Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/3130332e3138342e31322e302f32332d3234203d3e20313439373038.roa
File:                     3130332e3138342e31322e302f32332d3234203d3e20313439373038.roa (raw, json)
Hash identifier:          dwhf6SIEf2u5+ggdIovErmW0XdbNmRlIzroOFu3zFL4=
Subject key identifier:   60:4C:56:6F:53:66:B1:57:5B:32:CB:ED:6D:D1:6C:21:DF:B3:FB:02
Certificate issuer:       /CN=688200169D93CC55E48C5F39388BF1F8A3D61AEC
Certificate serial:       24DCC18CFB179E5E67B617CA4A3DDF079B03B832
Authority key identifier: 68:82:00:16:9D:93:CC:55:E4:8C:5F:39:38:8B:F1:F8:A3:D6:1A:EC
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/688200169D93CC55E48C5F39388BF1F8A3D61AEC.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/3130332e3138342e31322e302f32332d3234203d3e20313439373038.roa
Signing time:             Wed 27 Apr 2022 04:27:10 +0000
ROA not before:           Wed 27 Apr 2022 04:22:10 +0000
ROA not after:            Wed 26 Apr 2023 04:27:10 +0000
asID:                     149708
IP address blocks:        103.184.12.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:dc:c1:8c:fb:17:9e:5e:67:b6:17:ca:4a:3d:df:07:9b:03:b8:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=688200169D93CC55E48C5F39388BF1F8A3D61AEC
        Validity
            Not Before: Apr 27 04:22:10 2022 GMT
            Not After : Apr 26 04:27:10 2023 GMT
        Subject: CN=604C566F5366B1575B32CBED6DD16C21DFB3FB02
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:47:af:dd:e7:14:10:d8:17:1d:47:0d:81:ed:
                    81:ac:16:f2:d8:09:18:29:8d:ad:bd:32:b8:0a:a7:
                    67:06:ba:21:e9:09:5e:00:ba:b7:c7:2d:e8:0d:5a:
                    5d:77:ef:c8:6c:7f:60:60:de:16:af:bb:e6:36:37:
                    fa:8c:90:4b:26:42:30:cc:fc:08:5e:b4:56:f8:8f:
                    a5:13:bd:3d:ca:89:33:c2:dc:fa:d3:37:8c:d4:ec:
                    90:a1:d0:dd:2f:f0:0c:a0:77:b1:62:12:09:07:dd:
                    a1:31:74:bb:13:a1:75:43:1a:ba:21:08:e9:65:f8:
                    97:c0:f5:86:0f:05:f3:a5:d8:c2:7f:61:15:1e:85:
                    55:c3:57:1b:00:14:7b:ba:48:f3:23:61:50:f8:e1:
                    13:a1:cb:6a:91:48:c6:d6:20:16:4d:ca:ea:8c:9d:
                    d7:ef:e8:bd:b5:c6:33:a5:36:5f:9a:60:09:b7:c9:
                    1e:20:99:0f:8c:7c:13:24:5d:7e:98:8a:30:21:a3:
                    15:26:b4:26:39:dc:ed:af:d5:e3:37:62:bc:00:69:
                    c5:a6:0d:36:e9:13:b1:12:6e:60:33:c2:17:a1:7e:
                    f9:3d:c8:e3:65:0a:ff:38:f6:85:d9:6a:60:83:ce:
                    8a:05:bd:25:96:ac:2d:8b:9e:66:c5:c1:58:84:09:
                    80:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:4C:56:6F:53:66:B1:57:5B:32:CB:ED:6D:D1:6C:21:DF:B3:FB:02
            X509v3 Authority Key Identifier:
                keyid:68:82:00:16:9D:93:CC:55:E4:8C:5F:39:38:8B:F1:F8:A3:D6:1A:EC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/688200169D93CC55E48C5F39388BF1F8A3D61AEC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/688200169D93CC55E48C5F39388BF1F8A3D61AEC.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/795c1ae8-d97d-4048-9a7e-6b71b8577740/0/3130332e3138342e31322e302f32332d3234203d3e20313439373038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.184.12.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8c:ef:86:87:b9:1e:0c:f2:8a:7d:2c:cc:cd:d8:55:9c:e0:45:
         43:a3:69:f5:bf:94:fb:9a:34:b9:e2:fd:0b:6b:ca:82:72:75:
         e5:77:5f:43:49:6a:0d:24:50:e7:90:7d:9f:4c:88:58:96:49:
         5b:93:e4:6c:44:db:4d:52:3f:4e:64:1c:a9:9f:38:21:4f:3c:
         9b:af:4b:2d:71:5b:47:0a:28:ff:98:f1:cd:c5:cd:e1:22:9e:
         8c:f7:cf:06:f7:bd:c0:7f:85:f6:31:39:da:02:21:da:d0:5f:
         d6:ce:f9:5f:f9:08:75:4d:69:35:a0:eb:e0:4c:29:4a:be:99:
         86:b0:ec:bc:79:71:1d:2f:d7:da:cc:1d:29:33:d5:15:bd:8c:
         05:39:09:af:0e:8b:42:4e:54:1f:ae:1f:91:4f:be:37:81:44:
         d0:a7:6e:eb:b5:ef:cb:ad:7e:40:f8:08:3d:ee:14:fe:65:ad:
         8c:1e:59:4d:d3:94:b3:9d:5b:d7:fa:d9:b6:98:99:d0:12:2b:
         c9:8f:31:e9:cb:d3:f5:c3:c7:4d:d8:b8:eb:86:7c:69:99:f2:
         6c:30:a9:bc:71:17:5b:ec:c4:d3:b2:da:65:41:25:70:7e:e9:
         61:35:b0:bf:95:f2:c1:3b:c3:35:b5:b4:fb:79:8f:a8:48:6e:
         65:7c:28:da
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUJNzBjPsXnl5nthfKSj3fB5sDuDIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjg4MjAwMTY5RDkzQ0M1NUU0OEM1RjM5Mzg4QkYxRjhB
M0Q2MUFFQzAeFw0yMjA0MjcwNDIyMTBaFw0yMzA0MjYwNDI3MTBaMDMxMTAvBgNV
BAMTKDYwNEM1NjZGNTM2NkIxNTc1QjMyQ0JFRDZERDE2QzIxREZCM0ZCMDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhR6/d5xQQ2BcdRw2B7YGsFvLY
CRgpja29MrgKp2cGuiHpCV4AurfHLegNWl1378hsf2Bg3havu+Y2N/qMkEsmQjDM
/AhetFb4j6UTvT3KiTPC3PrTN4zU7JCh0N0v8Aygd7FiEgkH3aExdLsToXVDGroh
COll+JfA9YYPBfOl2MJ/YRUehVXDVxsAFHu6SPMjYVD44ROhy2qRSMbWIBZNyuqM
ndfv6L21xjOlNl+aYAm3yR4gmQ+MfBMkXX6YijAhoxUmtCY53O2v1eM3YrwAacWm
DTbpE7ESbmAzwhehfvk9yONlCv849oXZamCDzooFvSWWrC2LnmbFwViECYDLAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUYExWb1NmsVdbMsvtbdFsId+z+wIwHwYDVR0j
BBgwFoAUaIIAFp2TzFXkjF85OIvx+KPWGuwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
OTVjMWFlOC1kOTdkLTQwNDgtOWE3ZS02YjcxYjg1Nzc3NDAvMC82ODgyMDAxNjlE
OTNDQzU1RTQ4QzVGMzkzODhCRjFGOEEzRDYxQUVDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjg4MjAwMTY5RDkzQ0M1NUU0OEM1RjM5Mzg4QkYxRjhBM0Q2
MUFFQy5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzc5NWMxYWU4LWQ5N2QtNDA0OC05
YTdlLTZiNzFiODU3Nzc0MC8wLzMxMzAzMzJlMzEzODM0MmUzMTMyMmUzMDJmMzIz
MzJkMzIzNDIwM2QzZTIwMzEzNDM5MzczMDM4LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ7gMMA0GCSqG
SIb3DQEBCwUAA4IBAQCM74aHuR4M8op9LMzN2FWc4EVDo2n1v5T7mjS54v0La8qC
cnXld19DSWoNJFDnkH2fTIhYlklbk+RsRNtNUj9OZBypnzghTzybr0stcVtHCij/
mPHNxc3hIp6M988G973Af4X2MTnaAiHa0F/Wzvlf+Qh1TWk1oOvgTClKvpmGsOy8
eXEdL9fazB0pM9UVvYwFOQmvDotCTlQfrh+RT743gUTQp27rte/LrX5A+Ag97hT+
Za2MHllN05SznVvX+tm2mJnQEivJjzHpy9P1w8dN2LjrhnxpmfJsMKm8cRdb7MTT
stplQSVwfulhNbC/lfLBO8M1tbT7eY+oSG5lfCja
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:07 2024 by rpki-client on console-fra.rpki-client.org