Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/7bfae565-4114-4434-940d-7c01928c8ab1/0/3130332e3137382e322e302f32342d3234203d3e20313431303737.roa
File:                     3130332e3137382e322e302f32342d3234203d3e20313431303737.roa (raw, json)
Hash identifier:          gtk/UToHgEjj8aVCTcoulBlUCiWYF/WWxSr8znW6AA8=
Subject key identifier:   C0:54:11:5E:05:95:06:06:75:16:84:AB:84:7D:AE:5F:7F:B4:0B:BD
Certificate issuer:       /CN=C6076E330D4679EF0455EA400D1158D4F49B0BF1
Certificate serial:       464D3B46E24A9952F676945F84F9EDA0E2911EDA
Authority key identifier: C6:07:6E:33:0D:46:79:EF:04:55:EA:40:0D:11:58:D4:F4:9B:0B:F1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6076E330D4679EF0455EA400D1158D4F49B0BF1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7bfae565-4114-4434-940d-7c01928c8ab1/0/3130332e3137382e322e302f32342d3234203d3e20313431303737.roa
Signing time:             Fri 14 Jan 2022 09:00:12 +0000
ROA not before:           Fri 14 Jan 2022 08:55:12 +0000
ROA not after:            Sat 14 Jan 2023 09:00:12 +0000
asID:                     141077
IP address blocks:        103.178.2.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:4d:3b:46:e2:4a:99:52:f6:76:94:5f:84:f9:ed:a0:e2:91:1e:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6076E330D4679EF0455EA400D1158D4F49B0BF1
        Validity
            Not Before: Jan 14 08:55:12 2022 GMT
            Not After : Jan 14 09:00:12 2023 GMT
        Subject: CN=3082010A0282010100CEA16EFB96AC5B26762CA4FC01AADFB0F903862CA0B17E954E3C8990F9B3DE10169E788B14B25AFC7401B1B0CAA67CFBFE15421436341E53A225D51CBCD3E2DC9AB83F998504EC8636D14373FCEED556B0BB1924607B99D6C61180ADA6F3B881F76EDB5C30D5B12810E3F8FEE4BDAF599CC7713C53A143BD22F098F610A95CA5B195B9253BE5CBF6E84277E953BDC8550FAEE492FCE433E5F29587EB09009B235E5D99693BB895C2A3E8BD7152F07E47434A4E53B86336931399AD663CDB0D947F52540BB22F2F042A65CCA5F8FFE780317B3552CDA36D2669F025B2779EDE0DBC1998C692DF04AC45475750F740156CEFCDC0DF5A4ECC73A2024FB07C43CC7F0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a1:6e:fb:96:ac:5b:26:76:2c:a4:fc:01:aa:
                    df:b0:f9:03:86:2c:a0:b1:7e:95:4e:3c:89:90:f9:
                    b3:de:10:16:9e:78:8b:14:b2:5a:fc:74:01:b1:b0:
                    ca:a6:7c:fb:fe:15:42:14:36:34:1e:53:a2:25:d5:
                    1c:bc:d3:e2:dc:9a:b8:3f:99:85:04:ec:86:36:d1:
                    43:73:fc:ee:d5:56:b0:bb:19:24:60:7b:99:d6:c6:
                    11:80:ad:a6:f3:b8:81:f7:6e:db:5c:30:d5:b1:28:
                    10:e3:f8:fe:e4:bd:af:59:9c:c7:71:3c:53:a1:43:
                    bd:22:f0:98:f6:10:a9:5c:a5:b1:95:b9:25:3b:e5:
                    cb:f6:e8:42:77:e9:53:bd:c8:55:0f:ae:e4:92:fc:
                    e4:33:e5:f2:95:87:eb:09:00:9b:23:5e:5d:99:69:
                    3b:b8:95:c2:a3:e8:bd:71:52:f0:7e:47:43:4a:4e:
                    53:b8:63:36:93:13:99:ad:66:3c:db:0d:94:7f:52:
                    54:0b:b2:2f:2f:04:2a:65:cc:a5:f8:ff:e7:80:31:
                    7b:35:52:cd:a3:6d:26:69:f0:25:b2:77:9e:de:0d:
                    bc:19:98:c6:92:df:04:ac:45:47:57:50:f7:40:15:
                    6c:ef:cd:c0:df:5a:4e:cc:73:a2:02:4f:b0:7c:43:
                    cc:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:54:11:5E:05:95:06:06:75:16:84:AB:84:7D:AE:5F:7F:B4:0B:BD
            X509v3 Authority Key Identifier:
                keyid:C6:07:6E:33:0D:46:79:EF:04:55:EA:40:0D:11:58:D4:F4:9B:0B:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7bfae565-4114-4434-940d-7c01928c8ab1/0/C6076E330D4679EF0455EA400D1158D4F49B0BF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6076E330D4679EF0455EA400D1158D4F49B0BF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7bfae565-4114-4434-940d-7c01928c8ab1/0/3130332e3137382e322e302f32342d3234203d3e20313431303737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.178.2.0/24

    Signature Algorithm: sha256WithRSAEncryption
         77:c9:c1:b6:27:3a:7e:b0:98:cf:f1:b2:3e:e4:38:8f:e8:8f:
         21:6f:6d:3e:b3:7d:a8:c8:8a:a9:80:39:29:3b:cf:75:78:03:
         df:02:90:5a:0e:dd:c7:a2:d5:20:b4:18:42:3d:eb:d1:57:a9:
         fa:ec:fe:92:4d:99:f4:d7:91:fb:a7:7d:ef:8d:43:dc:db:0d:
         b1:6f:fb:ad:ef:8d:89:d9:d3:53:19:13:be:8b:ec:db:72:cf:
         17:ba:82:23:d1:3f:d3:d1:c3:25:28:37:20:01:52:0e:30:fc:
         f3:80:38:ce:cd:9d:56:5d:20:c6:9c:ca:15:8d:e8:44:c8:8c:
         89:74:c0:90:8c:ed:24:b8:68:f9:e2:3a:71:a3:6f:62:4b:3d:
         e6:a9:d5:69:33:a4:52:40:2f:90:83:df:09:d5:2c:07:52:f7:
         2d:c6:dc:23:eb:b3:b9:fd:56:cd:c8:3e:22:73:8d:2b:e8:7e:
         b1:e5:64:58:77:e1:05:5a:4d:09:bf:67:82:78:24:7f:66:31:
         7f:6f:b7:79:e2:ce:9c:9a:b0:f8:fd:d8:70:f1:38:9e:ba:7f:
         1e:37:58:25:99:c9:d2:7e:67:32:e6:d2:46:a3:32:e5:49:dd:
         3f:9d:d5:b2:48:7d:5f:5b:10:91:a8:66:16:85:5c:f4:76:18:
         d4:10:8c:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:07 2024 by rpki-client on console-fra.rpki-client.org