Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6c784409-3f82-44c1-a14e-681df51b0234/0/3130332e3134392e3232382e302f32332d3234203d3e20313339393535.roa
File:                     3130332e3134392e3232382e302f32332d3234203d3e20313339393535.roa (raw, json)
Hash identifier:          votUGXAOkqXEh1uf3CrAmDSk6SiDuWtjhK7qvOJaCUw=
Subject key identifier:   A6:05:3A:BD:EA:E8:E5:DD:74:66:CF:88:2A:A4:EF:96:0E:65:06:90
Certificate issuer:       /CN=26ED4619223C6097B33621E429F958020B6F4624
Certificate serial:       7857CDA5474A694FB7270C78EB5FABA7C4F926FB
Authority key identifier: 26:ED:46:19:22:3C:60:97:B3:36:21:E4:29:F9:58:02:0B:6F:46:24
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26ED4619223C6097B33621E429F958020B6F4624.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6c784409-3f82-44c1-a14e-681df51b0234/0/3130332e3134392e3232382e302f32332d3234203d3e20313339393535.roa
Signing time:             Sun 11 Dec 2022 10:25:37 +0000
ROA not before:           Sun 11 Dec 2022 10:20:37 +0000
ROA not after:            Sun 10 Dec 2023 10:25:37 +0000
asID:                     139955
IP address blocks:        103.149.228.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:57:cd:a5:47:4a:69:4f:b7:27:0c:78:eb:5f:ab:a7:c4:f9:26:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26ED4619223C6097B33621E429F958020B6F4624
        Validity
            Not Before: Dec 11 10:20:37 2022 GMT
            Not After : Dec 10 10:25:37 2023 GMT
        Subject: CN=A6053ABDEAE8E5DD7466CF882AA4EF960E650690
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:56:8a:0e:1b:5c:d5:8b:fc:11:9c:98:74:3d:
                    d0:30:8c:73:d9:fe:f1:e6:96:55:f0:8b:cd:fd:d4:
                    ec:6f:67:bd:7a:1f:6d:39:39:a2:a2:74:64:ff:ba:
                    58:df:1e:0c:81:82:5c:82:2d:0c:ad:2c:c1:bf:32:
                    2b:55:bd:2f:3d:01:2a:f1:3d:64:87:46:e1:3a:70:
                    be:ff:59:89:3f:77:8e:fa:e5:f5:17:92:d5:70:7f:
                    4e:a3:b0:ac:86:7f:83:5f:04:d1:b4:72:2e:e5:9e:
                    04:fe:4e:81:f9:db:d9:40:4c:69:b0:02:8d:a5:f9:
                    c3:df:ab:6c:0c:ca:17:ce:5f:95:f9:67:65:c1:23:
                    75:eb:4a:3f:27:c9:d7:11:58:c3:a1:88:d5:11:d1:
                    ea:2e:84:92:56:bc:36:2e:09:26:d6:1e:be:d6:5b:
                    75:79:6e:e8:88:23:8a:36:f7:75:04:b1:2f:fe:08:
                    40:58:30:3a:18:ad:e4:eb:87:f8:f0:38:41:5a:fa:
                    1e:06:6b:07:a1:6a:8f:6b:f9:28:35:3f:83:a6:19:
                    02:41:26:f8:92:8a:ca:c9:64:0c:4b:f9:1b:11:4c:
                    0c:a9:00:b7:b9:5b:0a:dd:c2:2a:6c:6f:cb:13:1b:
                    63:dd:1f:8e:e5:d0:7e:da:28:b7:9e:4a:9f:70:94:
                    1d:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:05:3A:BD:EA:E8:E5:DD:74:66:CF:88:2A:A4:EF:96:0E:65:06:90
            X509v3 Authority Key Identifier:
                keyid:26:ED:46:19:22:3C:60:97:B3:36:21:E4:29:F9:58:02:0B:6F:46:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6c784409-3f82-44c1-a14e-681df51b0234/0/26ED4619223C6097B33621E429F958020B6F4624.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26ED4619223C6097B33621E429F958020B6F4624.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6c784409-3f82-44c1-a14e-681df51b0234/0/3130332e3134392e3232382e302f32332d3234203d3e20313339393535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.149.228.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8a:56:01:1c:80:f8:68:da:f2:a3:57:a4:43:f5:08:eb:f6:4d:
         ee:e4:94:0b:cf:6f:b3:f1:52:d3:6b:ff:7a:c7:9c:19:2c:93:
         69:98:5e:16:68:c2:33:6f:ab:fa:3b:1d:e8:e7:d3:08:c8:bb:
         1b:f8:24:04:23:6f:c3:42:12:76:10:26:91:e3:d1:49:8d:c2:
         89:b4:07:cc:d2:8e:da:6c:ee:61:ae:96:84:be:22:1c:02:5b:
         01:08:f8:1d:f9:32:44:12:c0:43:d9:1a:4d:38:0a:77:be:7b:
         74:8f:64:1d:40:46:7b:14:82:9a:f5:a8:0e:01:e7:be:fa:e1:
         4a:d9:dd:ff:07:ff:57:e7:4e:59:0c:49:77:c8:9f:e3:30:65:
         eb:20:d6:1b:70:64:fa:71:3b:7b:97:ad:f3:36:74:4e:bd:5e:
         fe:ef:e3:c0:c2:35:b0:75:9a:97:01:80:04:f2:27:7a:4e:6c:
         57:75:11:c1:d8:4a:a9:bc:8a:ea:89:55:f9:42:74:bf:6b:1d:
         4d:a2:f5:ab:15:5e:37:45:e4:8d:62:83:6c:50:39:da:17:91:
         a6:be:6f:f3:d2:9d:ac:5d:74:64:10:8e:61:81:4a:31:2b:25:
         ae:44:ab:44:8a:41:f0:aa:35:7b:eb:2c:0a:b6:2b:63:40:30:
         b8:bf:16:9e
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUeFfNpUdKaU+3Jwx461+rp8T5JvswDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjZFRDQ2MTkyMjNDNjA5N0IzMzYyMUU0MjlGOTU4MDIw
QjZGNDYyNDAeFw0yMjEyMTExMDIwMzdaFw0yMzEyMTAxMDI1MzdaMDMxMTAvBgNV
BAMTKEE2MDUzQUJERUFFOEU1REQ3NDY2Q0Y4ODJBQTRFRjk2MEU2NTA2OTAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkVooOG1zVi/wRnJh0PdAwjHPZ
/vHmllXwi8391OxvZ716H205OaKidGT/uljfHgyBglyCLQytLMG/MitVvS89ASrx
PWSHRuE6cL7/WYk/d4765fUXktVwf06jsKyGf4NfBNG0ci7lngT+ToH529lATGmw
Ao2l+cPfq2wMyhfOX5X5Z2XBI3XrSj8nydcRWMOhiNUR0eouhJJWvDYuCSbWHr7W
W3V5buiII4o293UEsS/+CEBYMDoYreTrh/jwOEFa+h4Gawehao9r+Sg1P4OmGQJB
JviSisrJZAxL+RsRTAypALe5Wwrdwipsb8sTG2PdH47l0H7aKLeeSp9wlB05AgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUpgU6vero5d10Zs+IKqTvlg5lBpAwHwYDVR0j
BBgwFoAUJu1GGSI8YJezNiHkKflYAgtvRiQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby82
Yzc4NDQwOS0zZjgyLTQ0YzEtYTE0ZS02ODFkZjUxYjAyMzQvMC8yNkVENDYxOTIy
M0M2MDk3QjMzNjIxRTQyOUY5NTgwMjBCNkY0NjI0LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMjZFRDQ2MTkyMjNDNjA5N0IzMzYyMUU0MjlGOTU4MDIwQjZG
NDYyNC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzZjNzg0NDA5LTNmODItNDRjMS1h
MTRlLTY4MWRmNTFiMDIzNC8wLzMxMzAzMzJlMzEzNDM5MmUzMjMyMzgyZTMwMmYz
MjMzMmQzMjM0MjAzZDNlMjAzMTMzMzkzOTM1MzUucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAFnleQwDQYJ
KoZIhvcNAQELBQADggEBAIpWARyA+Gja8qNXpEP1COv2Te7klAvPb7PxUtNr/3rH
nBksk2mYXhZowjNvq/o7Hejn0wjIuxv4JAQjb8NCEnYQJpHj0UmNwom0B8zSjtps
7mGuloS+IhwCWwEI+B35MkQSwEPZGk04Cne+e3SPZB1ARnsUgpr1qA4B57764UrZ
3f8H/1fnTlkMSXfIn+MwZesg1htwZPpxO3uXrfM2dE69Xv7v48DCNbB1mpcBgATy
J3pObFd1EcHYSqm8iuqJVflCdL9rHU2i9asVXjdF5I1ig2xQOdoXkaa+b/PSnaxd
dGQQjmGBSjErJa5Eq0SKQfCqNXvrLAq2K2NAMLi/Fp4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:41 2024 by rpki-client on console-ams.rpki-client.org