c6:07:e0:43:20:f1:ff:18:f7:15:f3:d7:e8:fc:7b:
         e3:fe:43:1f:97:df:dc:f9:bd:f0:6a:d0:e0:39:fc:0e:f5:5a:
         32:a4:bd:58:de:84:b8:95:4e:74:a2:6a:a7:7d:f7:96:ba:fa:
         af:f2:27:ba:6f:2b:55:2c:04:05:7d:85:0f:25:af:29:aa:fa:
         48:1d:64:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:40 2024 by rpki-client on console-ams.rpki-client.org