Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6c784409-3f82-44c1-a14e-681df51b0234/0/3130332e3134392e3232382e302f32332d3233203d3e20313339393535.roa
File:                     3130332e3134392e3232382e302f32332d3233203d3e20313339393535.roa (raw, json)
Hash identifier:          uQM7HMnncV86TkpmYuSqPD35aEI+Ct6ZNWRHk125bEs=
Subject key identifier:   3F:F0:CB:C7:8A:65:9E:00:15:4D:6A:A5:90:36:AD:B0:2A:00:8E:B6
Certificate issuer:       /CN=26ED4619223C6097B33621E429F958020B6F4624
Certificate serial:       53378DB9BAA504A8A66A4E9DFABFB322D58598D0
Authority key identifier: 26:ED:46:19:22:3C:60:97:B3:36:21:E4:29:F9:58:02:0B:6F:46:24
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26ED4619223C6097B33621E429F958020B6F4624.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6c784409-3f82-44c1-a14e-681df51b0234/0/3130332e3134392e3232382e302f32332d3233203d3e20313339393535.roa
Signing time:             Fri 02 Dec 2022 13:42:44 +0000
ROA not before:           Fri 02 Dec 2022 13:37:44 +0000
ROA not after:            Fri 01 Dec 2023 13:42:44 +0000
asID:                     139955
IP address blocks:        103.149.228.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:37:8d:b9:ba:a5:04:a8:a6:6a:4e:9d:fa:bf:b3:22:d5:85:98:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26ED4619223C6097B33621E429F958020B6F4624
        Validity
            Not Before: Dec  2 13:37:44 2022 GMT
            Not After : Dec  1 13:42:44 2023 GMT
        Subject: CN=3FF0CBC78A659E00154D6AA59036ADB02A008EB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:03:0a:57:5b:14:29:70:78:d4:fc:f0:4e:25:
                    a4:60:4e:54:c9:48:bf:9d:0c:9a:7b:87:e8:5d:2c:
                    3e:ea:a9:c7:9e:5c:db:be:f2:11:c0:13:cb:a1:d6:
                    1f:6c:66:e9:78:58:cb:dc:09:f7:e7:3e:59:4d:36:
                    cf:08:4d:b6:11:a9:f4:bb:af:66:0f:5c:3d:ee:8b:
                    af:f2:c9:ae:46:ff:81:bf:01:b1:f5:7c:43:21:df:
                    23:d7:d0:0d:74:ac:9f:69:bf:b8:c9:75:8c:95:03:
                    5c:a3:7f:97:ad:bc:b7:e9:3c:41:cb:b0:d6:26:81:
                    83:e3:d7:0c:f9:09:79:62:dc:a5:fd:6c:b1:e5:fb:
                    ad:1a:b4:c5:03:b8:fe:b2:55:c8:7a:cf:f4:37:c3:
                    ea:c9:cd:07:96:21:79:b0:48:a4:fd:eb:ad:0b:45:
                    19:d6:17:34:3a:f7:20:da:34:5d:54:fd:ae:f6:f7:
                    46:70:dc:86:e1:0a:9f:3e:c8:27:e7:8f:a4:58:92:
                    1c:32:ba:c9:ff:af:bf:ce:27:cc:f3:9c:16:a0:a2:
                    59:58:bf:d1:ea:8b:db:f9:b8:e7:71:10:c9:6a:38:
                    7a:9c:a4:d9:82:43:06:bc:aa:bb:05:56:29:01:da:
                    c1:1b:bb:b0:d3:bc:50:65:a9:e4:10:d2:24:ae:dc:
                    b2:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:F0:CB:C7:8A:65:9E:00:15:4D:6A:A5:90:36:AD:B0:2A:00:8E:B6
            X509v3 Authority Key Identifier:
                keyid:26:ED:46:19:22:3C:60:97:B3:36:21:E4:29:F9:58:02:0B:6F:46:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6c784409-3f82-44c1-a14e-681df51b0234/0/26ED4619223C6097B33621E429F958020B6F4624.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26ED4619223C6097B33621E429F958020B6F4624.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6c784409-3f82-44c1-a14e-681df51b0234/0/3130332e3134392e3232382e302f32332d3233203d3e20313339393535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.149.228.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9f:b3:b0:b2:c6:1e:c1:50:be:32:c2:ea:b4:7c:b2:7b:bc:69:
         7b:29:cf:b0:ee:4d:07:f1:37:02:03:a5:3c:fb:48:a3:1f:2c:
         f1:21:a4:1a:d7:10:dc:52:64:34:7a:bc:45:cc:ea:fd:fe:6b:
         75:51:5c:03:cf:1e:7e:3a:ad:94:2c:47:24:7a:38:55:20:f0:
         46:3d:a7:ee:59:0c:03:a4:9c:18:32:87:a9:46:6a:d4:cf:f7:
         c3:c5:cd:38:3b:27:5e:5f:c8:e9:77:de:82:c9:49:9c:e2:34:
         bf:f2:b1:72:86:cc:c8:a9:58:9e:0e:9a:3b:a6:8d:72:ea:ca:
         db:85:18:42:18:0b:8b:8c:63:45:7e:5d:e5:a0:ab:49:ff:82:
         2c:e1:48:07:15:21:5b:ee:23:7b:97:43:e0:8e:8a:98:55:54:
         39:69:9d:f7:5e:2e:c6:42:ef:55:f5:2b:44:f0:ad:99:2c:9d:
         c0:7f:92:a6:54:e4:33:eb:8e:76:9d:d2:e1:36:31:2d:cf:27:
         9f:ce:18:ba:18:c1:70:80:53:5d:bf:be:2a:99:41:34:74:c1:
         76:b7:e1:e2:64:a8:25:47:32:83:5f:b8:bf:a8:69:93:a7:07:
         10:81:7f:a5:4e:0f:a8:07:43:cb:72:d5:55:a5:99:b8:35:30:
         2b:88:de:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:07 2024 by rpki-client on console-fra.rpki-client.org