Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6c784409-3f82-44c1-a14e-681df51b0234/0/3130332e3134392e3232392e302f32342d3234203d3e20313339393535.roa
File:                     3130332e3134392e3232392e302f32342d3234203d3e20313339393535.roa (raw, json)
Hash identifier:          NMZvKvyX3n9mcvTgVXpJ9qZKYklZPzCUgnGGJ1sKxf0=
Subject key identifier:   C0:02:D0:EF:28:CE:61:17:4F:B8:6A:B3:16:C7:9A:D8:E7:02:E1:5F
Certificate issuer:       /CN=26ED4619223C6097B33621E429F958020B6F4624
Certificate serial:       3579421936A2648E2B0DD186D5BE19C98344E131
Authority key identifier: 26:ED:46:19:22:3C:60:97:B3:36:21:E4:29:F9:58:02:0B:6F:46:24
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26ED4619223C6097B33621E429F958020B6F4624.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6c784409-3f82-44c1-a14e-681df51b0234/0/3130332e3134392e3232392e302f32342d3234203d3e20313339393535.roa
Signing time:             Thu 29 Dec 2022 17:17:49 +0000
ROA not before:           Thu 29 Dec 2022 17:12:49 +0000
ROA not after:            Thu 28 Dec 2023 17:17:49 +0000
asID:                     139955
IP address blocks:        103.149.229.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:79:42:19:36:a2:64:8e:2b:0d:d1:86:d5:be:19:c9:83:44:e1:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26ED4619223C6097B33621E429F958020B6F4624
        Validity
            Not Before: Dec 29 17:12:49 2022 GMT
            Not After : Dec 28 17:17:49 2023 GMT
        Subject: CN=C002D0EF28CE61174FB86AB316C79AD8E702E15F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:98:00:86:99:7c:f2:05:10:7a:d2:17:f1:7a:
                    11:83:85:5e:29:64:88:e8:17:03:5d:16:b6:ab:76:
                    06:16:4e:cb:70:3d:91:f9:0e:b5:64:fc:3d:2d:ef:
                    fe:bd:70:5b:2f:17:ce:44:e7:a9:85:e4:a6:41:ec:
                    cd:42:fb:15:07:fd:0d:d7:32:00:b1:2a:2b:c7:1f:
                    66:71:8a:f0:cb:1b:b8:22:7d:d1:72:35:61:82:ea:
                    65:61:47:0c:1d:c8:2c:22:7a:59:4b:50:11:c9:13:
                    d7:96:e0:53:18:0b:aa:20:8a:e5:07:31:b4:2b:6b:
                    66:3f:3f:8f:c3:28:6e:15:cb:64:7b:19:aa:1c:67:
                    f8:97:17:66:03:23:07:6b:83:94:20:1b:44:74:6d:
                    e1:5a:a3:0a:f3:36:5a:64:16:9c:0b:f0:b6:e6:53:
                    58:52:0b:39:d6:90:c5:0e:d1:13:50:e6:d3:b5:89:
                    ae:9b:29:43:2d:c8:99:26:d1:65:c6:84:c0:dc:2d:
                    55:af:be:8e:ab:1c:5a:bb:0f:69:dd:74:93:71:32:
                    7e:96:86:5e:c5:02:2c:29:25:96:01:7e:08:c8:fb:
                    1e:0f:b6:95:c6:54:35:a6:55:8d:eb:84:dc:2f:68:
                    1c:0b:09:e7:31:5d:e0:46:2d:45:54:38:0d:c8:18:
                    7f:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:02:D0:EF:28:CE:61:17:4F:B8:6A:B3:16:C7:9A:D8:E7:02:E1:5F
            X509v3 Authority Key Identifier:
                keyid:26:ED:46:19:22:3C:60:97:B3:36:21:E4:29:F9:58:02:0B:6F:46:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6c784409-3f82-44c1-a14e-681df51b0234/0/26ED4619223C6097B33621E429F958020B6F4624.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/26ED4619223C6097B33621E429F958020B6F4624.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6c784409-3f82-44c1-a14e-681df51b0234/0/3130332e3134392e3232392e302f32342d3234203d3e20313339393535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.149.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:9b:ff:d6:df:41:28:ac:f9:9e:29:a9:d6:fa:16:a1:a8:79:
         21:6e:e0:2e:99:d9:d3:80:dd:96:eb:74:c0:ca:aa:ec:9c:5d:
         7e:68:45:ae:ef:4d:74:e1:c5:02:e7:fb:a1:0b:ea:b0:10:7c:
         18:47:c9:f1:09:9d:2a:cb:99:30:ee:da:c1:57:48:63:d5:03:
         72:53:fa:7e:7a:2d:c7:e0:1a:f5:7b:f3:93:a2:ac:5d:49:bf:
         6d:15:ac:ad:b5:52:57:32:5b:47:4e:57:bd:f1:2c:f2:59:9a:
         e9:34:65:64:c7:46:cc:1a:c2:9e:36:b9:4b:11:e7:eb:b3:0a:
         26:8e:d0:0e:de:87:ff:82:61:84:1d:3e:b0:25:fd:46:56:df:
         b4:a4:2d:d6:c4:eb:4b:3c:0e:d8:a5:43:b2:e4:ae:79:70:cd:
         4a:04:20:6a:16:33:d4:d6:cb:12:46:21:9a:15:d4:9b:ef:63:
         c3:fe:0d:50:b8:03:b4:53:6d:7c:c9:d9:6f:ea:dc:9e:d4:bb:
         f5:bc:26:d6:57:63:c5:10:2e:d6:cd:3f:fb:ed:18:d4:c7:bf:
         c2:b2:98:69:08:4e:b6:58:a5:d4:65:41:49:e5:96:75:3e:af:
         a0:88:f2:24:fe:e9:3d:c7:12:78:ab:39:1e:a2:4f:b3:79:3c:
         41:d8:9a:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:41 2024 by rpki-client on console-ams.rpki-client.org