Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/76316165-da50-473b-bf7c-c77ebabc6d0b/0/3130332e37372e3232372e302f32342d3234203d3e203634323938.roa
File:                     3130332e37372e3232372e302f32342d3234203d3e203634323938.roa (raw, json)
Hash identifier:          rgYBl+BWEjurUq4LsP3GEjUtG/Xe3pAIOeVBKhioEP8=
Subject key identifier:   9E:D6:1D:3B:9C:52:A6:23:68:F3:79:09:6F:CC:A5:2E:B7:D2:43:50
Certificate issuer:       /CN=065F831F0E07E288D33ECF4DFAA18E2C93644E43
Certificate serial:       3FA1B47F841EBF74D80D1DC4DC6005594748BC7A
Authority key identifier: 06:5F:83:1F:0E:07:E2:88:D3:3E:CF:4D:FA:A1:8E:2C:93:64:4E:43
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/065F831F0E07E288D33ECF4DFAA18E2C93644E43.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/76316165-da50-473b-bf7c-c77ebabc6d0b/0/3130332e37372e3232372e302f32342d3234203d3e203634323938.roa
Signing time:             Mon 13 Mar 2023 02:44:03 +0000
ROA not before:           Mon 13 Mar 2023 02:39:03 +0000
ROA not after:            Mon 11 Mar 2024 02:44:03 +0000
asID:                     64298
IP address blocks:        103.77.227.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:a1:b4:7f:84:1e:bf:74:d8:0d:1d:c4:dc:60:05:59:47:48:bc:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=065F831F0E07E288D33ECF4DFAA18E2C93644E43
        Validity
            Not Before: Mar 13 02:39:03 2023 GMT
            Not After : Mar 11 02:44:03 2024 GMT
        Subject: CN=9ED61D3B9C52A62368F379096FCCA52EB7D24350
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:22:bd:7c:d7:2c:2f:88:03:09:b0:b8:22:9c:
                    6c:10:73:3d:f6:71:a6:92:30:ab:1b:89:01:23:f5:
                    2e:47:d4:35:f1:6e:6a:1f:c0:90:e1:7f:1a:df:fe:
                    4a:1e:5f:7e:d7:9f:41:6a:69:98:98:94:20:91:df:
                    8e:d8:64:97:22:36:e9:ee:3f:99:f9:99:13:da:c4:
                    2a:6d:e0:f4:3e:d2:a5:3a:bf:50:36:b5:35:c1:10:
                    92:0c:8b:59:7f:5f:49:56:0a:30:6e:ab:20:09:06:
                    dc:b2:f2:92:ac:48:8e:07:56:af:ff:e9:8c:e2:6c:
                    38:36:74:9b:2f:69:af:d6:95:52:b0:af:c9:1d:d6:
                    25:18:45:80:d8:24:31:64:75:0a:af:15:77:f9:58:
                    82:56:72:75:1a:0e:c6:15:cd:49:bb:d8:d5:81:53:
                    f0:b2:54:89:c1:15:0e:7a:b5:31:d0:84:62:a9:bd:
                    07:65:60:e9:1d:9a:94:d3:34:ab:89:58:61:47:50:
                    77:1d:bc:d8:d1:57:90:34:50:be:f5:6c:d3:bc:bc:
                    b9:90:2b:2c:da:06:d1:e4:3b:45:37:aa:fd:3b:86:
                    40:ec:1e:03:a1:95:57:80:12:3b:4f:9e:23:ee:1a:
                    fb:d8:c9:64:8a:29:bc:7a:ea:e3:3a:7f:09:5b:fe:
                    5c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:D6:1D:3B:9C:52:A6:23:68:F3:79:09:6F:CC:A5:2E:B7:D2:43:50
            X509v3 Authority Key Identifier:
                keyid:06:5F:83:1F:0E:07:E2:88:D3:3E:CF:4D:FA:A1:8E:2C:93:64:4E:43

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/76316165-da50-473b-bf7c-c77ebabc6d0b/0/065F831F0E07E288D33ECF4DFAA18E2C93644E43.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/065F831F0E07E288D33ECF4DFAA18E2C93644E43.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/76316165-da50-473b-bf7c-c77ebabc6d0b/0/3130332e37372e3232372e302f32342d3234203d3e203634323938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.77.227.0/24

    Signature Algorithm: sha256WithRSAEncryption
         05:c8:8d:0f:eb:0e:49:54:5e:ab:cc:5a:29:6b:cd:da:7b:4f:
         32:7e:19:73:6f:5f:ed:ef:75:47:5b:e8:bb:b7:1a:a1:03:26:
         6f:a8:ba:56:63:40:ce:2a:2c:40:ce:d7:b9:6c:2d:1a:86:31:
         b1:21:3b:cf:89:b7:91:75:92:97:7a:84:a2:c2:6c:ee:06:c5:
         b0:22:c9:49:f5:cb:d5:8a:fd:b2:76:c5:de:4d:ec:d6:ab:fc:
         01:1e:ff:51:00:64:26:ac:55:4c:5b:5f:3d:ab:76:fc:3b:b2:
         6a:bb:26:da:24:25:81:bf:66:8c:8f:a4:33:5b:83:fe:92:9b:
         3a:28:c4:43:85:2d:3c:46:ef:b9:20:2f:e6:a3:c5:cc:c8:78:
         64:3e:c9:18:e2:70:b8:f2:75:aa:66:4e:47:b5:e3:59:47:d7:
         d5:77:07:8f:5d:a2:50:9f:39:2a:e1:4c:42:2a:09:db:9a:eb:
         6b:91:2d:54:85:6b:cd:38:0e:d7:f8:62:10:5a:b6:4a:d0:f6:
         67:48:c5:8c:e1:4c:25:92:ea:72:e7:06:d7:d3:02:fb:7c:b3:
         6f:78:0e:33:ea:a1:ef:fd:c6:f3:25:1c:d4:6a:50:fd:20:59:
         34:00:b0:8a:7b:24:bd:ba:f5:7e:c8:5f:24:c8:d3:b7:f9:74:
         2e:97:63:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:41 2024 by rpki-client on console-ams.rpki-client.org