Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3130332e38302e39342e302f32332d3233203d3e20313439373630.roa
File:                     3130332e38302e39342e302f32332d3233203d3e20313439373630.roa (raw, json)
Hash identifier:          liFkTJlSyM9AOtvuVrrbCA2Afp6BktkSQB2bIUIhg3I=
Subject key identifier:   CD:6D:31:8F:2F:3D:68:E6:0C:1D:90:4E:76:99:B6:62:3C:A3:3B:72
Certificate issuer:       /CN=F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511
Certificate serial:       48519275D31BA888DC7FFF30EC6C156E3ED959FB
Authority key identifier: F3:99:A1:A0:C1:8F:E8:DB:DA:23:CE:21:75:E0:CB:23:D6:7D:65:11
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3130332e38302e39342e302f32332d3233203d3e20313439373630.roa
Signing time:             Thu 07 Jul 2022 05:16:33 +0000
ROA not before:           Thu 07 Jul 2022 05:11:33 +0000
ROA not after:            Thu 06 Jul 2023 05:16:33 +0000
asID:                     149760
IP address blocks:        103.80.94.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:51:92:75:d3:1b:a8:88:dc:7f:ff:30:ec:6c:15:6e:3e:d9:59:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511
        Validity
            Not Before: Jul  7 05:11:33 2022 GMT
            Not After : Jul  6 05:16:33 2023 GMT
        Subject: CN=CD6D318F2F3D68E60C1D904E7699B6623CA33B72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:58:d7:02:b7:cd:f3:5a:0e:04:6a:c2:59:02:
                    08:ed:ca:91:8a:98:84:13:d2:37:89:b9:24:72:3d:
                    30:2f:aa:32:88:d7:b2:be:6c:55:d9:68:2d:69:29:
                    4d:36:7b:2f:07:19:83:0d:52:98:84:e7:b3:87:6d:
                    89:37:3b:3c:55:d1:69:8e:df:c8:c0:66:c8:7b:42:
                    83:52:c0:35:36:3f:1d:c6:0f:a1:13:9f:90:a7:eb:
                    f1:c7:51:3b:55:75:4a:43:dd:bb:68:a9:e7:dc:c3:
                    67:62:f6:74:18:06:81:18:cd:d6:0a:80:32:2e:69:
                    d1:f4:a7:ce:c0:82:8a:b1:2b:39:b3:46:da:1d:c5:
                    3e:63:50:cb:40:5d:85:e0:e8:03:34:40:b4:79:7b:
                    26:0a:b9:f8:d0:45:d5:a2:9b:5c:11:5a:96:c0:ec:
                    d1:55:c0:ac:f2:5e:f3:e4:b3:c3:55:b9:46:f2:88:
                    f9:e4:10:fb:0c:5d:c4:09:3b:36:83:46:fa:2b:92:
                    0a:8f:de:0a:7f:78:cc:82:e4:14:4b:b9:1e:98:ba:
                    72:77:14:73:f2:8f:01:d1:83:2e:9b:19:bc:0b:bc:
                    41:b2:9f:40:85:99:40:36:5f:b8:64:d2:ec:82:e6:
                    7f:cb:5a:d7:d0:48:07:3a:8d:71:94:9b:a5:93:ca:
                    28:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:6D:31:8F:2F:3D:68:E6:0C:1D:90:4E:76:99:B6:62:3C:A3:3B:72
            X509v3 Authority Key Identifier:
                keyid:F3:99:A1:A0:C1:8F:E8:DB:DA:23:CE:21:75:E0:CB:23:D6:7D:65:11

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F399A1A0C18FE8DBDA23CE2175E0CB23D67D6511.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/635f7a2f-725e-4399-869a-4b1fcf2c6a0c/0/3130332e38302e39342e302f32332d3233203d3e20313439373630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.80.94.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2e:46:1c:58:96:5d:ee:e9:a0:25:71:04:97:a8:42:a2:29:f4:
         d9:e5:96:5b:c0:df:9d:b8:4d:bf:71:03:34:b0:13:27:ac:17:
         ca:05:bc:46:01:9a:05:25:93:9d:9a:ab:c9:29:25:fc:27:42:
         46:9d:ed:5e:a7:33:ef:72:7d:e8:d0:c5:55:8b:25:ca:47:13:
         84:29:10:32:6c:71:57:02:c7:22:3c:2a:36:31:e0:9b:de:6d:
         84:ec:91:18:78:af:0a:d1:22:f6:1b:58:3d:f2:55:61:e7:4d:
         01:25:da:77:25:aa:e2:1f:74:5c:88:8b:79:87:81:96:35:ca:
         b2:49:3b:41:cd:55:4d:33:d7:0a:55:06:7d:53:b1:bc:50:98:
         38:98:dd:8c:48:f1:bf:4f:4e:a6:32:51:3c:87:4d:8f:8c:1b:
         10:3c:dc:7e:a8:77:88:7d:64:9c:b0:4a:52:69:50:6f:a7:8e:
         43:64:a2:25:6c:eb:b1:b2:3a:3d:de:76:b0:8f:9c:1a:a4:ab:
         c5:8c:95:79:60:bf:24:23:a2:8a:f2:45:19:40:7b:dd:7a:fb:
         8f:15:bc:32:5f:d0:88:34:bc:21:8c:53:e5:2f:ce:05:2d:17:
         9a:e7:ca:87:d7:0f:89:ce:2b:f8:12:7b:eb:e7:ad:64:8d:f4:
         4e:46:9c:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:07 2024 by rpki-client on console-fra.rpki-client.org