Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/3130332e3138302e3139342e302f32342d3234203d3e203338373630.roa
File:                     3130332e3138302e3139342e302f32342d3234203d3e203338373630.roa (raw, json)
Hash identifier:          bW8QgsjEsDNJx42MEYKTP5Go5ZyHzujAe6ch1ux2yds=
Subject key identifier:   B2:5A:04:43:ED:16:26:94:D0:31:1A:6A:32:AD:39:D1:18:D0:15:09
Certificate issuer:       /CN=FED49ABCDA1C9D097F52AD26D8001C0C36632C89
Certificate serial:       6AC7B00730AC43B1D992B1DE900D83E6AB0DAA04
Authority key identifier: FE:D4:9A:BC:DA:1C:9D:09:7F:52:AD:26:D8:00:1C:0C:36:63:2C:89
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FED49ABCDA1C9D097F52AD26D8001C0C36632C89.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/3130332e3138302e3139342e302f32342d3234203d3e203338373630.roa
Signing time:             Tue 22 Feb 2022 05:59:13 +0000
ROA not before:           Tue 22 Feb 2022 05:54:13 +0000
ROA not after:            Wed 22 Feb 2023 05:59:13 +0000
asID:                     38760
IP address blocks:        103.180.194.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:c7:b0:07:30:ac:43:b1:d9:92:b1:de:90:0d:83:e6:ab:0d:aa:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FED49ABCDA1C9D097F52AD26D8001C0C36632C89
        Validity
            Not Before: Feb 22 05:54:13 2022 GMT
            Not After : Feb 22 05:59:13 2023 GMT
        Subject: CN=3082010A0282010100B7F13A99842E98DB18B8D984115B8B42BC73FC286D6F5E84585BD8B5E67B1BA550928DE36836C6899DDDD23933023C32300B32FF20DE2F61B68EB52D3CFE70039AEACA2BF477B2028654F65F32351DD283B4DC23934EEB5649440135048311C7FA71DEEC8823EBE987189A2F0F3A1D169840D596A22B2E9D16C1FDDA27BADBFE6F2DB72510521B0755DC39CB723DD333DB8741A0135D573D81B3CF485AAB8DE9F87A1CEE560EE5202DCAF4513B6DD6C92DC30E27AF138858BDD92B96259C5D241D66A13746B6E1422924D7ED6560F8EF59804FDD49B2C65389D86F42BCCED6841F6C8CAED7C669534B31E7731E51A20C2FAAD40596149AD91516B962AA0D96910203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f1:3a:99:84:2e:98:db:18:b8:d9:84:11:5b:
                    8b:42:bc:73:fc:28:6d:6f:5e:84:58:5b:d8:b5:e6:
                    7b:1b:a5:50:92:8d:e3:68:36:c6:89:9d:dd:d2:39:
                    33:02:3c:32:30:0b:32:ff:20:de:2f:61:b6:8e:b5:
                    2d:3c:fe:70:03:9a:ea:ca:2b:f4:77:b2:02:86:54:
                    f6:5f:32:35:1d:d2:83:b4:dc:23:93:4e:eb:56:49:
                    44:01:35:04:83:11:c7:fa:71:de:ec:88:23:eb:e9:
                    87:18:9a:2f:0f:3a:1d:16:98:40:d5:96:a2:2b:2e:
                    9d:16:c1:fd:da:27:ba:db:fe:6f:2d:b7:25:10:52:
                    1b:07:55:dc:39:cb:72:3d:d3:33:db:87:41:a0:13:
                    5d:57:3d:81:b3:cf:48:5a:ab:8d:e9:f8:7a:1c:ee:
                    56:0e:e5:20:2d:ca:f4:51:3b:6d:d6:c9:2d:c3:0e:
                    27:af:13:88:58:bd:d9:2b:96:25:9c:5d:24:1d:66:
                    a1:37:46:b6:e1:42:29:24:d7:ed:65:60:f8:ef:59:
                    80:4f:dd:49:b2:c6:53:89:d8:6f:42:bc:ce:d6:84:
                    1f:6c:8c:ae:d7:c6:69:53:4b:31:e7:73:1e:51:a2:
                    0c:2f:aa:d4:05:96:14:9a:d9:15:16:b9:62:aa:0d:
                    96:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:5A:04:43:ED:16:26:94:D0:31:1A:6A:32:AD:39:D1:18:D0:15:09
            X509v3 Authority Key Identifier:
                keyid:FE:D4:9A:BC:DA:1C:9D:09:7F:52:AD:26:D8:00:1C:0C:36:63:2C:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/FED49ABCDA1C9D097F52AD26D8001C0C36632C89.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FED49ABCDA1C9D097F52AD26D8001C0C36632C89.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/3130332e3138302e3139342e302f32342d3234203d3e203338373630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.180.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:0c:a1:d3:9c:c9:75:f2:41:f5:b9:ab:2b:6b:21:22:9a:da:
         2e:0f:45:27:a8:7a:31:ef:d3:29:59:a6:15:50:1f:e9:01:6f:
         8b:96:b3:4c:ce:30:9e:fa:94:d6:81:ed:42:ba:14:74:3a:2e:
         a0:b6:36:fc:34:d9:f5:37:36:b1:cd:08:15:c6:69:46:bf:81:
         ef:3b:70:fd:fc:c5:16:ce:f8:67:63:73:b9:b9:c7:8f:66:b7:
         a9:66:ce:4e:82:d8:a6:92:a4:1f:e8:18:25:95:5c:32:c9:aa:
         6e:dd:9a:2f:19:5e:d2:8b:86:b2:4a:40:86:7a:b2:18:bb:03:
         ed:7e:98:12:3e:27:51:6e:55:51:87:87:e0:a5:34:8a:59:bc:
         65:41:1d:cd:2d:cd:5e:f3:ad:54:77:1c:5e:4b:c0:83:55:05:
         9f:3e:78:40:25:5d:02:89:12:f3:6a:93:54:34:5d:a1:9e:5a:
         c9:2a:03:09:77:90:6e:48:84:c0:a2:be:9f:f8:50:58:21:d0:
         34:94:9d:ee:c8:a4:fb:1b:02:f8:cb:92:ff:81:13:5c:6e:9c:
         e5:53:07:5f:20:2d:59:ab:4b:e3:17:c4:b1:e9:e5:be:e1:b8:
         cd:45:33:86:6d:c7:8f:4a:f3:f2:c9:11:40:77:85:c2:6b:15:
         24:63:87:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:41 2024 by rpki-client on console-ams.rpki-client.org