Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/6d7f9ef4-f99f-44ff-b968-70d4524d7207/0/3130332e3137382e3137342e302f32332d3234203d3e20313336383733.roa
File:                     3130332e3137382e3137342e302f32332d3234203d3e20313336383733.roa (raw, json)
Hash identifier:          Y3PJovD0faD8v60EVqb2qgMygHpiBe1BLSLYY2qe6do=
Subject key identifier:   0D:CE:28:A6:D0:47:32:02:80:D6:B8:90:21:B8:65:7E:6A:C6:3E:23
Certificate issuer:       /CN=85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3
Certificate serial:       45C590DA808E478D96958E4F2744D457A7C12038
Authority key identifier: 85:E8:DE:B3:87:42:E3:90:C7:BF:B3:4B:1E:4A:BA:C3:1D:33:7A:C3
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/6d7f9ef4-f99f-44ff-b968-70d4524d7207/0/3130332e3137382e3137342e302f32332d3234203d3e20313336383733.roa
Signing time:             Fri 31 Dec 2021 05:43:28 +0000
ROA not before:           Fri 31 Dec 2021 05:38:28 +0000
ROA not after:            Sat 31 Dec 2022 05:43:28 +0000
asID:                     136873
IP address blocks:        103.178.174.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:c5:90:da:80:8e:47:8d:96:95:8e:4f:27:44:d4:57:a7:c1:20:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3
        Validity
            Not Before: Dec 31 05:38:28 2021 GMT
            Not After : Dec 31 05:43:28 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:f3:94:4f:f4:94:1f:18:9b:96:be:47:40:f2:
                    7c:e1:7a:f6:b5:79:d3:19:ea:4f:a9:b1:ce:24:1e:
                    67:ad:64:7e:a1:fa:48:71:f0:d7:2f:19:d0:5c:2f:
                    d3:ba:f4:ed:e3:d0:63:cc:24:b7:e9:c2:4a:17:ba:
                    0b:8d:49:81:e0:0f:bf:87:5f:61:44:65:d6:4d:11:
                    1f:88:ad:d5:f9:0b:5e:42:e8:4a:9e:09:e6:6e:de:
                    d7:13:5e:71:e4:0a:eb:51:e5:fb:8a:ac:51:d4:b4:
                    4e:f6:10:23:ee:3a:ca:15:e9:79:93:73:99:e2:c0:
                    ae:c0:76:cf:e9:e4:8d:da:c1:da:aa:88:10:30:ea:
                    2d:18:12:4e:48:b0:32:a5:c2:95:c1:c2:72:fe:a2:
                    33:bf:d6:7a:ba:be:b5:eb:e7:18:a2:b3:dd:04:9a:
                    38:f0:e8:0e:88:0b:80:d0:43:c6:b5:d7:b5:61:b4:
                    fe:7e:a7:13:f8:eb:a7:d0:39:37:02:4f:a9:65:c5:
                    16:29:2a:2a:11:ed:2c:09:54:d8:e6:cb:fd:e1:82:
                    eb:18:c1:1f:ef:e6:85:f7:91:ab:3f:8f:8e:b7:d0:
                    32:e9:31:e2:92:48:2d:e3:e5:5c:57:44:f2:da:08:
                    87:40:3f:a9:d1:96:d4:8c:51:1e:53:4d:29:a1:a5:
                    14:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:CE:28:A6:D0:47:32:02:80:D6:B8:90:21:B8:65:7E:6A:C6:3E:23
            X509v3 Authority Key Identifier:
                keyid:85:E8:DE:B3:87:42:E3:90:C7:BF:B3:4B:1E:4A:BA:C3:1D:33:7A:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/6d7f9ef4-f99f-44ff-b968-70d4524d7207/0/85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85E8DEB38742E390C7BFB34B1E4ABAC31D337AC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6d7f9ef4-f99f-44ff-b968-70d4524d7207/0/3130332e3137382e3137342e302f32332d3234203d3e20313336383733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.178.174.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7c:9b:fc:96:6b:a8:35:75:dc:af:f4:2a:86:06:b3:e8:eb:22:
         23:c7:d6:82:ff:55:e6:16:7c:92:5d:61:ad:f1:49:83:86:9c:
         2c:2d:23:25:4d:56:49:85:30:e8:51:c0:5f:23:b3:dd:a6:22:
         e4:aa:a5:1a:8f:04:58:97:e1:13:94:c6:37:cd:dd:1f:89:f0:
         6a:52:90:a6:45:6f:01:d9:a7:e5:e4:7f:35:bd:e1:2d:09:55:
         d2:96:54:30:dc:f8:61:f6:6b:32:05:12:12:fe:6b:26:1c:88:
         92:be:fe:0c:39:b7:44:61:4e:d5:41:80:20:38:83:68:9f:13:
         da:e4:b9:08:81:ed:16:20:81:26:af:54:b1:56:e6:92:33:eb:
         32:b1:a4:dd:1f:9d:b7:30:c5:f6:57:70:96:7b:3a:58:e8:d3:
         59:82:1f:b9:90:05:8f:08:d0:da:1e:34:2b:9e:53:8c:c4:98:
         12:08:70:69:b2:fa:bf:ad:37:78:72:83:28:20:a4:45:3f:90:
         55:a3:dc:33:5b:51:e0:4e:19:4d:9a:a3:fb:d1:8a:cd:6c:81:
         44:94:31:1b:50:31:7d:ba:f8:ae:10:a6:ed:1c:95:0e:9d:d8:
         b8:87:d7:6c:2b:40:b2:91:40:db:04:97:fe:32:ec:64:ca:2e:
         81:e6:ce:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:07 2024 by rpki-client on console-fra.rpki-client.org