Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/3130332e3233312e38302e302f32342d3234203d3e203539323837.roa
File:                     3130332e3233312e38302e302f32342d3234203d3e203539323837.roa (raw, json)
Hash identifier:          w/RTHXwYZZ1y6XKuejnsRC3kKUInoniV4LaKDBUykAI=
Subject key identifier:   65:34:04:62:01:CB:AF:59:2A:9A:4C:AC:88:C5:A5:C4:74:CB:32:68
Certificate issuer:       /CN=2BB13827423575141DA0F1C57B33E7DE5D7A63A6
Certificate serial:       124BA7BE2E8E7779D3F3F530F181E06662EF5734
Authority key identifier: 2B:B1:38:27:42:35:75:14:1D:A0:F1:C5:7B:33:E7:DE:5D:7A:63:A6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/3130332e3233312e38302e302f32342d3234203d3e203539323837.roa
Signing time:             Fri 01 Oct 2021 06:10:19 +0000
ROA not before:           Fri 01 Oct 2021 06:05:19 +0000
ROA not after:            Sat 01 Oct 2022 06:10:19 +0000
asID:                     59287
IP address blocks:        103.231.80.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:4b:a7:be:2e:8e:77:79:d3:f3:f5:30:f1:81:e0:66:62:ef:57:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BB13827423575141DA0F1C57B33E7DE5D7A63A6
        Validity
            Not Before: Oct  1 06:05:19 2021 GMT
            Not After : Oct  1 06:10:19 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:3e:37:2d:80:2a:48:16:21:f6:32:89:8d:66:
                    66:77:02:2d:c4:f1:f8:ca:b2:07:ed:d6:64:b8:e0:
                    94:89:10:20:3c:c3:33:f4:48:f7:86:09:34:85:8d:
                    eb:02:85:6c:90:dc:0c:aa:5f:6d:1c:33:0c:8a:23:
                    57:29:50:b9:4a:db:73:ea:14:36:10:c5:89:be:65:
                    0f:46:d8:6d:7b:d5:eb:8f:1e:99:10:f0:35:0c:56:
                    aa:33:bc:5d:f9:82:c4:93:68:b7:1f:3d:8d:9a:c4:
                    55:c6:9c:fa:03:51:e5:d2:c2:60:fd:0f:74:3b:92:
                    6c:4a:7f:0c:9b:c1:f7:93:67:21:aa:40:e9:c0:f1:
                    e8:7a:d9:49:9f:cf:fe:29:9d:84:ed:46:51:08:29:
                    ef:6c:50:2f:95:7c:9b:7a:17:87:ff:28:d6:15:0c:
                    cc:88:93:a0:fd:2b:40:ae:c9:65:4e:db:86:87:9e:
                    9f:dc:c6:33:0f:52:06:84:53:a2:16:e1:f7:bc:f0:
                    27:74:d9:c3:fb:64:2a:f5:5e:0c:4c:fa:d8:50:a5:
                    b1:b8:2d:db:d9:b9:86:fa:86:70:e6:0d:b1:1f:f9:
                    5d:51:9d:02:75:dc:1e:a6:a8:60:92:d0:81:59:d8:
                    b1:c3:ab:a0:ab:82:a1:11:21:3e:bf:ae:d5:46:75:
                    c0:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:34:04:62:01:CB:AF:59:2A:9A:4C:AC:88:C5:A5:C4:74:CB:32:68
            X509v3 Authority Key Identifier:
                keyid:2B:B1:38:27:42:35:75:14:1D:A0:F1:C5:7B:33:E7:DE:5D:7A:63:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/3130332e3233312e38302e302f32342d3234203d3e203539323837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.231.80.0/24

    Signature Algorithm: sha256WithRSAEncryption
         03:aa:a3:49:06:4b:dc:1c:b1:23:bb:e9:fb:ff:69:e1:4b:4a:
         d8:d6:60:cc:58:9f:5e:b6:13:fe:78:1b:63:c5:69:9f:42:26:
         34:7e:8b:77:e6:f2:34:cd:e6:b9:8b:36:60:b4:9f:be:3d:0a:
         a3:24:4e:01:1b:bd:9f:f2:7d:36:80:1c:41:a9:af:d2:3f:45:
         9c:2e:cb:68:6f:0f:c0:9e:ea:6a:6a:ed:3e:f3:6f:67:0d:71:
         da:73:cd:0e:b9:2c:0a:c5:45:31:cf:a9:95:77:a2:d9:19:55:
         06:e9:06:53:a3:6d:63:dc:0e:24:19:2b:ef:b0:60:bf:c3:30:
         9f:75:37:fd:e6:8c:98:3c:16:b4:e6:8d:2a:40:e4:31:20:c0:
         8b:d7:fa:f6:aa:d9:67:85:46:74:36:78:7c:64:0b:ec:fd:d3:
         aa:1c:1b:9c:5a:7c:8f:0e:59:6e:49:8d:d4:01:47:f6:6d:be:
         19:3a:ee:c9:0b:3d:2a:ba:2e:ba:f5:f5:61:4e:06:c4:da:2a:
         c7:22:64:5d:9c:66:9c:29:ca:7b:fc:14:90:59:cf:4b:63:29:
         3b:6a:fa:9e:86:a1:d8:ca:d4:17:a5:b3:10:49:a0:87:57:7b:
         99:8c:cb:bd:63:d2:57:1b:68:ed:f7:85:bc:23:9f:46:99:a0:
         82:07:b3:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:41 2024 by rpki-client on console-ams.rpki-client.org