Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/3130332e38362e3131362e302f32332d3234203d3e20313530353532.roa
File:                     3130332e38362e3131362e302f32332d3234203d3e20313530353532.roa (raw, json)
Hash identifier:          C1Yauq08umIO8YiR3CfFYRn0DTQhEHJ9z3RIIevg2LU=
Subject key identifier:   4A:5E:36:3F:ED:D7:88:BF:E0:50:6B:54:5E:CD:3C:40:F9:1E:22:A1
Certificate issuer:       /CN=1160709118182E564A6D9E250FF5000EFA5166A5
Certificate serial:       6EC69CE9C03EC6363AE56F42A3DC04964AC3DC19
Authority key identifier: 11:60:70:91:18:18:2E:56:4A:6D:9E:25:0F:F5:00:0E:FA:51:66:A5
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1160709118182E564A6D9E250FF5000EFA5166A5.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/3130332e38362e3131362e302f32332d3234203d3e20313530353532.roa
Signing time:             Fri 26 May 2023 01:45:37 +0000
ROA not before:           Fri 26 May 2023 01:40:37 +0000
ROA not after:            Fri 24 May 2024 01:45:37 +0000
asID:                     150552
IP address blocks:        103.86.116.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:c6:9c:e9:c0:3e:c6:36:3a:e5:6f:42:a3:dc:04:96:4a:c3:dc:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1160709118182E564A6D9E250FF5000EFA5166A5
        Validity
            Not Before: May 26 01:40:37 2023 GMT
            Not After : May 24 01:45:37 2024 GMT
        Subject: CN=4A5E363FEDD788BFE0506B545ECD3C40F91E22A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:08:9c:db:e8:bf:e2:f8:e2:11:11:28:8a:4b:
                    03:ab:5e:6c:80:c1:dd:75:db:34:55:78:08:6b:31:
                    fa:fe:dd:e3:c6:1f:04:ed:8d:d6:65:01:ad:eb:d7:
                    e2:3e:44:47:98:47:2a:bc:fb:9a:46:eb:00:7d:75:
                    dd:d5:c0:ab:69:1b:fb:f1:cc:b9:34:38:a2:31:4d:
                    6b:62:2b:37:59:1f:97:fb:86:0a:42:8c:70:07:cf:
                    2b:37:bf:d6:00:58:df:65:93:1c:ad:f3:c4:58:b2:
                    dc:a3:65:90:9b:f0:70:59:05:a7:75:89:ca:7f:08:
                    b8:50:37:79:7d:09:d4:1b:e5:fa:a4:4d:6a:64:e2:
                    14:81:1d:f6:97:44:68:3f:67:34:f4:7b:76:10:d6:
                    96:30:2f:f9:07:c4:d0:1c:38:75:87:e4:5b:4a:3c:
                    61:0a:05:fc:66:d9:85:69:88:75:bc:e8:70:4a:b5:
                    e6:ff:fe:5e:9f:85:52:c2:eb:e5:9f:83:8a:6e:f2:
                    7d:71:a0:b6:1d:6f:2d:a7:e1:9b:7d:5c:bc:b7:28:
                    cd:0e:af:0d:a8:b3:cc:ff:90:3f:3e:0d:e2:c3:2e:
                    38:21:6d:4b:a9:7c:cc:96:2e:b8:69:fd:7a:97:95:
                    7d:52:ad:30:81:19:3e:b8:c5:61:f4:7c:11:b8:fb:
                    95:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:5E:36:3F:ED:D7:88:BF:E0:50:6B:54:5E:CD:3C:40:F9:1E:22:A1
            X509v3 Authority Key Identifier:
                keyid:11:60:70:91:18:18:2E:56:4A:6D:9E:25:0F:F5:00:0E:FA:51:66:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/1160709118182E564A6D9E250FF5000EFA5166A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1160709118182E564A6D9E250FF5000EFA5166A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/89718f6b-b516-43ae-b589-83a25faa30be/0/3130332e38362e3131362e302f32332d3234203d3e20313530353532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.86.116.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5f:2c:c3:73:e7:e7:9f:d0:12:b8:ee:b3:81:6c:88:75:6b:bf:
         b8:37:ce:4a:55:02:2c:d7:c1:07:29:fa:4f:99:f9:b9:00:84:
         ce:c9:c4:5f:ca:d8:2e:ea:3e:2e:a0:03:dc:fb:64:b7:b0:2f:
         7c:d6:a6:92:a6:69:bf:d8:45:fc:5b:6d:e9:dd:76:90:cd:7e:
         7d:37:74:85:b4:6d:1e:a7:15:49:49:0b:83:09:18:7f:44:80:
         7a:fd:41:ae:42:0e:20:75:a3:37:61:42:98:45:12:09:69:1c:
         d9:ff:8c:0e:7e:30:41:df:cf:b9:4b:9b:a8:57:4e:0d:8d:54:
         60:1e:03:c6:7a:42:0f:0d:76:e1:81:e3:5e:cc:44:cb:19:ef:
         82:04:5d:93:0f:c3:77:ba:50:1e:e9:10:c8:3a:b8:13:65:73:
         c7:d1:dc:b0:d8:e9:df:32:7e:1e:c3:5d:91:68:48:6c:80:21:
         89:35:fa:38:c0:29:95:5a:a5:26:73:b2:43:f3:07:6c:a0:07:
         3c:89:f4:ce:d8:83:01:1d:e4:f4:fd:ef:51:22:da:68:63:5f:
         ba:33:8a:b8:6c:8a:10:97:40:38:77:06:a1:67:52:81:5f:61:
         cd:31:d3:30:58:86:cd:d6:16:14:78:6d:81:7f:7a:ad:03:80:
         15:3c:5c:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:41 2024 by rpki-client on console-ams.rpki-client.org