Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6c784409-3f82-44c1-a14e-681df51b0234/0/3130332e3134392e3232382e302f32342d3234203d3e20313439393733.roa
File:                     3130332e3134392e3232382e302f32342d3234203d3e20313439393733.roa (raw, json)
Hash identifier:          6pL0+boHtamZ1iReTZfNfv8/QQu0qvMu7N1lRpRqtKg=
Subject key identifier:   48:1A:56:92:75:D2:8E:09:16:69:10:C5:11:FD:63:B0:FB:17:26:87
Certificate issuer:       /CN=26ED4619223C6097B33621E429F958020B6F4624
Certificate serial:       1D73113A2A1C64D37ECB0A6FE004656853849CC2
Authority key identifier: 26:ED:46:19:22:3C:60:97:B3:36:21:E4:29:F9:58:02:0B:6F:46:24
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26ED4619223C6097B33621E429F958020B6F4624.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6c784409-3f82-44c1-a14e-681df51b0234/0/3130332e3134392e3232382e302f32342d3234203d3e20313439393733.roa
Signing time:             Thu 29 Dec 2022 17:17:20 +0000
ROA not before:           Thu 29 Dec 2022 17:12:20 +0000
ROA not after:            Thu 28 Dec 2023 17:17:20 +0000
asID:                     149973
IP address blocks:        103.149.228.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:73:11:3a:2a:1c:64:d3:7e:cb:0a:6f:e0:04:65:68:53:84:9c:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26ED4619223C6097B33621E429F958020B6F4624
        Validity
            Not Before: Dec 29 17:12:20 2022 GMT
            Not After : Dec 28 17:17:20 2023 GMT
        Subject: CN=481A569275D28E09166910C511FD63B0FB172687
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:69:71:7a:b9:00:fd:8c:d4:bf:e5:ed:22:3a:
                    d1:66:3d:45:09:df:34:82:dc:32:3c:6d:59:01:6c:
                    fe:e5:60:3c:aa:34:15:ea:d6:3a:b6:35:63:8f:fb:
                    30:56:da:95:79:92:11:2a:ed:b3:19:84:f1:f2:c1:
                    10:4f:e3:c5:eb:88:3d:55:72:5a:f3:18:2e:b5:4b:
                    dd:50:f5:a5:2f:03:00:d9:46:e5:d4:f2:01:26:04:
                    68:fe:54:13:0f:dc:85:d2:38:ec:5d:38:6b:23:72:
                    b8:4c:0f:0a:ad:bd:73:90:32:1e:4c:72:07:c6:8b:
                    5b:d8:47:ac:d5:79:be:4d:d6:6d:24:77:b9:16:97:
                    f0:c1:01:f6:23:2e:09:1f:0c:f0:f5:eb:bb:e5:81:
                    a8:39:7d:0d:a7:d8:21:aa:a4:51:32:8d:fd:e7:f6:
                    85:0c:d5:a8:71:6f:b4:3d:c8:bd:49:00:df:d9:38:
                    65:0e:cf:37:9f:29:06:e8:e8:6c:6b:32:a8:1f:6d:
                    7e:7b:51:d3:b8:fc:31:f3:8b:86:db:19:58:e2:3b:
                    e4:81:c2:4f:58:a2:83:a2:22:84:b7:e9:b8:0e:5c:
                    9c:34:58:2f:e2:a5:81:1c:b9:2d:de:60:55:22:be:
                    d8:67:11:29:d9:75:7b:d6:f9:de:1a:7d:09:f3:46:
                    8a:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:1A:56:92:75:D2:8E:09:16:69:10:C5:11:FD:63:B0:FB:17:26:87
            X509v3 Authority Key Identifier:
                keyid:26:ED:46:19:22:3C:60:97:B3:36:21:E4:29:F9:58:02:0B:6F:46:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6c784409-3f82-44c1-a14e-681df51b0234/0/26ED4619223C6097B33621E429F958020B6F4624.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26ED4619223C6097B33621E429F958020B6F4624.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6c784409-3f82-44c1-a14e-681df51b0234/0/3130332e3134392e3232382e302f32342d3234203d3e20313439393733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.149.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:8b:bd:a9:ea:4a:42:15:86:05:78:7b:a2:20:fe:1e:fe:76:
         46:5f:24:50:14:7e:65:ca:7b:04:86:e0:67:87:f9:b8:b4:b4:
         b1:6d:ef:60:f8:e2:07:d7:b7:a4:be:36:91:df:31:92:58:c9:
         56:81:01:39:26:3a:ff:a1:10:d8:f0:7f:5a:50:e8:94:ad:23:
         cb:d4:2a:2a:e2:ec:f7:9e:9a:8e:d2:75:7d:d9:c2:ac:76:2e:
         68:55:3e:cb:e8:13:0c:35:b4:51:59:4f:05:b2:41:17:96:41:
         50:2d:5d:3b:44:ab:b4:1b:f4:56:e4:a1:9c:1c:71:57:83:8c:
         b7:35:65:c8:20:a2:85:22:6b:d0:db:56:24:61:e7:f7:b6:65:
         59:fd:fd:b3:61:d2:47:73:f8:4c:07:73:d3:d9:d5:41:f4:48:
         a0:b0:b5:0c:da:88:59:97:17:f2:7e:d6:ce:fd:15:78:b7:5e:
         5d:c1:5a:4c:0c:d6:ec:16:f8:ed:c8:14:89:b1:ed:0a:8e:b7:
         f0:1e:ed:12:a9:67:b5:ed:b2:23:f8:3e:84:ac:84:cc:df:9f:
         e7:8f:51:a0:af:31:b0:7a:02:f8:7e:5c:46:b9:6f:73:f0:ae:
         28:ec:aa:9d:9a:f5:53:c4:2e:fa:48:ef:0d:6a:46:5b:35:f1:
         cc:97:b4:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:07 2024 by rpki-client on console-fra.rpki-client.org