Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/3130332e35362e39332e302f32342d3234203d3e20313530353037.roa
File:                     3130332e35362e39332e302f32342d3234203d3e20313530353037.roa (raw, json)
Hash identifier:          3H8gQAlkhehql8cHLOrVbscMUw9rgLQF6WClteTtQnM=
Subject key identifier:   92:44:3B:B5:F7:1C:C1:54:8C:D5:53:D7:26:E5:66:F7:FE:DD:3A:85
Certificate issuer:       /CN=17502B1B8651CDBBCD43315B12E26B9625112CEB
Certificate serial:       5F0F26FDD957D895B93FDA9409C831ED81711246
Authority key identifier: 17:50:2B:1B:86:51:CD:BB:CD:43:31:5B:12:E2:6B:96:25:11:2C:EB
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17502B1B8651CDBBCD43315B12E26B9625112CEB.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/3130332e35362e39332e302f32342d3234203d3e20313530353037.roa
Signing time:             Fri 06 Jan 2023 10:11:26 +0000
ROA not before:           Fri 06 Jan 2023 10:06:26 +0000
ROA not after:            Fri 05 Jan 2024 10:11:26 +0000
asID:                     150507
IP address blocks:        103.56.93.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:0f:26:fd:d9:57:d8:95:b9:3f:da:94:09:c8:31:ed:81:71:12:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17502B1B8651CDBBCD43315B12E26B9625112CEB
        Validity
            Not Before: Jan  6 10:06:26 2023 GMT
            Not After : Jan  5 10:11:26 2024 GMT
        Subject: CN=92443BB5F71CC1548CD553D726E566F7FEDD3A85
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:81:3d:ef:7f:92:ec:24:cb:a7:01:38:e1:c8:
                    cb:1d:4b:28:05:d9:77:a3:a9:6e:05:a8:54:23:59:
                    85:64:a5:b1:35:49:b7:da:ee:2b:aa:09:5f:0f:b8:
                    39:99:12:49:67:5f:f9:f7:de:57:18:94:dc:fe:bf:
                    78:d2:05:4c:31:54:b0:57:fa:23:8f:d7:13:18:bf:
                    6d:88:93:de:1f:b8:29:60:64:48:36:f7:72:f7:06:
                    d7:38:3f:b9:e7:81:99:ba:57:a9:c7:a9:6d:16:99:
                    96:0e:6b:0b:d3:91:26:20:be:42:c2:50:75:37:2f:
                    48:2a:55:46:1d:7e:84:ff:16:2b:a0:f5:be:2d:bc:
                    82:01:30:aa:7e:27:4b:f6:7f:43:ed:63:af:06:f4:
                    3e:7d:80:e4:ca:1a:4e:86:0c:cc:01:a1:51:49:6e:
                    3e:bf:55:61:96:d3:12:0c:36:52:24:bf:b5:32:84:
                    e3:0f:04:21:59:e8:7d:4b:19:d3:50:c6:fd:db:b8:
                    aa:12:9f:75:e6:e1:de:d2:7c:28:46:49:f4:e8:f9:
                    de:44:a5:99:d5:35:b1:4e:15:bb:72:f2:04:a3:a8:
                    a6:16:1f:54:5b:22:6c:e8:c4:d1:fd:55:c9:fb:ca:
                    20:33:1f:66:f0:50:9a:83:14:70:af:f1:5b:2b:4b:
                    7b:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:44:3B:B5:F7:1C:C1:54:8C:D5:53:D7:26:E5:66:F7:FE:DD:3A:85
            X509v3 Authority Key Identifier:
                keyid:17:50:2B:1B:86:51:CD:BB:CD:43:31:5B:12:E2:6B:96:25:11:2C:EB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/17502B1B8651CDBBCD43315B12E26B9625112CEB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/17502B1B8651CDBBCD43315B12E26B9625112CEB.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/726cd26f-fbda-4cd8-a01c-b0155513015f/0/3130332e35362e39332e302f32342d3234203d3e20313530353037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.56.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         28:d8:5d:85:75:99:ef:d1:86:fc:78:f1:92:fd:84:cc:19:5a:
         f9:08:32:4c:52:f9:09:26:f2:e7:4a:17:a7:1b:4f:88:35:bf:
         8b:83:e1:d8:c2:8d:58:64:cf:41:f6:30:c2:ff:8b:22:01:b1:
         49:4b:ad:4f:33:96:67:3b:d2:c3:10:ac:ae:51:88:ca:b1:4f:
         bc:f9:3f:14:25:1f:06:bf:87:ae:75:85:15:72:81:75:fe:78:
         00:97:d7:45:bf:a1:cf:78:9d:6c:78:38:43:24:64:67:ac:4f:
         93:5c:d7:7a:34:88:bc:63:ad:44:cf:25:2b:46:2c:13:6c:1c:
         f9:3f:92:18:a2:24:88:0b:c1:4d:e6:97:e2:7f:80:e3:89:01:
         0a:8e:f6:15:de:db:1a:89:73:d6:5f:ab:e8:10:5d:df:18:c9:
         2b:2f:05:87:d0:62:9c:7e:2b:0c:71:ac:39:03:90:39:87:95:
         88:3b:5e:0c:9d:d8:45:f1:89:6d:2a:f7:66:82:d3:3a:96:c7:
         53:58:2b:3a:f6:69:32:11:b5:57:0f:7d:97:a7:1c:4d:d0:dc:
         87:24:14:b3:47:48:50:f7:94:8a:56:dc:77:a3:3a:a7:5a:83:
         01:e5:1a:68:2f:bb:1c:68:81:b5:9c:30:c2:a5:b7:7c:14:03:
         fe:ea:d5:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:07 2024 by rpki-client on console-fra.rpki-client.org