Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/3230322e37372e39362e302f31392d3234203d3e2039393035.roa
File:                     3230322e37372e39362e302f31392d3234203d3e2039393035.roa (raw, json)
Hash identifier:          w8Wh7TsZ4oaeo4Ui/Ab9ceTdLNHhQz0yK6L+/sDCnfA=
Subject key identifier:   33:CE:23:88:CA:A3:92:82:E5:A9:24:B3:EA:14:33:D1:19:D7:47:06
Certificate issuer:       /CN=782637B58B8E07EC64A0FAAE1769AF17AF0999E7
Certificate serial:       1D232642F6EAAC12DA7D637C1F0FF8A2163DFF49
Authority key identifier: 78:26:37:B5:8B:8E:07:EC:64:A0:FA:AE:17:69:AF:17:AF:09:99:E7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/782637B58B8E07EC64A0FAAE1769AF17AF0999E7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/3230322e37372e39362e302f31392d3234203d3e2039393035.roa
Signing time:             Mon 11 Jul 2022 23:55:13 +0000
ROA not before:           Mon 11 Jul 2022 23:50:13 +0000
ROA not after:            Mon 10 Jul 2023 23:55:13 +0000
asID:                     9905
IP address blocks:        202.77.96.0/19 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:23:26:42:f6:ea:ac:12:da:7d:63:7c:1f:0f:f8:a2:16:3d:ff:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=782637B58B8E07EC64A0FAAE1769AF17AF0999E7
        Validity
            Not Before: Jul 11 23:50:13 2022 GMT
            Not After : Jul 10 23:55:13 2023 GMT
        Subject: CN=33CE2388CAA39282E5A924B3EA1433D119D74706
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:4b:8b:af:4a:c9:5e:e6:b8:5d:1b:21:1e:2d:
                    93:ae:e4:08:6c:02:b3:17:bf:ff:78:43:5b:14:76:
                    5e:31:6f:7d:b6:4e:32:e0:94:9a:87:07:28:77:f8:
                    5e:7b:7b:88:5e:fd:0d:21:78:25:28:22:4c:e3:da:
                    63:49:48:db:78:68:03:ca:26:27:17:e5:84:07:34:
                    90:96:60:02:89:94:e4:92:e0:05:68:ed:0b:a1:f7:
                    d7:24:1a:94:e8:20:2f:01:9d:e6:e2:df:b3:2e:6b:
                    07:72:a0:2f:da:82:77:46:0e:13:36:f5:8c:a3:1c:
                    ad:3e:52:d6:ed:e4:78:47:04:29:2f:f2:57:76:38:
                    2d:56:71:ea:a6:b4:6c:11:9c:9b:1a:78:40:90:04:
                    14:70:29:78:bf:b9:e5:2a:bf:81:12:e6:28:97:18:
                    f1:3f:d6:a7:d0:14:c1:5e:8e:eb:d4:ea:4b:3b:56:
                    ec:31:51:cc:45:b9:82:86:68:f2:ee:ba:8c:a5:2c:
                    b8:52:92:02:49:dc:00:b1:5d:d1:e5:03:97:48:2d:
                    11:df:e4:47:c2:7d:dc:15:45:09:b0:cc:f1:30:00:
                    b3:dd:51:7b:c3:41:6e:f7:8f:69:ae:b1:16:c1:7a:
                    e7:52:b9:7f:ad:c9:7a:49:25:28:ae:35:e2:5f:7b:
                    d9:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:CE:23:88:CA:A3:92:82:E5:A9:24:B3:EA:14:33:D1:19:D7:47:06
            X509v3 Authority Key Identifier:
                keyid:78:26:37:B5:8B:8E:07:EC:64:A0:FA:AE:17:69:AF:17:AF:09:99:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/782637B58B8E07EC64A0FAAE1769AF17AF0999E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/782637B58B8E07EC64A0FAAE1769AF17AF0999E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/79c05ee3-7fc8-4407-b2c0-cb40bfcfb866/0/3230322e37372e39362e302f31392d3234203d3e2039393035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.77.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         48:91:94:dc:6d:d3:0c:e6:07:d1:0c:2e:28:b6:16:ca:38:d0:
         1a:5c:09:15:42:a3:80:a6:1e:c4:aa:e8:cb:0f:b3:72:74:45:
         1e:7b:e0:95:5f:4a:90:4a:fd:a6:5c:49:ab:13:30:1f:87:76:
         49:de:bb:17:b5:74:54:6d:fc:c8:5a:23:13:7f:f9:40:6e:10:
         b4:28:d1:5e:35:7a:02:09:1c:a2:82:d5:72:64:a0:60:23:2d:
         74:17:d2:d8:d2:56:13:1c:e4:6d:c1:c5:01:cb:19:bf:0f:f0:
         81:3e:b7:30:ef:88:22:79:44:15:47:61:df:26:57:ab:f5:66:
         f4:53:62:7c:e5:6e:79:96:a2:6a:ee:cb:13:97:d3:23:f1:e8:
         80:e9:37:d2:c1:46:0e:23:56:96:7e:91:cd:5f:33:4a:2c:26:
         67:84:d8:4c:78:5c:0a:d2:3e:5b:06:ed:df:6c:20:8b:62:03:
         a3:7e:b4:a3:6b:17:0e:52:15:36:1e:87:cb:6b:09:05:57:8a:
         a5:d9:8b:e2:53:c0:ac:a4:c5:14:ec:37:8f:4a:ee:33:88:11:
         11:1e:62:48:56:12:ab:17:60:6c:b2:05:1c:ed:61:a4:91:95:
         1d:6b:b9:be:d4:9a:02:ac:74:fe:41:c1:7a:27:ff:24:c0:56:
         74:5a:aa:6b
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgIUHSMmQvbqrBLafWN8Hw/4ohY9/0kwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzgyNjM3QjU4QjhFMDdFQzY0QTBGQUFFMTc2OUFGMTdB
RjA5OTlFNzAeFw0yMjA3MTEyMzUwMTNaFw0yMzA3MTAyMzU1MTNaMDMxMTAvBgNV
BAMTKDMzQ0UyMzg4Q0FBMzkyODJFNUE5MjRCM0VBMTQzM0QxMTlENzQ3MDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDVS4uvSsle5rhdGyEeLZOu5Ahs
ArMXv/94Q1sUdl4xb322TjLglJqHByh3+F57e4he/Q0heCUoIkzj2mNJSNt4aAPK
JicX5YQHNJCWYAKJlOSS4AVo7Quh99ckGpToIC8Bnebi37MuawdyoC/agndGDhM2
9YyjHK0+Utbt5HhHBCkv8ld2OC1WceqmtGwRnJsaeECQBBRwKXi/ueUqv4ES5iiX
GPE/1qfQFMFejuvU6ks7VuwxUcxFuYKGaPLuuoylLLhSkgJJ3ACxXdHlA5dILRHf
5EfCfdwVRQmwzPEwALPdUXvDQW73j2musRbBeudSuX+tyXpJJSiuNeJfe9mLAgMB
AAGjggItMIICKTAdBgNVHQ4EFgQUM84jiMqjkoLlqSSz6hQz0RnXRwYwHwYDVR0j
BBgwFoAUeCY3tYuOB+xkoPquF2mvF68JmecwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
OWMwNWVlMy03ZmM4LTQ0MDctYjJjMC1jYjQwYmZjZmI4NjYvMC83ODI2MzdCNThC
OEUwN0VDNjRBMEZBQUUxNzY5QUYxN0FGMDk5OUU3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNzgyNjM3QjU4QjhFMDdFQzY0QTBGQUFFMTc2OUFGMTdBRjA5
OTlFNy5jZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzljMDVlZTMtN2ZjOC00NDA3LWIy
YzAtY2I0MGJmY2ZiODY2LzAvMzIzMDMyMmUzNzM3MmUzOTM2MmUzMDJmMzEzOTJk
MzIzNDIwM2QzZTIwMzkzOTMwMzUucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAXKTWAwDQYJKoZIhvcNAQEL
BQADggEBAEiRlNxt0wzmB9EMLii2Fso40BpcCRVCo4CmHsSq6MsPs3J0RR574JVf
SpBK/aZcSasTMB+Hdkneuxe1dFRt/MhaIxN/+UBuELQo0V41egIJHKKC1XJkoGAj
LXQX0tjSVhMc5G3BxQHLGb8P8IE+tzDviCJ5RBVHYd8mV6v1ZvRTYnzlbnmWomru
yxOX0yPx6IDpN9LBRg4jVpZ+kc1fM0osJmeE2Ex4XArSPlsG7d9sIItiA6N+tKNr
Fw5SFTYeh8trCQVXiqXZi+JTwKykxRTsN49K7jOIEREeYkhWEqsXYGyyBRztYaSR
lR1rub7UmgKsdP5BwXon/yTAVnRaqms=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:07 2024 by rpki-client on console-fra.rpki-client.org