Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/3130332e3132322e382e302f32332d3233203d3e20313530393635.roa
File:                     3130332e3132322e382e302f32332d3233203d3e20313530393635.roa (raw, json)
Hash identifier:          9/7X4KjmpSU6gFGPq1YWwRDp5XvTDG39XyefYFY1pL8=
Subject key identifier:   B2:93:EA:C2:DA:AD:AD:45:BE:ED:A2:DD:96:A6:3A:B5:E2:C9:DF:B8
Certificate issuer:       /CN=8B19ACE0A7391492B18BE27AC01D2A602872BFC0
Certificate serial:       45C3C068D51ED9F63F666F02E6405955C93FD862
Authority key identifier: 8B:19:AC:E0:A7:39:14:92:B1:8B:E2:7A:C0:1D:2A:60:28:72:BF:C0
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/3130332e3132322e382e302f32332d3233203d3e20313530393635.roa
Signing time:             Mon 17 Apr 2023 03:25:30 +0000
ROA not before:           Mon 17 Apr 2023 03:20:30 +0000
ROA not after:            Mon 15 Apr 2024 03:25:30 +0000
asID:                     150965
IP address blocks:        103.122.8.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:c3:c0:68:d5:1e:d9:f6:3f:66:6f:02:e6:40:59:55:c9:3f:d8:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B19ACE0A7391492B18BE27AC01D2A602872BFC0
        Validity
            Not Before: Apr 17 03:20:30 2023 GMT
            Not After : Apr 15 03:25:30 2024 GMT
        Subject: CN=B293EAC2DAADAD45BEEDA2DD96A63AB5E2C9DFB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:5a:6e:a1:10:13:64:10:5e:81:41:ac:60:3d:
                    34:86:d0:ce:8e:d5:08:6a:90:1e:7b:a9:53:7b:51:
                    33:d7:fc:cb:d1:73:84:bb:bf:bd:4a:0b:97:0e:3d:
                    e2:f3:f3:81:0a:58:8b:97:cc:97:c8:f1:90:af:b6:
                    81:81:c4:f0:55:3b:3b:4a:ec:fb:86:b3:04:0f:36:
                    4a:25:b8:17:2d:23:8a:5a:fd:fc:ed:f8:a4:13:db:
                    16:70:52:92:db:e8:74:92:0d:d4:0e:de:c4:af:cf:
                    3c:65:54:93:f5:a5:9f:27:ca:06:07:97:ef:43:f4:
                    14:75:aa:2a:98:5e:fe:e8:c7:0f:9d:4d:00:89:67:
                    90:78:58:a4:a1:ea:c5:5a:e1:2a:55:e1:29:8e:f7:
                    22:1e:ae:c1:c7:16:fd:46:e3:6a:ba:d6:53:8e:18:
                    fc:8e:64:c6:f8:fc:3b:06:25:b5:47:32:e9:b3:25:
                    76:7b:df:dd:76:76:8c:87:7b:b3:d7:b2:07:ac:1d:
                    27:36:76:ad:8a:ac:30:79:db:55:1c:b7:f6:bf:76:
                    bf:f0:05:73:b1:67:fc:35:ca:ce:4a:55:c8:cb:a3:
                    d0:b8:1f:d8:5e:0e:3c:00:e4:04:eb:b0:74:3e:f8:
                    50:54:ec:a6:c7:50:5c:8c:48:d1:95:07:54:d7:84:
                    64:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:93:EA:C2:DA:AD:AD:45:BE:ED:A2:DD:96:A6:3A:B5:E2:C9:DF:B8
            X509v3 Authority Key Identifier:
                keyid:8B:19:AC:E0:A7:39:14:92:B1:8B:E2:7A:C0:1D:2A:60:28:72:BF:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8B19ACE0A7391492B18BE27AC01D2A602872BFC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7d6529db-9330-4e97-adf1-b0ddf1a6e599/0/3130332e3132322e382e302f32332d3233203d3e20313530393635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.122.8.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0b:4b:63:6d:87:fe:ea:79:cb:53:c5:3b:c1:12:19:95:d1:50:
         ef:03:10:d1:72:77:82:12:0a:65:92:80:c5:1e:06:9d:69:51:
         2c:7a:c5:9e:cd:69:0b:94:6b:0b:05:56:41:eb:bb:62:5e:a3:
         1c:0f:aa:6a:f8:bc:ca:60:4c:9b:40:8a:9a:a4:06:ed:2c:95:
         97:84:13:d8:2c:55:a2:03:3c:a3:e4:9f:ee:67:15:dc:cd:db:
         50:fb:43:ad:e0:d6:2e:06:81:3a:ad:7c:8a:7f:af:83:a8:d5:
         64:69:3e:8d:07:04:42:2b:b8:af:e2:af:69:17:aa:23:44:d1:
         a8:36:d7:67:eb:e3:0f:1a:15:84:bf:c2:d2:28:c6:bb:d8:35:
         0b:7e:48:77:3a:01:45:fd:2c:d2:ea:4b:f4:f5:e8:f2:3f:1f:
         2d:ac:fc:8b:34:93:0e:fb:da:b6:b7:66:39:bf:ab:16:f0:ac:
         93:64:ef:71:7c:24:3d:d7:53:b5:62:59:df:bc:6d:86:19:8f:
         3e:13:60:1e:0a:3f:46:07:b9:e6:0c:f8:06:96:73:67:eb:08:
         31:ab:f1:6d:58:62:da:ca:03:01:40:af:7d:b8:4f:f8:f0:b0:
         ac:7c:6a:e5:0a:87:09:b0:2b:54:2c:e5:01:1a:20:31:ec:a1:
         24:40:d5:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:41 2024 by rpki-client on console-ams.rpki-client.org