Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/7bfae565-4114-4434-940d-7c01928c8ab1/0/3130332e3137382e332e302f32342d3234203d3e20313439333137.roa
File:                     3130332e3137382e332e302f32342d3234203d3e20313439333137.roa (raw, json)
Hash identifier:          jaCImsl87WF2A9DC65Unv6RDyD21JR9YlMFSmqNeODA=
Subject key identifier:   AF:CE:79:C0:62:3E:0D:16:3B:0D:F4:3F:6B:EE:27:13:47:4D:D3:2A
Certificate issuer:       /CN=C6076E330D4679EF0455EA400D1158D4F49B0BF1
Certificate serial:       10CF27C91408C613357FF33FD20E15BD29D2B94E
Authority key identifier: C6:07:6E:33:0D:46:79:EF:04:55:EA:40:0D:11:58:D4:F4:9B:0B:F1
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6076E330D4679EF0455EA400D1158D4F49B0BF1.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7bfae565-4114-4434-940d-7c01928c8ab1/0/3130332e3137382e332e302f32342d3234203d3e20313439333137.roa
Signing time:             Fri 14 Jan 2022 09:00:41 +0000
ROA not before:           Fri 14 Jan 2022 08:55:41 +0000
ROA not after:            Sat 14 Jan 2023 09:00:41 +0000
asID:                     149317
IP address blocks:        103.178.3.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:cf:27:c9:14:08:c6:13:35:7f:f3:3f:d2:0e:15:bd:29:d2:b9:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C6076E330D4679EF0455EA400D1158D4F49B0BF1
        Validity
            Not Before: Jan 14 08:55:41 2022 GMT
            Not After : Jan 14 09:00:41 2023 GMT
        Subject: CN=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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:4f:3f:34:8a:26:1b:c4:4e:54:21:d1:c3:70:
                    8b:e6:06:ed:5c:b9:07:92:a8:33:9b:58:23:ad:6b:
                    4f:75:02:29:60:be:c6:21:08:8e:3f:f3:17:67:86:
                    8a:1a:42:a5:54:d4:17:67:d4:59:79:3c:70:e8:d9:
                    1b:3b:74:6c:15:97:03:18:c4:90:b1:cf:f1:a0:5c:
                    1a:aa:79:c9:ce:b3:ec:cb:ed:94:9c:6b:59:80:56:
                    16:4c:94:0f:48:37:55:ee:50:12:98:f2:77:4e:ab:
                    df:e5:18:50:59:09:cf:96:d8:86:c1:ce:9f:e2:31:
                    c6:f3:79:d3:db:a9:55:4d:c6:90:27:00:50:9f:4b:
                    07:fb:36:35:b3:8a:91:35:86:50:42:00:80:09:85:
                    45:5e:ac:b2:92:46:50:b5:4a:02:0f:74:46:b7:32:
                    c4:09:00:b7:16:08:0f:43:0d:3b:99:9b:b7:66:7e:
                    f1:51:c8:a2:44:52:0a:47:f8:9d:6b:b1:69:7b:14:
                    77:72:46:0b:0c:6d:49:f9:15:68:9c:d2:c8:bf:3e:
                    26:e4:18:cb:36:11:93:50:5b:af:4e:e1:6c:67:15:
                    9c:83:6b:85:e7:16:18:76:3d:96:c8:2c:34:28:0a:
                    91:1e:0f:3a:59:68:90:5d:f0:74:8f:12:39:74:57:
                    20:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:CE:79:C0:62:3E:0D:16:3B:0D:F4:3F:6B:EE:27:13:47:4D:D3:2A
            X509v3 Authority Key Identifier:
                keyid:C6:07:6E:33:0D:46:79:EF:04:55:EA:40:0D:11:58:D4:F4:9B:0B:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7bfae565-4114-4434-940d-7c01928c8ab1/0/C6076E330D4679EF0455EA400D1158D4F49B0BF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C6076E330D4679EF0455EA400D1158D4F49B0BF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7bfae565-4114-4434-940d-7c01928c8ab1/0/3130332e3137382e332e302f32342d3234203d3e20313439333137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.178.3.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b2:46:30:7a:d1:91:8a:85:3e:df:ed:a3:88:bd:c6:15:27:aa:
         a5:41:e7:38:38:ce:ad:50:f0:b7:bb:38:17:1d:a8:b0:30:48:
         7b:9e:da:33:32:cb:e0:35:65:99:33:10:c3:56:f7:dd:38:e2:
         97:94:ec:db:39:e7:c8:41:a5:8b:bb:7a:7d:af:c9:30:10:33:
         ec:fe:cf:31:2b:04:fb:53:f1:aa:86:08:0b:4a:f2:cf:c4:58:
         ad:33:0e:46:c9:28:24:ac:e1:42:26:de:02:8c:01:d1:a4:1b:
         56:5d:4e:f6:ff:0e:23:d0:ea:29:b6:4d:b8:f7:67:cd:4e:68:
         2f:28:9a:5b:e8:6f:6f:23:1b:7d:bd:07:0a:13:db:a6:c9:5a:
         c9:de:08:5d:bd:d2:3f:a6:a5:34:49:20:87:a5:d8:1f:5b:73:
         59:08:4f:71:0f:ad:4d:2d:95:0d:b2:a6:0a:b9:ad:40:a2:c5:
         25:4b:bf:16:68:ab:39:b7:07:51:22:ef:a1:48:f5:50:7a:84:
         8d:55:00:b5:42:4a:9a:2a:8d:ec:58:ee:04:3f:78:1d:b1:18:
         8e:69:51:5a:f9:5e:83:47:6c:1e:5b:af:67:5e:a8:3d:57:a9:
         e0:0f:bb:82:bd:30:25:b7:56:b2:b8:77:e1:5e:e6:9c:91:b8:
         2a:0f:a2:ef
-----BEGIN CERTIFICATE-----
MIIHJDCCBgygAwIBAgIUEM8nyRQIxhM1f/M/0g4VvSnSuU4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzYwNzZFMzMwRDQ2NzlFRjA0NTVFQTQwMEQxMTU4RDRG
NDlCMEJGMTAeFw0yMjAxMTQwODU1NDFaFw0yMzAxMTQwOTAwNDFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwREU0RjNGMzQ4QTI2MUJDNDRF
NTQyMUQxQzM3MDhCRTYwNkVENUNCOTA3OTJBODMzOUI1ODIzQUQ2QjRGNzUwMjI5
NjBCRUM2MjEwODhFM0ZGMzE3Njc4NjhBMUE0MkE1NTRENDE3NjdENDU5NzkzQzcw
RThEOTFCM0I3NDZDMTU5NzAzMThDNDkwQjFDRkYxQTA1QzFBQUE3OUM5Q0VCM0VD
Q0JFRDk0OUM2QjU5ODA1NjE2NEM5NDBGNDgzNzU1RUU1MDEyOThGMjc3NEVBQkRG
RTUxODUwNTkwOUNGOTZEODg2QzFDRTlGRTIzMUM2RjM3OUQzREJBOTU1NERDNjkw
MjcwMDUwOUY0QjA3RkIzNjM1QjM4QTkxMzU4NjUwNDIwMDgwMDk4NTQ1NUVBQ0Iy
OTI0NjUwQjU0QTAyMEY3NDQ2QjczMkM0MDkwMEI3MTYwODBGNDMwRDNCOTk5QkI3
NjY3RUYxNTFDOEEyNDQ1MjBBNDdGODlENkJCMTY5N0IxNDc3NzI0NjBCMEM2RDQ5
RjkxNTY4OUNEMkM4QkYzRTI2RTQxOENCMzYxMTkzNTA1QkFGNEVFMTZDNjcxNTlD
ODM2Qjg1RTcxNjE4NzYzRDk2QzgyQzM0MjgwQTkxMUUwRjNBNTk2ODkwNURGMDc0
OEYxMjM5NzQ1NzIwQTEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA3k8/NIomG8ROVCHRw3CL5gbtXLkHkqgzm1gjrWtPdQIpYL7GIQiO
P/MXZ4aKGkKlVNQXZ9RZeTxw6NkbO3RsFZcDGMSQsc/xoFwaqnnJzrPsy+2UnGtZ
gFYWTJQPSDdV7lASmPJ3Tqvf5RhQWQnPltiGwc6f4jHG83nT26lVTcaQJwBQn0sH
+zY1s4qRNYZQQgCACYVFXqyykkZQtUoCD3RGtzLECQC3FggPQw07mZu3Zn7xUcii
RFIKR/ida7FpexR3ckYLDG1J+RVonNLIvz4m5BjLNhGTUFuvTuFsZxWcg2uF5xYY
dj2WyCw0KAqRHg86WWiQXfB0jxI5dFcgoQIDAQABo4ICMjCCAi4wHQYDVR0OBBYE
FK/OecBiPg0WOw30P2vuJxNHTdMqMB8GA1UdIwQYMBaAFMYHbjMNRnnvBFXqQA0R
WNT0mwvxMA4GA1UdDwEB/wQEAwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vN2JmYWU1NjUtNDExNC00NDM0LTk0
MGQtN2MwMTkyOGM4YWIxLzAvQzYwNzZFMzMwRDQ2NzlFRjA0NTVFQTQwMEQxMTU4
RDRGNDlCMEJGMS5jcmwwdAYIKwYBBQUHAQEEaDBmMGQGCCsGAQUFBzAChlhyc3lu
YzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8yL0M2MDc2RTMz
MEQ0Njc5RUYwNDU1RUE0MDBEMTE1OEQ0RjQ5QjBCRjEuY2VyMIGiBggrBgEFBQcB
CwSBlTCBkjCBjwYIKwYBBQUHMAuGgYJyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby83YmZhZTU2NS00MTE0LTQ0MzQtOTQwZC03YzAxOTI4YzhhYjEvMC8z
MTMwMzMyZTMxMzczODJlMzMyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTM0Mzkz
MzMxMzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBABnsgMwDQYJKoZIhvcNAQELBQADggEBALJGMHrRkYqF
Pt/to4i9xhUnqqVB5zg4zq1Q8Le7OBcdqLAwSHue2jMyy+A1ZZkzEMNW99044peU
7Ns558hBpYu7en2vyTAQM+z+zzErBPtT8aqGCAtK8s/EWK0zDkbJKCSs4UIm3gKM
AdGkG1ZdTvb/DiPQ6im2Tbj3Z81OaC8omlvob28jG329BwoT26bJWsneCF290j+m
pTRJIIel2B9bc1kIT3EPrU0tlQ2ypgq5rUCixSVLvxZoqzm3B1Ei76FI9VB6hI1V
ALVCSpoqjexY7gQ/eB2xGI5pUVr5XoNHbB5br2deqD1XqeAPu4K9MCW3VrK4d+Fe
5pyRuCoPou8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:41 2024 by rpki-client on console-ams.rpki-client.org