Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/3130332e31352e3137352e302f32342d3234203d3e203338353131.roa
File:                     3130332e31352e3137352e302f32342d3234203d3e203338353131.roa (raw, json)
Hash identifier:          6k/L0XMjoMliDpDUxmyy5NolA4dPvBRCGClwMKjTkgk=
Subject key identifier:   53:F6:83:0D:3E:5A:A5:92:68:CD:76:3C:87:AC:57:43:A8:BD:91:3F
Certificate issuer:       /CN=9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F
Certificate serial:       66763FD28ACFF97047BB8D67468F726DC1A5F3E1
Authority key identifier: 91:69:B9:B6:52:6C:D1:49:84:DD:E3:A4:2E:24:DD:8F:E7:AB:C1:7F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/3130332e31352e3137352e302f32342d3234203d3e203338353131.roa
Signing time:             Wed 27 Oct 2021 14:06:43 +0000
ROA not before:           Wed 27 Oct 2021 14:01:43 +0000
ROA not after:            Thu 27 Oct 2022 14:06:43 +0000
asID:                     38511
IP address blocks:        103.15.175.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:76:3f:d2:8a:cf:f9:70:47:bb:8d:67:46:8f:72:6d:c1:a5:f3:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F
        Validity
            Not Before: Oct 27 14:01:43 2021 GMT
            Not After : Oct 27 14:06:43 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:3d:84:3e:37:17:dc:7d:f2:67:35:8e:23:06:
                    b7:13:1f:bb:0b:37:c6:ff:aa:16:b4:19:e0:3c:d0:
                    02:9d:c4:95:3d:76:71:c1:c4:3f:b3:c3:72:2f:a0:
                    9d:1a:17:12:75:77:60:21:86:dc:98:8d:30:c3:65:
                    e0:06:6e:0f:d8:bb:78:e9:67:27:0d:62:37:e1:fb:
                    a8:f1:9c:01:b0:bb:06:43:d7:6a:39:e5:4d:f5:3f:
                    e2:57:2f:21:f9:1f:2c:ff:a3:1c:9c:ac:13:dd:39:
                    59:aa:27:7d:00:d8:fd:f5:85:d1:48:b0:d2:98:0b:
                    77:32:3b:81:2a:ee:d4:39:d9:2e:d8:77:ae:ea:b4:
                    f1:4c:e1:09:ff:10:55:0f:e6:e5:2a:37:dc:a7:3f:
                    9f:11:3d:6d:9c:d1:02:47:9a:64:31:43:f2:95:c7:
                    68:83:27:39:5e:d7:f4:1f:c6:ee:52:10:d0:d7:5a:
                    62:38:c3:16:92:f5:18:db:f2:90:aa:cd:c1:5e:2f:
                    b9:1c:7a:b8:85:36:6f:71:53:f8:19:1b:36:aa:3f:
                    92:84:7f:3a:f5:c1:39:58:f5:c0:6a:0a:9b:56:03:
                    a6:b4:8b:59:b0:74:07:d0:5e:88:9b:8d:da:04:7f:
                    b2:d0:7c:c4:76:0d:cd:55:26:3d:89:72:6c:f3:54:
                    62:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:F6:83:0D:3E:5A:A5:92:68:CD:76:3C:87:AC:57:43:A8:BD:91:3F
            X509v3 Authority Key Identifier:
                keyid:91:69:B9:B6:52:6C:D1:49:84:DD:E3:A4:2E:24:DD:8F:E7:AB:C1:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/3130332e31352e3137352e302f32342d3234203d3e203338353131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.15.175.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:2a:a4:72:8b:19:69:57:2b:01:34:e9:ac:c8:0e:47:97:7d:
         c5:ae:68:5c:28:d8:3a:d1:8d:b5:55:e6:a8:97:c8:0b:3b:5e:
         7d:1a:1d:3f:50:6c:7c:bc:c3:df:48:c5:ea:5a:bb:80:9a:fd:
         22:2a:ee:40:0e:90:05:f4:b8:82:de:a5:cf:bf:87:28:80:43:
         2f:67:c7:36:0a:da:c6:4f:ad:e5:99:f9:43:ea:db:02:57:3a:
         b0:9f:1a:38:cd:88:61:6b:25:cb:75:34:a3:d1:5b:56:d1:3d:
         04:e5:26:f4:0d:0a:62:73:64:90:f6:ba:2b:8c:5c:dc:c6:90:
         51:74:8f:4d:45:59:92:b7:29:f3:22:ff:01:cb:ec:21:35:66:
         34:89:4c:da:64:08:8c:76:87:3b:68:1c:35:34:70:aa:5b:c4:
         55:6e:45:46:6a:0b:d3:ad:1a:0f:c0:84:a8:81:3b:c0:5e:a3:
         a9:6a:c9:22:6c:1e:56:9a:16:d5:94:4e:66:27:84:08:76:16:
         ec:68:e0:bc:7e:e3:12:d7:1f:2b:62:e2:9c:b9:3b:78:06:e4:
         1c:58:c7:d3:bf:65:ad:1d:0c:56:b3:82:f9:e2:6a:c7:92:1b:
         44:0c:f6:7d:87:21:d0:6a:84:3f:aa:08:43:c9:86:4b:1a:30:
         8a:ee:c5:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:41 2024 by rpki-client on console-ams.rpki-client.org