Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/3130332e3138352e38322e302f32332d3234203d3e20313339343536.roa
File:                     3130332e3138352e38322e302f32332d3234203d3e20313339343536.roa (raw, json)
Hash identifier:          gHQNGYjv0YmOXOORs4os9NkuNX3Ch7Mp8ZY8/EnXyr8=
Subject key identifier:   19:6A:21:E8:D5:2F:50:C7:2B:8D:0B:A9:E0:22:35:D2:7E:8E:92:E9
Certificate issuer:       /CN=B392381083372148D0977D0066CFF38FD5A32CDB
Certificate serial:       3E2EF13C093F604E7CBD8E2DD60D5B28A84C1CCA
Authority key identifier: B3:92:38:10:83:37:21:48:D0:97:7D:00:66:CF:F3:8F:D5:A3:2C:DB
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B392381083372148D0977D0066CFF38FD5A32CDB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/3130332e3138352e38322e302f32332d3234203d3e20313339343536.roa
Signing time:             Tue 05 Apr 2022 03:48:56 +0000
ROA not before:           Tue 05 Apr 2022 03:43:56 +0000
ROA not after:            Tue 04 Apr 2023 03:48:56 +0000
asID:                     139456
IP address blocks:        103.185.82.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:2e:f1:3c:09:3f:60:4e:7c:bd:8e:2d:d6:0d:5b:28:a8:4c:1c:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B392381083372148D0977D0066CFF38FD5A32CDB
        Validity
            Not Before: Apr  5 03:43:56 2022 GMT
            Not After : Apr  4 03:48:56 2023 GMT
        Subject: CN=196A21E8D52F50C72B8D0BA9E02235D27E8E92E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c7:aa:c0:05:42:c6:a9:42:8e:4e:9e:99:d7:
                    79:fa:a7:e4:58:e7:92:8d:05:e1:bd:5f:22:f1:8c:
                    cb:c6:71:27:43:88:05:9a:c4:2d:80:99:44:ef:dc:
                    dd:4d:15:6e:d3:b0:20:7a:4f:fd:d2:61:4e:95:f0:
                    4e:74:30:be:f1:da:a8:9e:54:f6:69:5c:b9:37:17:
                    8d:7e:51:75:cc:73:92:1d:bd:28:dc:64:93:13:19:
                    00:7e:2b:56:89:d0:bc:2c:2f:6d:97:34:92:b9:d3:
                    c1:27:65:3d:04:97:f1:b4:62:fa:d8:e0:86:6d:56:
                    92:b6:ff:e1:59:1c:c2:77:1a:dc:cd:a2:b6:c6:71:
                    8e:d0:d5:57:58:6d:fa:cd:08:98:75:f8:ea:b0:93:
                    42:9d:66:c2:f4:4e:2c:6e:51:b7:18:af:47:a4:ed:
                    09:4b:89:a5:4b:16:f0:f4:73:26:c2:fc:c7:e7:00:
                    37:f1:5e:50:f2:ee:fc:f9:f1:08:ea:dd:f5:a2:33:
                    70:c0:07:7b:6c:18:11:25:9c:70:bc:02:79:9c:25:
                    ec:a9:1f:d0:f6:91:d9:b5:27:34:a6:05:c6:dc:7a:
                    e9:ec:02:de:b3:7e:7a:23:8b:98:a2:2e:7a:c2:84:
                    29:73:2d:5b:f0:5b:f5:30:95:14:97:c9:01:d8:f9:
                    33:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:6A:21:E8:D5:2F:50:C7:2B:8D:0B:A9:E0:22:35:D2:7E:8E:92:E9
            X509v3 Authority Key Identifier:
                keyid:B3:92:38:10:83:37:21:48:D0:97:7D:00:66:CF:F3:8F:D5:A3:2C:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/B392381083372148D0977D0066CFF38FD5A32CDB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B392381083372148D0977D0066CFF38FD5A32CDB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5bf2cf03-f9f9-4bca-8c2c-6073280dfea8/0/3130332e3138352e38322e302f32332d3234203d3e20313339343536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.185.82.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a2:c9:db:ab:ea:c4:c7:71:2c:9d:06:b0:7b:a9:c2:f9:01:1c:
         82:ee:35:7f:49:7b:50:8e:a9:e7:2e:98:7e:0d:ae:a5:9c:2b:
         65:22:1b:c4:ca:6a:88:68:24:84:9d:29:d9:85:16:c6:c1:c0:
         de:b7:7c:ba:20:12:7d:5d:2b:a1:a7:c6:2c:69:f6:b4:26:ed:
         60:67:7e:d1:22:8e:fc:81:79:a7:20:f6:c1:94:1a:b0:45:d2:
         e7:22:55:8e:f2:21:48:e1:67:9a:9e:3f:35:b6:05:94:f2:d5:
         fa:53:6e:6f:28:b1:24:ff:0d:ea:8f:d8:cb:7c:42:88:0c:1f:
         6c:38:09:cc:73:4f:d1:15:5c:1c:50:dc:c2:ed:4c:d8:f2:00:
         94:bc:68:2c:ce:44:f2:7a:f3:b3:ab:00:3f:c9:31:2a:e7:ea:
         63:ea:95:af:be:26:77:08:a3:00:c5:5a:f3:a6:ae:fb:df:c7:
         72:24:26:f5:3a:db:42:6d:87:86:65:5a:0b:68:3a:3a:9e:d2:
         b3:44:b7:c6:94:a9:de:a8:87:16:6f:72:06:b1:b5:2d:e5:fa:
         4c:49:53:a8:14:8c:d4:b9:10:91:38:fb:1d:da:80:07:c6:dd:
         a3:00:76:66:c0:06:e8:36:86:56:26:4f:74:41:0b:62:4e:62:
         7a:5b:16:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:07 2024 by rpki-client on console-fra.rpki-client.org