Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/3130332e3138302e3139342e302f32332d3233203d3e203338373630.roa
File:                     3130332e3138302e3139342e302f32332d3233203d3e203338373630.roa (raw, json)
Hash identifier:          xFCyhrqru9jTKTE8CvGtAo81rNeFfAKH2FhQ26tjHPM=
Subject key identifier:   60:D7:0D:CD:FC:6D:AA:31:81:4F:4B:C6:7C:8B:2E:A2:B9:11:C9:BD
Certificate issuer:       /CN=FED49ABCDA1C9D097F52AD26D8001C0C36632C89
Certificate serial:       47908E00FF92D97EEB4A4879D0331F8B3003F90A
Authority key identifier: FE:D4:9A:BC:DA:1C:9D:09:7F:52:AD:26:D8:00:1C:0C:36:63:2C:89
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FED49ABCDA1C9D097F52AD26D8001C0C36632C89.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/3130332e3138302e3139342e302f32332d3233203d3e203338373630.roa
Signing time:             Tue 22 Feb 2022 05:58:46 +0000
ROA not before:           Tue 22 Feb 2022 05:53:46 +0000
ROA not after:            Wed 22 Feb 2023 05:58:46 +0000
asID:                     38760
IP address blocks:        103.180.194.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:90:8e:00:ff:92:d9:7e:eb:4a:48:79:d0:33:1f:8b:30:03:f9:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FED49ABCDA1C9D097F52AD26D8001C0C36632C89
        Validity
            Not Before: Feb 22 05:53:46 2022 GMT
            Not After : Feb 22 05:58:46 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:0a:3d:41:78:51:a2:db:55:d5:af:cb:60:39:
                    8f:99:43:b0:bd:c6:10:90:de:1b:ba:0c:b4:3c:f3:
                    fc:ce:4a:75:e8:95:b9:37:20:15:c8:3e:f0:4d:02:
                    32:40:7d:d0:13:73:f7:24:46:6a:8d:70:9a:73:69:
                    59:dc:eb:ba:5b:23:1d:51:ff:0f:5e:f9:70:34:3b:
                    f0:2d:8b:3c:93:32:a9:55:6f:30:8d:ba:84:40:42:
                    f2:9b:f6:4b:bb:87:48:95:bd:45:6b:36:18:96:0a:
                    c2:b4:a2:b9:e1:d5:91:ea:5b:2c:8b:41:4a:a6:95:
                    28:49:10:9b:f5:d8:44:bc:3f:83:90:1c:77:bc:fd:
                    ce:7c:e2:a3:ed:3a:bd:7c:fe:fb:94:7e:db:7e:b6:
                    b2:0b:3a:46:6c:85:91:37:fb:61:1f:f5:07:5d:21:
                    22:78:a4:1f:3f:36:94:3c:cc:8e:34:41:9a:53:18:
                    55:99:88:3b:93:43:5c:76:af:e9:1a:75:dc:aa:30:
                    3b:c1:65:6e:8f:59:48:7e:5a:cc:56:19:cc:9d:50:
                    dc:cd:8f:4d:27:4e:84:4e:81:e0:e3:df:b7:f2:2a:
                    21:44:9d:50:d7:9e:8f:23:ef:de:0c:23:a6:36:a5:
                    00:26:7f:d2:85:25:c7:f8:db:97:72:2a:e1:15:8b:
                    01:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:D7:0D:CD:FC:6D:AA:31:81:4F:4B:C6:7C:8B:2E:A2:B9:11:C9:BD
            X509v3 Authority Key Identifier:
                keyid:FE:D4:9A:BC:DA:1C:9D:09:7F:52:AD:26:D8:00:1C:0C:36:63:2C:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/FED49ABCDA1C9D097F52AD26D8001C0C36632C89.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FED49ABCDA1C9D097F52AD26D8001C0C36632C89.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/3130332e3138302e3139342e302f32332d3233203d3e203338373630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.180.194.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3b:f7:34:d7:46:6b:4f:77:af:66:ce:77:50:51:e9:29:d9:74:
         e2:c0:c8:93:38:33:4d:5b:0a:21:01:da:00:02:e4:d0:c0:fc:
         17:b7:e0:9f:86:02:d0:99:f2:6d:f9:b6:b1:1a:82:e1:16:c2:
         95:80:97:29:1f:c0:6e:c6:e9:e4:08:f4:74:ac:9c:72:14:93:
         31:d7:06:cf:06:1a:bb:90:c5:d9:e5:c7:2f:c6:6c:00:96:9b:
         af:b7:bd:8e:7d:e7:49:ad:4a:36:cb:ac:25:37:94:2c:95:07:
         fd:2e:be:c9:d5:09:b7:f2:cf:3a:a2:4b:a7:c6:ab:5e:54:ef:
         90:46:c5:6c:24:fd:99:7a:58:43:ea:cc:1a:62:6b:4c:2a:53:
         b6:88:a8:9b:fb:51:b5:91:e1:1c:d9:d1:6a:49:29:bb:b3:24:
         58:03:28:c8:e9:78:5e:36:73:07:f1:86:b5:30:ab:b5:ce:ad:
         a0:76:62:c2:00:23:d7:09:47:07:b7:ac:78:c0:21:0f:5f:6c:
         06:59:6a:d5:88:81:02:55:e1:23:a2:ab:19:c3:ff:1a:20:5a:
         ef:99:bd:bc:6b:1b:67:94:44:15:4f:14:16:21:9d:9e:29:c0:
         62:9a:43:96:f0:9b:0d:97:5f:55:86:4b:76:5c:b0:91:c7:06:
         9d:0d:92:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:07 2024 by rpki-client on console-fra.rpki-client.org