Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/3130332e3138302e3139352e302f32342d3234203d3e203338373630.roa
File:                     3130332e3138302e3139352e302f32342d3234203d3e203338373630.roa (raw, json)
Hash identifier:          OhFnbOkMuaNjDmDY6YMaRUYUPWb4IAEF3QQAW3b4/Ig=
Subject key identifier:   46:C2:C0:50:56:74:82:62:92:27:37:03:FA:87:35:B0:25:C8:C1:EE
Certificate issuer:       /CN=FED49ABCDA1C9D097F52AD26D8001C0C36632C89
Certificate serial:       58B90ECACF60A71318BA420EB46F16EE108F10CB
Authority key identifier: FE:D4:9A:BC:DA:1C:9D:09:7F:52:AD:26:D8:00:1C:0C:36:63:2C:89
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FED49ABCDA1C9D097F52AD26D8001C0C36632C89.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/3130332e3138302e3139352e302f32342d3234203d3e203338373630.roa
Signing time:             Tue 22 Feb 2022 05:59:34 +0000
ROA not before:           Tue 22 Feb 2022 05:54:34 +0000
ROA not after:            Wed 22 Feb 2023 05:59:34 +0000
asID:                     38760
IP address blocks:        103.180.195.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:b9:0e:ca:cf:60:a7:13:18:ba:42:0e:b4:6f:16:ee:10:8f:10:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FED49ABCDA1C9D097F52AD26D8001C0C36632C89
        Validity
            Not Before: Feb 22 05:54:34 2022 GMT
            Not After : Feb 22 05:59:34 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:a1:96:6b:63:39:71:81:ce:ed:f2:48:18:3e:
                    e4:00:67:55:8a:e2:fa:39:ef:4a:13:82:06:30:95:
                    06:75:64:88:29:33:da:e0:96:ab:00:1d:26:41:f3:
                    a9:7c:3b:9e:80:a5:b1:25:ea:b7:3d:2f:9c:64:be:
                    b9:86:3a:37:34:e2:3d:2b:44:6f:5a:ce:24:b3:c4:
                    b8:bf:9e:68:3d:a5:9a:74:b6:f0:4f:87:51:7b:14:
                    ae:eb:8c:ba:24:97:59:2c:ce:b3:29:d2:51:9f:74:
                    9f:d0:47:82:8f:d6:38:c1:17:5c:66:0c:53:af:61:
                    b1:41:70:43:21:11:7d:69:ed:95:99:9f:8b:37:bf:
                    99:ea:4f:6f:a5:0c:b1:7c:16:77:eb:c1:df:e8:c2:
                    0f:31:50:48:f8:bd:4a:95:50:c6:0b:a4:2c:0f:5c:
                    68:59:2d:04:cb:7e:97:bf:1f:04:7b:30:65:b5:93:
                    9f:44:3f:bf:e1:3c:c1:3d:9c:1b:3f:9e:8d:58:e9:
                    ed:01:83:56:80:7f:84:78:03:b8:b3:bf:e3:45:c9:
                    86:d9:bd:7e:40:f8:39:28:87:5c:9b:e4:d0:51:9c:
                    44:83:df:5a:13:ed:f3:96:a7:eb:e0:ac:eb:40:dd:
                    03:72:5c:99:66:f6:1e:7e:f9:e6:88:6f:cd:87:ca:
                    38:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:C2:C0:50:56:74:82:62:92:27:37:03:FA:87:35:B0:25:C8:C1:EE
            X509v3 Authority Key Identifier:
                keyid:FE:D4:9A:BC:DA:1C:9D:09:7F:52:AD:26:D8:00:1C:0C:36:63:2C:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/FED49ABCDA1C9D097F52AD26D8001C0C36632C89.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/FED49ABCDA1C9D097F52AD26D8001C0C36632C89.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73f75088-088e-41c0-bfce-edc69beafd4a/0/3130332e3138302e3139352e302f32342d3234203d3e203338373630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.180.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         40:fc:f7:42:2e:44:94:96:4d:6c:46:7d:36:40:8f:cb:21:6f:
         8e:84:f8:25:0d:b9:f2:fd:ca:b6:a2:90:48:0b:d3:9f:db:2e:
         71:fa:5e:50:3c:53:66:4e:b6:d3:40:9b:e4:c3:6b:fc:cc:02:
         fa:c1:68:66:b7:3e:a1:1c:86:b0:ed:f4:b1:02:c8:49:2a:31:
         4d:53:63:96:1a:a9:1f:99:e2:9f:d0:b6:da:8d:14:e3:76:c7:
         6a:8a:e1:da:e2:78:18:26:45:40:a1:ba:60:cb:f3:6a:83:1b:
         f0:c3:2e:75:c7:f6:77:8a:6c:0a:13:7a:d9:b2:a1:dd:02:6c:
         74:cd:1e:2a:78:4d:72:15:51:4b:61:30:78:d4:79:85:9b:e0:
         41:93:47:b9:60:8c:b3:e2:6e:6c:3f:ee:14:95:89:f7:f0:5a:
         92:1a:b5:ab:2d:80:86:4f:21:f5:e2:18:35:a7:d1:60:a6:cb:
         49:2d:51:df:1d:eb:c0:1e:fa:87:0a:bc:50:e2:d6:ce:15:b9:
         e1:68:a9:a3:83:d7:1a:93:34:b4:7f:ef:c6:c0:ab:6c:24:27:
         2d:79:98:af:9a:b5:18:0f:e7:78:5d:de:7c:ea:69:b8:30:85:
         cb:e9:f4:dc:db:6c:a2:38:df:29:e6:30:be:3a:14:60:d3:94:
         84:61:56:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:41 2024 by rpki-client on console-ams.rpki-client.org