Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/3130332e3135382e31332e302f32342d3234203d3e20313530393831.roa
File:                     3130332e3135382e31332e302f32342d3234203d3e20313530393831.roa (raw, json)
Hash identifier:          gCATF0ZobJwBo04Fkc9dVE+j6/NkitViVFUNSBsmi7Q=
Subject key identifier:   20:37:24:FE:9D:62:CC:56:9B:33:D4:7A:20:CB:A0:51:7B:F2:77:6F
Certificate issuer:       /CN=C8175E7E9E15E565FE697292A37E14BFE067CAF7
Certificate serial:       6892C5341AD7BAF48D1CB766F558D920AAABDA6F
Authority key identifier: C8:17:5E:7E:9E:15:E5:65:FE:69:72:92:A3:7E:14:BF:E0:67:CA:F7
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8175E7E9E15E565FE697292A37E14BFE067CAF7.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/3130332e3135382e31332e302f32342d3234203d3e20313530393831.roa
Signing time:             Fri 12 May 2023 01:31:10 +0000
ROA not before:           Fri 12 May 2023 01:26:10 +0000
ROA not after:            Fri 10 May 2024 01:31:10 +0000
asID:                     150981
IP address blocks:        103.158.13.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:92:c5:34:1a:d7:ba:f4:8d:1c:b7:66:f5:58:d9:20:aa:ab:da:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8175E7E9E15E565FE697292A37E14BFE067CAF7
        Validity
            Not Before: May 12 01:26:10 2023 GMT
            Not After : May 10 01:31:10 2024 GMT
        Subject: CN=203724FE9D62CC569B33D47A20CBA0517BF2776F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:6f:4d:f5:fd:82:8e:01:97:62:c9:f9:61:91:
                    fc:a9:5b:c7:2d:16:05:df:fb:bc:27:c0:c2:c3:97:
                    a2:35:0d:1d:fe:29:d5:dc:49:7d:76:93:b7:b2:60:
                    17:ae:8b:6d:ad:86:3d:57:58:30:97:7c:24:b1:7e:
                    a4:71:07:c0:eb:71:10:6c:51:0c:b3:ec:71:f0:39:
                    c9:48:3a:4f:44:a6:73:4a:fc:cd:63:d3:2b:22:df:
                    b8:62:44:0f:ad:f8:82:52:1c:fe:ec:71:60:50:8c:
                    2e:ee:33:0a:83:df:72:b1:b3:f2:1d:52:11:0d:69:
                    e7:ca:de:66:c8:76:de:de:d3:4c:76:f7:c1:0a:a1:
                    0d:a6:3a:09:aa:81:64:c7:2b:40:b2:8d:ef:a3:69:
                    8d:77:20:44:dc:e4:42:9e:64:3a:77:96:0d:d0:cd:
                    ed:9b:9e:8b:d1:08:6b:f3:7a:64:ed:af:9d:6c:3d:
                    ac:f7:03:8a:4d:7e:3c:e5:c2:48:b3:ab:42:2c:94:
                    3e:e7:af:61:d2:c4:24:94:39:c0:40:f6:85:2c:c5:
                    e8:dc:0c:85:e6:02:8c:9b:0d:3e:87:2a:2e:31:c0:
                    82:71:27:2c:be:42:bb:6e:71:b6:fe:f3:5c:23:a8:
                    e3:80:1d:66:42:da:7d:ee:60:5f:cc:b8:75:b5:20:
                    6c:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:37:24:FE:9D:62:CC:56:9B:33:D4:7A:20:CB:A0:51:7B:F2:77:6F
            X509v3 Authority Key Identifier:
                keyid:C8:17:5E:7E:9E:15:E5:65:FE:69:72:92:A3:7E:14:BF:E0:67:CA:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/C8175E7E9E15E565FE697292A37E14BFE067CAF7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8175E7E9E15E565FE697292A37E14BFE067CAF7.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/836fd551-6aba-4222-8a26-986346825b38/0/3130332e3135382e31332e302f32342d3234203d3e20313530393831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.158.13.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:7e:2f:ca:af:b8:fd:e1:aa:ff:35:01:13:39:3c:84:ac:67:
         84:86:95:ef:74:3c:d1:84:80:af:22:96:75:9b:60:95:ca:b7:
         b9:51:4d:80:d1:a0:8b:8e:8a:47:c4:a4:ff:9c:27:1b:a9:ec:
         b9:8d:78:ef:07:db:b8:1b:ec:b1:81:b7:94:ac:c8:e6:22:43:
         88:de:7f:c0:9e:8a:b8:04:cc:09:46:95:51:64:15:4c:ad:e1:
         b6:9e:71:23:07:ce:b0:9a:82:ee:d8:a4:6c:37:d7:d9:1f:a2:
         00:99:26:47:2d:fd:0a:5d:3a:17:d8:ee:93:24:fb:c1:cc:67:
         61:4d:c8:80:0b:e2:fd:9f:6d:e8:76:1f:64:f2:58:9a:bb:f8:
         78:13:06:31:ee:a3:1f:98:f1:6e:93:4c:33:5c:c3:09:f4:eb:
         f3:3e:66:f9:4e:a9:fa:64:d7:8f:5b:d8:0d:ed:fd:41:5b:ef:
         37:00:1b:97:aa:b8:28:5d:16:11:28:18:f9:cd:13:87:00:26:
         d5:c1:1a:bf:5c:fd:a7:16:28:d6:fe:25:cf:54:a3:e4:55:0a:
         98:65:77:a8:f5:09:10:21:05:ab:20:89:b6:d1:17:35:66:87:
         98:71:ae:31:35:19:d5:35:d4:f7:46:48:4c:32:93:d5:1a:1a:
         24:41:73:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:07 2024 by rpki-client on console-fra.rpki-client.org