Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/3130332e35352e32322e302f32332d3233203d3e20313530343930.roa
File:                     3130332e35352e32322e302f32332d3233203d3e20313530343930.roa (raw, json)
Hash identifier:          cTgoNoE58f22XBLNi2EhgRzQIl0pUKItGk5s6JjLVbc=
Subject key identifier:   83:5F:59:EB:58:CB:AE:8B:92:1F:A5:54:D3:D5:63:80:B6:29:68:B4
Certificate issuer:       /CN=B4A42192F8CDBE935CE5927E5AD3C63C8196152D
Certificate serial:       55E9BD619D3642856F7E7B8E7362CE342331299E
Authority key identifier: B4:A4:21:92:F8:CD:BE:93:5C:E5:92:7E:5A:D3:C6:3C:81:96:15:2D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4A42192F8CDBE935CE5927E5AD3C63C8196152D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/3130332e35352e32322e302f32332d3233203d3e20313530343930.roa
Signing time:             Sat 25 Mar 2023 10:34:00 +0000
ROA not before:           Sat 25 Mar 2023 10:29:00 +0000
ROA not after:            Sat 23 Mar 2024 10:34:00 +0000
asID:                     150490
IP address blocks:        103.55.22.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:e9:bd:61:9d:36:42:85:6f:7e:7b:8e:73:62:ce:34:23:31:29:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4A42192F8CDBE935CE5927E5AD3C63C8196152D
        Validity
            Not Before: Mar 25 10:29:00 2023 GMT
            Not After : Mar 23 10:34:00 2024 GMT
        Subject: CN=835F59EB58CBAE8B921FA554D3D56380B62968B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:72:15:07:25:56:27:b7:77:e5:f7:cb:d2:9a:
                    e4:24:ce:7c:fd:1f:11:42:5f:9f:78:03:2e:16:77:
                    fc:29:9b:db:f7:bf:bc:92:b9:ac:9b:5c:59:4e:80:
                    d7:dc:51:5b:3e:17:06:c7:47:f9:62:d6:c6:5a:52:
                    a2:de:a5:79:ce:b1:28:df:5f:ca:13:ef:5c:69:ed:
                    24:16:00:37:4b:e3:21:36:a9:d6:b8:e1:68:a8:a6:
                    15:00:7d:b6:f6:4a:77:f0:92:76:9f:9a:b6:67:6d:
                    77:4d:fa:a5:5d:43:a9:a3:08:f5:ff:fb:e6:0f:1a:
                    06:29:0b:a0:0f:88:72:1e:9b:01:ee:68:5b:8d:43:
                    be:df:37:c0:70:b9:0d:22:69:09:ad:19:15:1b:66:
                    43:77:89:b6:f4:bf:c3:dd:33:6c:44:9b:28:cd:29:
                    39:61:04:8e:a1:59:3c:08:d8:2d:66:1d:0d:06:bb:
                    8d:bb:35:e9:06:98:f8:22:bb:5e:8b:04:e7:94:dd:
                    99:bb:e3:d1:9d:13:13:9d:66:14:53:f1:2f:0b:85:
                    3b:52:f4:d7:fb:7e:d3:60:2a:65:c5:98:e8:b1:6f:
                    c8:2c:22:bd:cf:ec:09:a5:e2:19:b7:b4:24:a7:bb:
                    cc:37:7b:be:e4:65:84:63:88:c5:ec:a6:a0:34:dc:
                    0f:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:5F:59:EB:58:CB:AE:8B:92:1F:A5:54:D3:D5:63:80:B6:29:68:B4
            X509v3 Authority Key Identifier:
                keyid:B4:A4:21:92:F8:CD:BE:93:5C:E5:92:7E:5A:D3:C6:3C:81:96:15:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/B4A42192F8CDBE935CE5927E5AD3C63C8196152D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4A42192F8CDBE935CE5927E5AD3C63C8196152D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/3130332e35352e32322e302f32332d3233203d3e20313530343930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.55.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         06:0d:aa:20:7b:48:31:85:8b:8f:bf:25:5b:fc:92:a2:c6:fa:
         90:5f:32:da:61:5d:6d:ea:29:9f:55:a1:08:78:e7:26:04:98:
         6a:e0:01:47:f7:44:24:13:77:cf:74:5e:2f:04:54:f3:26:09:
         33:4f:a1:56:89:65:f8:ad:70:eb:53:09:54:6a:e2:00:d4:52:
         e4:30:3d:f8:3b:27:1f:16:74:d7:7c:5d:aa:d4:f8:8f:cc:14:
         ea:c8:87:ce:13:04:05:30:2e:8e:5c:61:ac:74:12:c9:8d:4f:
         46:b4:98:8c:bc:c3:d4:93:03:ea:79:d0:1f:56:a5:04:db:9a:
         f9:d0:0b:7e:31:68:7b:a6:16:a3:45:4d:f8:e0:18:94:b9:aa:
         97:a5:e1:a7:7a:75:4a:ca:e9:8c:a1:5a:31:37:e4:d4:1c:64:
         73:c4:01:2a:3f:c1:dc:eb:c2:c0:cf:6b:e0:2f:45:8b:8d:07:
         dc:6b:36:c0:31:b2:97:11:cf:24:95:92:c3:d3:74:3f:4a:c6:
         38:25:4f:08:fd:50:22:8f:cc:53:36:30:d8:fd:10:a5:00:65:
         79:42:07:29:ce:3f:9b:aa:fb:be:cc:6e:4e:91:55:96:9c:79:
         bf:fb:d0:4b:9f:e6:9a:54:d8:42:41:5e:83:e2:47:c1:67:c4:
         62:47:0b:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:41 2024 by rpki-client on console-ams.rpki-client.org