Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/641e08ef-3ae6-4b90-b477-0e9140d04380/0/3130332e3138312e3234362e302f32332d3233203d3e20313439333935.roa
File:                     3130332e3138312e3234362e302f32332d3233203d3e20313439333935.roa (raw, json)
Hash identifier:          5quBd//kQFnak8oOWOiEKET2PYE+CQho8wOVgye9Sjw=
Subject key identifier:   C1:CB:2C:78:9F:2D:63:5D:A8:A8:62:54:7A:34:5B:AC:9A:C5:63:1C
Certificate issuer:       /CN=E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF
Certificate serial:       1589B833944DFCEE0D104E789DC02935A5A41AB1
Authority key identifier: E9:31:43:07:AD:14:30:2D:F4:0D:E1:A8:ED:0B:5D:48:D6:F7:3F:AF
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/641e08ef-3ae6-4b90-b477-0e9140d04380/0/3130332e3138312e3234362e302f32332d3233203d3e20313439333935.roa
Signing time:             Fri 09 Dec 2022 09:57:53 +0000
ROA not before:           Fri 09 Dec 2022 09:52:53 +0000
ROA not after:            Fri 08 Dec 2023 09:57:53 +0000
asID:                     149395
IP address blocks:        103.181.246.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:89:b8:33:94:4d:fc:ee:0d:10:4e:78:9d:c0:29:35:a5:a4:1a:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF
        Validity
            Not Before: Dec  9 09:52:53 2022 GMT
            Not After : Dec  8 09:57:53 2023 GMT
        Subject: CN=C1CB2C789F2D635DA8A862547A345BAC9AC5631C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:5d:db:0f:e4:a5:bd:f1:1f:30:43:61:57:f9:
                    98:b3:46:76:73:14:25:32:3c:bb:fc:c0:e6:8e:cd:
                    43:66:92:c4:bc:81:f3:4c:86:5d:f3:3e:9e:b5:8e:
                    ae:cd:6e:41:e7:f8:31:ec:a1:b1:5f:70:dd:3c:ed:
                    bc:9b:45:20:a2:6d:bf:e9:ff:a6:2f:08:0b:ee:e6:
                    d8:f0:20:08:55:a3:81:a0:ec:9d:e3:f2:e2:e6:4b:
                    93:6e:1a:18:f2:c3:e4:6d:ad:96:6b:6c:ce:7f:ef:
                    b8:05:36:16:87:9a:fb:8f:c5:cc:41:fb:f5:bf:75:
                    3e:a2:34:3b:eb:45:77:df:f3:08:de:6d:76:6b:59:
                    27:c8:a6:66:bc:f3:b3:79:5a:87:4a:94:7f:75:2b:
                    d8:a9:e7:b8:c4:d6:a4:e7:06:3f:0e:6b:d1:2b:54:
                    b8:e7:67:5e:59:86:27:70:e5:04:bf:98:e3:2f:7f:
                    9c:41:d1:74:5e:36:eb:15:3f:f4:43:72:c3:33:9a:
                    46:32:7d:f3:42:29:e1:10:50:c7:2e:2c:0e:ea:ce:
                    05:57:c0:4c:66:74:27:25:62:0a:55:62:b3:b2:aa:
                    d8:5d:39:67:85:fc:e9:a9:a4:c2:75:fd:e4:11:09:
                    e4:fa:89:fb:61:48:6c:52:51:98:0e:05:56:90:a1:
                    2e:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:CB:2C:78:9F:2D:63:5D:A8:A8:62:54:7A:34:5B:AC:9A:C5:63:1C
            X509v3 Authority Key Identifier:
                keyid:E9:31:43:07:AD:14:30:2D:F4:0D:E1:A8:ED:0B:5D:48:D6:F7:3F:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/641e08ef-3ae6-4b90-b477-0e9140d04380/0/E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E9314307AD14302DF40DE1A8ED0B5D48D6F73FAF.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/641e08ef-3ae6-4b90-b477-0e9140d04380/0/3130332e3138312e3234362e302f32332d3233203d3e20313439333935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.181.246.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9c:bd:4a:ba:ae:74:b4:62:4a:60:d7:2d:6c:a4:fc:87:63:0b:
         2a:52:26:6e:43:d8:7f:59:00:80:2b:c8:48:4c:87:27:47:bc:
         78:83:97:a8:95:0a:57:b3:f9:a9:d7:ef:2e:7b:a5:2f:e3:06:
         89:07:31:3d:68:01:9e:c6:28:eb:38:2b:63:58:a4:cd:fd:67:
         55:94:4b:ea:3a:71:74:51:37:a3:19:cb:7b:01:0d:8b:d5:42:
         18:d2:4d:9d:75:5e:3f:5f:0a:cc:df:3b:24:00:b0:04:42:29:
         7e:a5:ba:d8:3a:61:c2:c6:24:55:56:65:c8:94:68:88:60:41:
         82:1e:a1:21:9c:09:23:ef:88:13:da:e7:b5:60:b0:e6:dd:1f:
         33:5b:80:f4:8b:2e:91:86:ab:87:dc:b9:76:1b:61:9b:b1:6c:
         a7:ce:04:fc:6d:c9:89:15:d2:95:c1:c7:7b:1c:45:99:53:b8:
         3d:03:43:dd:51:b5:5c:e1:75:e8:90:35:2f:36:fb:51:a1:da:
         40:73:8c:51:a2:b3:7c:8b:e0:d7:4c:a2:9a:dd:51:8e:4e:f8:
         04:82:8c:c6:00:53:24:91:af:20:4b:4e:c6:91:9e:f6:2d:18:
         fb:7f:d5:6d:dc:50:52:19:43:5f:a3:91:fe:a3:dd:2b:61:5c:
         d1:40:a4:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:40 2024 by rpki-client on console-ams.rpki-client.org