Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/3130332e31352e3137332e302f32342d3234203d3e203338353131.roa
File:                     3130332e31352e3137332e302f32342d3234203d3e203338353131.roa (raw, json)
Hash identifier:          Z5J1+hx5NTd78DEi7IU0ykUft5mYPiGeUVZfyGOMsG8=
Subject key identifier:   26:C4:5C:F7:C2:8D:A5:63:ED:5D:57:9C:1A:F9:75:54:14:DF:61:7F
Certificate issuer:       /CN=9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F
Certificate serial:       1661B70690FED7F3E85DC1B5E1A3EC8E48F9623A
Authority key identifier: 91:69:B9:B6:52:6C:D1:49:84:DD:E3:A4:2E:24:DD:8F:E7:AB:C1:7F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/3130332e31352e3137332e302f32342d3234203d3e203338353131.roa
Signing time:             Wed 27 Oct 2021 14:06:06 +0000
ROA not before:           Wed 27 Oct 2021 14:01:06 +0000
ROA not after:            Thu 27 Oct 2022 14:06:06 +0000
asID:                     38511
IP address blocks:        103.15.173.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:61:b7:06:90:fe:d7:f3:e8:5d:c1:b5:e1:a3:ec:8e:48:f9:62:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F
        Validity
            Not Before: Oct 27 14:01:06 2021 GMT
            Not After : Oct 27 14:06:06 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:2f:4f:05:23:81:76:e8:af:f9:1d:c6:5b:00:
                    1c:e1:9b:0e:61:00:bf:3b:6c:72:1b:b3:b4:45:e8:
                    ee:28:93:e0:19:37:08:bc:8d:53:d8:60:9b:ea:f5:
                    f3:76:98:26:24:3a:cf:99:7d:67:91:84:67:a6:e4:
                    0a:c6:d6:12:0a:9d:5b:fc:1b:54:0d:b1:d8:2a:ff:
                    2f:94:cb:8a:36:f8:c9:e2:b8:5b:4a:5e:b0:21:af:
                    27:14:88:52:8d:d3:89:6b:f5:61:29:b0:67:56:1a:
                    fe:a8:20:99:6f:e1:99:82:6c:85:0f:be:d8:ee:99:
                    ce:e5:e4:84:4d:f7:96:d6:eb:3b:a9:7b:fd:ef:97:
                    74:11:1f:5b:0d:5d:33:50:7c:29:78:ad:f4:52:07:
                    fa:9b:f0:65:6e:79:4f:fb:43:1e:e6:3c:95:47:bf:
                    6e:47:c9:d0:5f:75:93:63:b5:2f:94:a8:bc:1c:0a:
                    44:e4:04:8f:00:15:93:cb:3a:ec:6a:1c:71:88:0a:
                    40:8c:5f:51:e9:f6:4d:1d:61:8a:78:3e:4e:59:92:
                    b5:1f:24:cf:e3:c8:16:81:1f:60:69:f0:2d:40:55:
                    b3:d6:b1:32:4f:73:a6:b3:c3:f4:65:9e:99:20:71:
                    b5:80:c0:fa:1d:3f:96:38:6a:d4:d0:9c:8f:72:55:
                    8f:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:C4:5C:F7:C2:8D:A5:63:ED:5D:57:9C:1A:F9:75:54:14:DF:61:7F
            X509v3 Authority Key Identifier:
                keyid:91:69:B9:B6:52:6C:D1:49:84:DD:E3:A4:2E:24:DD:8F:E7:AB:C1:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/3130332e31352e3137332e302f32342d3234203d3e203338353131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.15.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         59:e5:d9:0d:95:ee:36:46:5a:67:2e:2c:11:e3:3b:66:17:ba:
         a9:70:ff:4a:ed:ba:46:d9:2b:68:ae:41:0d:3a:6e:d8:d4:cd:
         78:84:11:9a:dd:36:1d:ce:2c:f9:89:2f:c6:73:77:50:e8:8c:
         74:ee:db:e4:95:7d:18:ed:af:dd:e2:10:8c:dc:fb:b8:93:e5:
         33:87:23:c3:7f:64:a1:54:01:6e:6d:05:de:2f:25:dd:16:06:
         0e:64:81:87:41:db:68:67:42:bc:eb:ee:04:58:87:83:b3:0e:
         4c:66:aa:88:fc:2c:77:c1:e4:94:65:e9:e6:df:aa:2c:be:58:
         e9:39:92:0e:0d:d8:da:02:bc:1a:29:66:b6:62:08:6d:9c:6e:
         40:0c:24:7b:de:17:b0:73:1b:12:cf:1d:e1:59:34:2e:31:cc:
         fc:42:6a:5d:aa:20:1e:53:ef:95:38:34:f0:7a:c8:c8:0b:b4:
         9c:66:92:58:1d:4d:e4:f1:3a:c1:b4:0e:7b:91:57:f2:23:c6:
         52:0f:0f:51:d7:2f:89:5e:d8:1c:70:10:4c:74:ac:4e:ba:fd:
         8a:c4:ed:60:cf:ff:5b:f7:de:b7:69:ec:77:14:41:eb:9f:1d:
         4e:a9:55:a0:85:33:e7:70:b7:cb:d0:e3:78:f8:c0:d6:df:17:
         9f:62:f6:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:08 2024 by rpki-client on console-fra.rpki-client.org