Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/7e8cd97e-56f5-4ca5-a85c-55a323f0608c/0/3130332e3235332e302e302f32322d3234203d3e203137343534.roa
File:                     3130332e3235332e302e302f32322d3234203d3e203137343534.roa (raw, json)
Hash identifier:          4XgE7GPej2efZK/4WSQkcp+lZ87Uui6RowY+L+cZ4aI=
Subject key identifier:   C3:85:9A:6D:86:B4:5F:3E:40:49:46:B8:7B:BB:A4:8A:ED:6C:22:C5
Certificate issuer:       /CN=EB7AB53449E52996F1539393C3DA704C6F12F359
Certificate serial:       6456496D11ACBCD04177EE798ED0AC700FA5DFFD
Authority key identifier: EB:7A:B5:34:49:E5:29:96:F1:53:93:93:C3:DA:70:4C:6F:12:F3:59
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB7AB53449E52996F1539393C3DA704C6F12F359.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/7e8cd97e-56f5-4ca5-a85c-55a323f0608c/0/3130332e3235332e302e302f32322d3234203d3e203137343534.roa
Signing time:             Wed 25 Aug 2021 08:33:19 +0000
ROA not before:           Wed 25 Aug 2021 08:28:19 +0000
ROA not after:            Thu 25 Aug 2022 08:33:19 +0000
asID:                     17454
IP address blocks:        103.253.0.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:56:49:6d:11:ac:bc:d0:41:77:ee:79:8e:d0:ac:70:0f:a5:df:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB7AB53449E52996F1539393C3DA704C6F12F359
        Validity
            Not Before: Aug 25 08:28:19 2021 GMT
            Not After : Aug 25 08:33:19 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:22:df:5f:67:35:22:89:22:21:86:97:33:e7:
                    00:64:5c:fe:73:d5:e6:b5:2a:24:4c:c7:c8:59:b6:
                    64:70:ff:1d:cd:ea:db:9a:9e:7f:4c:c5:bf:c2:30:
                    c4:c3:3e:d9:ce:6e:3e:9e:c4:8d:58:2c:89:90:88:
                    bf:b1:62:46:ce:3c:90:5e:ad:bc:fe:75:f2:75:dc:
                    d0:d8:9c:f5:75:33:8b:49:e2:1e:eb:a8:e2:fc:56:
                    d0:4d:26:90:09:d0:d2:49:60:ef:ed:8f:06:62:8c:
                    61:2d:8a:ac:22:30:4a:70:36:af:87:21:0e:95:78:
                    9d:55:fd:e3:18:e8:47:23:76:c2:c8:8e:43:1d:85:
                    7a:a4:e4:d8:68:67:b5:80:2d:ce:2f:66:64:6e:76:
                    ea:a8:4b:d3:f6:4d:8c:9c:0a:ad:66:1f:0e:fd:7a:
                    78:86:64:f6:23:6e:0c:c0:62:00:5b:d0:bf:fe:ea:
                    30:2a:fb:00:bc:57:d1:b3:4c:07:7c:26:27:58:42:
                    fc:5c:6c:37:89:15:e6:03:d4:10:f7:5a:9b:9d:f8:
                    33:b3:39:21:b3:fc:aa:2e:99:0b:88:da:cb:94:bd:
                    8f:4f:1b:a6:2e:26:f0:5f:bc:27:d9:2e:3e:d7:6d:
                    5e:8b:fa:c4:db:c6:00:c7:70:cd:d7:e1:f4:4c:d7:
                    57:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:85:9A:6D:86:B4:5F:3E:40:49:46:B8:7B:BB:A4:8A:ED:6C:22:C5
            X509v3 Authority Key Identifier:
                keyid:EB:7A:B5:34:49:E5:29:96:F1:53:93:93:C3:DA:70:4C:6F:12:F3:59

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/7e8cd97e-56f5-4ca5-a85c-55a323f0608c/0/EB7AB53449E52996F1539393C3DA704C6F12F359.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/EB7AB53449E52996F1539393C3DA704C6F12F359.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/7e8cd97e-56f5-4ca5-a85c-55a323f0608c/0/3130332e3235332e302e302f32322d3234203d3e203137343534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.253.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8a:ac:97:4f:d5:e3:f3:05:31:01:ff:aa:4f:1e:bc:f2:14:76:
         6e:9e:92:9f:11:9c:ae:fb:bd:dd:02:68:3b:6b:38:c7:a7:d3:
         04:63:4e:d3:39:c0:ba:84:5d:3e:a6:7c:65:01:99:ee:77:f0:
         2c:e6:7a:83:d7:67:2c:5a:3d:81:bf:62:14:20:26:9d:02:e3:
         b3:fb:7e:9c:d8:a5:90:9a:fb:aa:f3:5d:de:e2:24:fe:d9:8a:
         e9:9a:26:21:62:91:64:8f:e8:a1:61:94:ba:57:eb:8b:47:54:
         20:2f:fd:6f:31:a1:b4:cb:48:9b:b2:88:ab:c3:2f:ba:a0:af:
         e1:50:de:12:dc:1d:92:f6:6a:ec:1d:c9:ec:76:a6:55:5e:32:
         a7:fc:f3:97:c9:5a:ff:be:4a:79:1b:f9:b2:7b:1b:30:f0:2d:
         17:3b:1b:df:39:2d:73:f3:7d:e3:2d:dd:0b:60:2a:15:f0:b5:
         a3:c7:0a:5e:be:c8:cd:ae:8f:83:c7:f9:31:1c:03:e3:87:d1:
         92:6b:b6:06:de:b8:a8:b5:d0:5d:ad:74:3f:2e:5c:73:c1:9a:
         43:64:63:14:af:21:d9:92:3e:47:54:e4:0b:74:44:20:cf:5d:
         22:39:f2:f5:11:ee:bd:21:1c:af:50:9b:11:dc:62:3d:56:1f:
         58:23:2c:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:07 2024 by rpki-client on console-fra.rpki-client.org