Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/3130332e3139302e36322e302f32332d3233203d3e20313439383938.roa
File:                     3130332e3139302e36322e302f32332d3233203d3e20313439383938.roa (raw, json)
Hash identifier:          GurM8mBIpG8IYImyvXHyoIqs/LqUsTFpfUQJGD3dh78=
Subject key identifier:   7A:B7:90:4E:7E:83:CC:4B:FD:F2:7C:39:55:D2:E6:22:98:01:DF:BD
Certificate issuer:       /CN=A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A
Certificate serial:       158406D061811D2D22081A365ADBD74B233E88E1
Authority key identifier: A7:D5:3E:B5:45:1E:AF:8A:CA:B6:38:48:7F:BD:EB:40:17:7A:0F:8A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/3130332e3139302e36322e302f32332d3233203d3e20313439383938.roa
Signing time:             Sun 01 Jan 2023 07:55:28 +0000
ROA not before:           Sun 01 Jan 2023 07:50:28 +0000
ROA not after:            Sun 31 Dec 2023 07:55:28 +0000
asID:                     149898
IP address blocks:        103.190.62.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:84:06:d0:61:81:1d:2d:22:08:1a:36:5a:db:d7:4b:23:3e:88:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A
        Validity
            Not Before: Jan  1 07:50:28 2023 GMT
            Not After : Dec 31 07:55:28 2023 GMT
        Subject: CN=7AB7904E7E83CC4BFDF27C3955D2E6229801DFBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:f5:c5:d8:59:af:f7:c0:e0:7a:24:fc:d2:af:
                    f9:48:04:78:29:4e:a9:f1:74:72:c8:f2:c6:cb:70:
                    23:f6:b2:25:4c:6b:d5:09:96:c4:86:79:20:72:df:
                    bd:83:5e:ee:f6:48:0e:ee:34:2d:5f:96:a1:0b:cd:
                    71:96:a4:a9:e2:14:b9:bb:fa:a4:13:9b:df:38:97:
                    88:50:8c:ec:f5:be:44:ad:40:57:5b:f8:c4:d6:a2:
                    53:69:55:65:d0:05:c2:45:65:94:aa:b1:30:db:8a:
                    a0:5a:09:c1:bc:c1:87:90:fe:13:b6:6e:c9:4e:c4:
                    b5:b2:0a:62:89:7d:ee:b9:1c:98:63:58:3e:ed:34:
                    bf:ba:da:d1:3d:fb:93:1d:40:4c:21:3a:fd:bc:97:
                    a8:c2:e1:f5:62:23:ea:4c:29:b1:e5:86:d5:2f:a7:
                    f0:63:1a:48:80:f8:3d:93:a7:3d:58:ca:e4:ac:72:
                    f1:5e:31:51:fe:fb:86:38:9f:6f:47:16:79:b7:36:
                    62:84:1f:c1:67:3c:1c:d1:ea:9e:0d:c8:55:b1:ac:
                    3d:8a:54:27:5f:ba:13:21:d2:a7:cb:1e:3f:34:c0:
                    30:c9:b0:35:35:16:e1:75:8e:88:2f:fa:dd:b3:57:
                    53:b7:c9:50:f1:54:d0:47:75:c6:ba:a3:91:a7:b1:
                    17:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:B7:90:4E:7E:83:CC:4B:FD:F2:7C:39:55:D2:E6:22:98:01:DF:BD
            X509v3 Authority Key Identifier:
                keyid:A7:D5:3E:B5:45:1E:AF:8A:CA:B6:38:48:7F:BD:EB:40:17:7A:0F:8A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A7D53EB5451EAF8ACAB638487FBDEB40177A0F8A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7620b423-dd5d-448f-bbd3-04530ec1715d/0/3130332e3139302e36322e302f32332d3233203d3e20313439383938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.190.62.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5c:c6:87:86:fe:f5:f1:0c:f0:da:f7:60:7c:c5:44:28:8a:84:
         c1:c2:6f:7a:e5:02:5e:73:8b:ba:e7:0e:6a:1d:ce:f5:fe:7a:
         c6:9a:43:03:be:09:4f:1c:45:63:65:37:20:b4:9d:06:7e:fc:
         39:ed:f3:fe:f4:12:a3:b3:5e:39:c9:e2:0d:e0:83:a9:6e:ee:
         5e:38:2e:5d:3e:e8:32:a6:e4:47:ff:77:d4:ef:f2:5b:55:99:
         8b:c7:29:66:1f:2d:61:00:fe:2f:9f:fe:b7:f8:c8:13:e0:8f:
         3e:d3:bf:24:67:10:5b:30:fa:86:d9:4e:60:4a:1d:d5:08:e7:
         f7:9f:20:e2:88:84:a5:13:a7:5d:3e:0f:f9:75:fb:9c:70:c8:
         87:2c:62:f8:97:b6:55:81:68:a1:8c:0b:0d:aa:4e:7d:f1:6e:
         d7:56:ab:5c:c6:24:dc:5f:24:d8:f4:d8:4a:08:bb:6c:0c:88:
         b7:12:25:a3:0f:25:51:92:70:3e:e8:0e:1c:3f:78:ef:f8:60:
         37:25:3d:1b:48:d3:2d:7b:ca:74:a9:9d:ff:17:1c:2c:26:8c:
         93:51:8a:15:8b:1d:42:24:c6:d8:ab:41:e5:05:34:f6:70:e9:
         f6:1c:84:0e:0d:50:eb:e0:8a:21:68:c6:4d:26:91:f5:b9:77:
         36:86:0d:6b
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUFYQG0GGBHS0iCBo2WtvXSyM+iOEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQTdENTNFQjU0NTFFQUY4QUNBQjYzODQ4N0ZCREVCNDAx
NzdBMEY4QTAeFw0yMzAxMDEwNzUwMjhaFw0yMzEyMzEwNzU1MjhaMDMxMTAvBgNV
BAMTKDdBQjc5MDRFN0U4M0NDNEJGREYyN0MzOTU1RDJFNjIyOTgwMURGQkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDV9cXYWa/3wOB6JPzSr/lIBHgp
TqnxdHLI8sbLcCP2siVMa9UJlsSGeSBy372DXu72SA7uNC1flqELzXGWpKniFLm7
+qQTm984l4hQjOz1vkStQFdb+MTWolNpVWXQBcJFZZSqsTDbiqBaCcG8wYeQ/hO2
bslOxLWyCmKJfe65HJhjWD7tNL+62tE9+5MdQEwhOv28l6jC4fViI+pMKbHlhtUv
p/BjGkiA+D2Tpz1YyuSscvFeMVH++4Y4n29HFnm3NmKEH8FnPBzR6p4NyFWxrD2K
VCdfuhMh0qfLHj80wDDJsDU1FuF1jogv+t2zV1O3yVDxVNBHdca6o5GnsRftAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUereQTn6DzEv98nw5VdLmIpgB370wHwYDVR0j
BBgwFoAUp9U+tUUer4rKtjhIf73rQBd6D4owDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
NjIwYjQyMy1kZDVkLTQ0OGYtYmJkMy0wNDUzMGVjMTcxNWQvMC9BN0Q1M0VCNTQ1
MUVBRjhBQ0FCNjM4NDg3RkJERUI0MDE3N0EwRjhBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQTdENTNFQjU0NTFFQUY4QUNBQjYzODQ4N0ZCREVCNDAxNzdB
MEY4QS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzc2MjBiNDIzLWRkNWQtNDQ4Zi1i
YmQzLTA0NTMwZWMxNzE1ZC8wLzMxMzAzMzJlMzEzOTMwMmUzNjMyMmUzMDJmMzIz
MzJkMzIzMzIwM2QzZTIwMzEzNDM5MzgzOTM4LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ74+MA0GCSqG
SIb3DQEBCwUAA4IBAQBcxoeG/vXxDPDa92B8xUQoioTBwm965QJec4u65w5qHc71
/nrGmkMDvglPHEVjZTcgtJ0Gfvw57fP+9BKjs145yeIN4IOpbu5eOC5dPugypuRH
/3fU7/JbVZmLxylmHy1hAP4vn/63+MgT4I8+078kZxBbMPqG2U5gSh3VCOf3nyDi
iISlE6ddPg/5dfuccMiHLGL4l7ZVgWihjAsNqk598W7XVqtcxiTcXyTY9NhKCLts
DIi3EiWjDyVRknA+6A4cP3jv+GA3JT0bSNMte8p0qZ3/FxwsJoyTUYoVix1CJMbY
q0HlBTT2cOn2HIQODVDr4IohaMZNJpH1uXc2hg1r
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:41 2024 by rpki-client on console-ams.rpki-client.org