Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/3130332e31352e3137342e302f32342d3234203d3e203338353131.roa
File:                     3130332e31352e3137342e302f32342d3234203d3e203338353131.roa (raw, json)
Hash identifier:          1n1LhmtDoK/924VDgG3sV8mRkYhaMFh8N3Ow6EdA7Zc=
Subject key identifier:   90:BC:9C:E9:DD:E0:FC:A8:E5:70:9A:F0:D7:1C:54:26:09:79:C7:8D
Certificate issuer:       /CN=9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F
Certificate serial:       21D4BF19F45A13124C26D2B58F0D6BF00D7961D3
Authority key identifier: 91:69:B9:B6:52:6C:D1:49:84:DD:E3:A4:2E:24:DD:8F:E7:AB:C1:7F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/3130332e31352e3137342e302f32342d3234203d3e203338353131.roa
Signing time:             Wed 27 Oct 2021 14:06:27 +0000
ROA not before:           Wed 27 Oct 2021 14:01:27 +0000
ROA not after:            Thu 27 Oct 2022 14:06:27 +0000
asID:                     38511
IP address blocks:        103.15.174.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:d4:bf:19:f4:5a:13:12:4c:26:d2:b5:8f:0d:6b:f0:0d:79:61:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F
        Validity
            Not Before: Oct 27 14:01:27 2021 GMT
            Not After : Oct 27 14:06:27 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:95:08:41:ca:03:86:8b:38:f1:35:bf:b8:28:
                    b4:77:3e:8f:c5:8a:0b:fa:66:0f:28:c5:25:54:49:
                    1e:ed:33:c4:93:d7:66:07:92:f7:ed:a8:a8:96:2c:
                    68:53:f0:ad:c2:f7:f4:3a:82:36:09:d6:a7:10:1f:
                    a8:56:25:5e:75:26:6b:be:41:bf:58:66:d6:97:3e:
                    5e:d1:8f:eb:04:52:6d:ad:0b:63:6b:b3:3d:ff:90:
                    fb:21:02:dd:8b:78:69:b0:1c:8f:71:92:6c:be:4c:
                    76:62:ec:63:eb:9f:38:a0:09:00:91:25:c6:19:55:
                    83:82:4a:12:d2:86:45:8f:32:3c:ea:28:f1:cb:aa:
                    46:09:5b:9b:60:d8:e5:34:7b:18:cd:f5:06:de:8c:
                    6e:96:3c:dc:dd:77:0b:60:a7:bc:7b:72:18:c0:ff:
                    c3:f2:c2:2b:41:c1:7e:b1:15:80:25:62:ad:45:ee:
                    72:4a:54:0b:6b:9e:fb:ed:dc:83:b5:95:81:da:f3:
                    cb:33:53:c7:78:e6:52:93:05:3c:df:1b:9a:04:69:
                    1f:70:f6:0b:c9:e1:e9:6f:7e:0f:53:da:c0:c0:16:
                    94:05:05:8e:00:53:b5:44:58:eb:64:e3:da:5a:8f:
                    65:ea:4c:78:54:40:2b:f8:45:76:51:97:69:90:3e:
                    3e:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:BC:9C:E9:DD:E0:FC:A8:E5:70:9A:F0:D7:1C:54:26:09:79:C7:8D
            X509v3 Authority Key Identifier:
                keyid:91:69:B9:B6:52:6C:D1:49:84:DD:E3:A4:2E:24:DD:8F:E7:AB:C1:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/3130332e31352e3137342e302f32342d3234203d3e203338353131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.15.174.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:f5:ff:df:ee:c5:65:5f:9a:fc:71:79:f2:11:18:64:2f:79:
         9c:92:c0:2d:e1:75:82:77:2e:c6:8b:a6:2d:51:16:a4:8c:95:
         a2:b2:2a:43:23:5c:9b:77:11:e6:41:9a:8f:39:02:80:28:8f:
         64:5f:61:a6:80:15:a5:9b:32:0a:5f:83:73:49:17:33:4b:02:
         07:61:e7:6c:57:d9:a4:2c:6f:36:3b:8e:3a:2d:44:96:0f:2d:
         f6:9d:d3:d7:47:11:56:b3:05:11:72:2d:b8:e5:73:a4:f0:ca:
         cc:e6:50:90:10:dd:fc:f9:19:a2:c4:bc:6f:91:e2:78:7b:98:
         dc:c4:38:0a:8e:1f:f8:b0:47:ed:13:7f:06:79:17:4f:00:63:
         40:37:fa:86:4f:fc:ff:49:07:ed:a2:94:03:7c:e3:4d:c7:a8:
         95:fb:55:e4:2d:66:e3:32:39:58:ca:09:ad:f2:cb:9c:55:8a:
         f4:2b:a8:2d:41:1a:58:1e:9a:0b:e5:6a:c1:7d:02:60:e9:06:
         c5:4b:5d:72:b3:c3:0d:35:d9:65:2b:dc:66:2e:9c:2e:2a:1a:
         2b:81:64:a0:57:dd:c3:6d:a5:f6:84:2b:c7:45:6c:94:25:be:
         5e:e0:de:0d:d5:40:61:8a:8f:bb:07:18:44:ac:d6:5f:42:92:
         7d:ba:bf:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:41 2024 by rpki-client on console-ams.rpki-client.org