Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/3130332e35352e32322e302f32342d3234203d3e20313530343930.roa
File:                     3130332e35352e32322e302f32342d3234203d3e20313530343930.roa (raw, json)
Hash identifier:          W2q0O5C9U1gahzCSV+qeFRrZCUjT9KXf1mVv7p92EOo=
Subject key identifier:   9B:59:0C:F7:C5:44:6F:C7:43:75:F3:1C:94:E5:F8:D0:64:DE:84:E3
Certificate issuer:       /CN=B4A42192F8CDBE935CE5927E5AD3C63C8196152D
Certificate serial:       20AE3AD8E9305FBBF6D3D46680B2C8295266FA63
Authority key identifier: B4:A4:21:92:F8:CD:BE:93:5C:E5:92:7E:5A:D3:C6:3C:81:96:15:2D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4A42192F8CDBE935CE5927E5AD3C63C8196152D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/3130332e35352e32322e302f32342d3234203d3e20313530343930.roa
Signing time:             Sat 25 Mar 2023 10:19:33 +0000
ROA not before:           Sat 25 Mar 2023 10:14:33 +0000
ROA not after:            Sat 23 Mar 2024 10:19:33 +0000
asID:                     150490
IP address blocks:        103.55.22.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:ae:3a:d8:e9:30:5f:bb:f6:d3:d4:66:80:b2:c8:29:52:66:fa:63
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4A42192F8CDBE935CE5927E5AD3C63C8196152D
        Validity
            Not Before: Mar 25 10:14:33 2023 GMT
            Not After : Mar 23 10:19:33 2024 GMT
        Subject: CN=9B590CF7C5446FC74375F31C94E5F8D064DE84E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c6:6f:9b:7c:8c:2e:67:54:a5:b3:b5:f8:19:
                    d3:bc:fc:15:b0:23:6e:90:2b:66:7e:7f:cb:80:9f:
                    d9:30:7b:c0:de:28:e6:ed:c0:e2:17:d9:a9:a0:f8:
                    fe:18:2f:93:cb:a5:dd:93:60:e7:18:08:a5:0e:d2:
                    58:ad:d4:0d:aa:f1:66:54:29:f1:c3:ca:5e:5f:17:
                    df:37:80:d3:ca:63:b7:c2:d7:fb:17:01:af:b2:6e:
                    ef:dd:14:cd:3c:33:c1:32:f0:f6:ba:95:de:e7:56:
                    2e:18:08:06:50:e3:e3:b3:a6:36:32:de:37:c6:17:
                    0f:4f:8d:f5:41:3d:f4:07:e6:e4:7e:1c:29:41:07:
                    27:1a:e5:65:41:43:47:da:10:a3:4a:36:d0:56:49:
                    c4:27:7e:bd:16:be:3c:f1:93:c5:c7:3e:d2:8a:ca:
                    b2:33:08:9f:de:78:23:cf:fa:62:71:7e:6d:07:17:
                    11:c1:73:36:ed:45:b5:65:a1:d4:37:0e:2e:b1:a6:
                    44:d1:57:6d:1c:9d:3b:9c:16:93:43:24:ab:a5:57:
                    a1:e7:ce:9f:a4:08:22:d8:66:6f:a8:41:9e:e5:30:
                    dd:98:b7:5e:c8:8a:7c:1f:08:01:da:1e:b1:1a:cc:
                    5f:41:99:d7:a3:6c:ba:4a:4d:d4:4f:59:65:a2:c3:
                    f6:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:59:0C:F7:C5:44:6F:C7:43:75:F3:1C:94:E5:F8:D0:64:DE:84:E3
            X509v3 Authority Key Identifier:
                keyid:B4:A4:21:92:F8:CD:BE:93:5C:E5:92:7E:5A:D3:C6:3C:81:96:15:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/B4A42192F8CDBE935CE5927E5AD3C63C8196152D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/B4A42192F8CDBE935CE5927E5AD3C63C8196152D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7794da40-b37e-4fe6-8f40-73b3b0be019f/0/3130332e35352e32322e302f32342d3234203d3e20313530343930.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.55.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         cc:a3:5a:a3:e3:4e:5f:7a:dc:ed:eb:31:cb:76:c4:45:6e:8c:
         0b:a3:14:b1:73:42:15:5f:01:22:2c:05:1f:5f:2e:7e:18:8a:
         b6:51:1d:0c:f1:87:62:87:53:57:65:db:9f:d8:c1:a9:bf:43:
         24:20:82:b8:dd:28:38:51:68:76:6b:ee:d2:4e:37:2b:85:7d:
         4f:a3:14:80:15:69:fb:e1:98:da:3e:db:69:7c:e5:74:bf:d6:
         4b:6e:55:e8:d3:0c:a5:0f:76:05:74:bc:de:29:af:3b:a6:90:
         57:5a:f1:da:da:15:d7:0b:fb:a2:29:c8:7d:71:aa:76:05:e0:
         75:7f:a6:d7:dc:7a:88:54:89:67:b2:0f:97:6d:b7:58:a7:ad:
         34:b0:b6:b2:f1:63:9d:62:68:af:ee:f6:0e:8d:5d:96:3d:2b:
         91:a5:58:c6:62:50:79:50:9c:cb:29:39:d8:d0:02:e1:f7:5b:
         eb:84:5d:75:57:79:b0:8a:e0:f3:da:1f:a6:25:4a:18:dd:68:
         c5:05:91:8e:3a:bb:98:b2:98:69:d1:6c:52:e6:ed:97:c8:17:
         ef:7b:f3:46:30:3c:78:38:46:2a:05:d8:24:76:ac:08:e6:e8:
         3a:21:ff:ec:75:fe:89:76:24:80:24:6b:dc:06:2e:a9:05:0f:
         20:39:25:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:41 2024 by rpki-client on console-ams.rpki-client.org