Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/3130332e3137372e39322e302f32332d3234203d3e20313437313435.roa
File:                     3130332e3137372e39322e302f32332d3234203d3e20313437313435.roa (raw, json)
Hash identifier:          ApFcZCuPc8dsTHSZyiAt44esmJOF498iP5DevxiC+WI=
Subject key identifier:   84:4B:7A:34:6E:F5:36:62:9C:DC:F3:02:7A:34:65:EE:8D:17:22:6F
Certificate issuer:       /CN=0D05EF7BA71D640B784F72C7D8F0F4DCD285029E
Certificate serial:       1868B60A0E3F9BFDF7F6D75CC5E89B805512BC3A
Authority key identifier: 0D:05:EF:7B:A7:1D:64:0B:78:4F:72:C7:D8:F0:F4:DC:D2:85:02:9E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/3130332e3137372e39322e302f32332d3234203d3e20313437313435.roa
Signing time:             Thu 30 Dec 2021 07:31:37 +0000
ROA not before:           Thu 30 Dec 2021 07:26:37 +0000
ROA not after:            Fri 30 Dec 2022 07:31:37 +0000
asID:                     147145
IP address blocks:        103.177.92.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:68:b6:0a:0e:3f:9b:fd:f7:f6:d7:5c:c5:e8:9b:80:55:12:bc:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D05EF7BA71D640B784F72C7D8F0F4DCD285029E
        Validity
            Not Before: Dec 30 07:26:37 2021 GMT
            Not After : Dec 30 07:31:37 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:bd:95:9a:fc:48:13:56:61:fd:44:9c:a0:2a:
                    51:6f:1b:c6:04:05:4a:99:ef:39:6b:b7:4b:ca:be:
                    8c:f4:e8:c3:0a:f4:4a:40:1d:bb:7b:40:66:c0:28:
                    19:73:8a:f0:80:27:98:12:b6:a6:c9:0c:32:8e:15:
                    5d:dc:89:a6:70:81:89:c3:74:fa:cd:49:73:ad:57:
                    c1:83:7b:55:92:40:b0:7c:83:8f:0f:27:43:03:6f:
                    16:0c:79:67:0e:50:27:f8:4b:77:9b:4e:58:3f:e1:
                    fc:2a:2c:03:69:ab:a9:7d:c3:14:ea:5b:93:77:f9:
                    5f:31:da:3e:64:c3:7e:1b:e9:71:76:a9:d1:a0:fc:
                    da:fb:68:a9:1f:fc:6f:97:96:67:4c:35:d5:ae:d2:
                    80:1b:8b:d9:1b:22:80:fd:c1:ff:ea:c3:92:b9:42:
                    ee:90:32:58:1d:3c:bf:05:c1:1a:05:4d:71:2f:c3:
                    d2:c0:85:de:af:99:51:5b:fa:1f:1e:99:a9:87:c3:
                    01:2f:1c:88:f9:3c:a8:59:f6:de:d2:6e:b8:cc:9f:
                    00:b0:2d:5e:2c:69:0a:38:d1:51:40:00:69:96:aa:
                    c2:97:2b:5b:24:b9:38:dc:15:48:3b:54:e9:19:55:
                    ab:b3:6d:3d:97:2a:10:e0:57:85:d1:f7:ec:7e:18:
                    05:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:4B:7A:34:6E:F5:36:62:9C:DC:F3:02:7A:34:65:EE:8D:17:22:6F
            X509v3 Authority Key Identifier:
                keyid:0D:05:EF:7B:A7:1D:64:0B:78:4F:72:C7:D8:F0:F4:DC:D2:85:02:9E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0D05EF7BA71D640B784F72C7D8F0F4DCD285029E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/89b8604f-395a-42be-b997-e80fc1df90f9/0/3130332e3137372e39322e302f32332d3234203d3e20313437313435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.177.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3a:3a:92:2b:6a:d4:de:03:cc:b6:d2:83:be:2b:c2:61:9e:fd:
         ba:8e:cd:4a:85:32:52:7d:47:f0:c3:d8:90:ab:71:88:26:7d:
         7e:db:ac:f2:18:50:d6:09:b8:74:66:5e:de:91:8b:f0:41:b7:
         99:7f:d1:6d:31:ce:a4:80:90:7d:e9:44:bf:e2:f3:06:ac:c5:
         9f:c5:81:7c:09:ba:ad:c4:98:ab:1b:36:e7:e9:94:d8:1e:48:
         5f:75:b2:13:0f:b4:56:75:e0:49:a5:9c:d4:ae:44:86:1f:2d:
         4a:4d:d0:dc:5d:ba:92:df:65:50:66:e6:77:80:c7:d1:25:13:
         f6:f1:4a:b7:fd:36:06:1b:8b:3b:47:94:1e:61:38:e0:8d:9a:
         52:52:d5:cf:ed:42:32:43:a8:fc:2d:2f:06:31:d1:6f:d7:18:
         ec:62:85:6f:49:83:ab:c4:72:03:fa:3b:5d:dc:2c:cf:7b:33:
         8f:fb:32:70:8c:0b:72:e2:14:53:69:75:b1:c6:2c:07:ad:d0:
         f0:2d:01:98:66:87:39:7d:8a:f6:7d:38:c5:cf:e7:63:b7:27:
         75:5f:2f:1a:0d:70:9b:2f:ba:2a:0d:1e:66:ad:dc:b7:05:5f:
         70:aa:7d:e1:41:36:3f:d2:09:b0:f4:57:55:37:95:1e:17:f4:
         82:68:a9:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:41 2024 by rpki-client on console-ams.rpki-client.org