Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/3130332e3233312e38312e302f32342d3234203d3e203539323837.roa
File:                     3130332e3233312e38312e302f32342d3234203d3e203539323837.roa (raw, json)
Hash identifier:          tXw1fIUMOAPSGd9Ci0l6zIpq5uyMqdBofhzjM8l17pk=
Subject key identifier:   92:2B:25:10:07:24:EE:C8:BB:4A:52:99:22:5C:D0:80:50:5F:2E:D0
Certificate issuer:       /CN=2BB13827423575141DA0F1C57B33E7DE5D7A63A6
Certificate serial:       69C082683A8A7D5F51B1AA41A9A1BDB7FCC24EE9
Authority key identifier: 2B:B1:38:27:42:35:75:14:1D:A0:F1:C5:7B:33:E7:DE:5D:7A:63:A6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/3130332e3233312e38312e302f32342d3234203d3e203539323837.roa
Signing time:             Fri 01 Oct 2021 06:10:34 +0000
ROA not before:           Fri 01 Oct 2021 06:05:34 +0000
ROA not after:            Sat 01 Oct 2022 06:10:34 +0000
asID:                     59287
IP address blocks:        103.231.81.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:c0:82:68:3a:8a:7d:5f:51:b1:aa:41:a9:a1:bd:b7:fc:c2:4e:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2BB13827423575141DA0F1C57B33E7DE5D7A63A6
        Validity
            Not Before: Oct  1 06:05:34 2021 GMT
            Not After : Oct  1 06:10:34 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:5a:fa:45:4a:93:03:56:4d:31:d2:46:86:c8:
                    1a:c2:93:a1:9c:40:b2:7b:61:46:98:9c:94:7f:1c:
                    a0:a2:7b:da:90:b9:39:4c:76:63:fc:2a:72:44:a9:
                    75:49:cd:ff:8e:45:72:c8:b8:a0:a1:1b:43:cf:eb:
                    0e:14:e8:88:90:55:0d:05:96:13:81:37:30:d9:c6:
                    32:6d:2d:e9:4f:5d:9d:70:a7:f4:45:55:6e:94:06:
                    4f:0e:23:2f:98:f7:f4:de:9e:b2:d9:ac:56:10:aa:
                    69:be:dd:f0:28:84:3b:2b:48:f5:59:e6:7f:6f:fa:
                    d9:68:f6:86:6f:31:f6:a6:2d:ce:1d:44:b6:fb:29:
                    02:77:63:52:08:1c:16:17:93:0a:82:f4:b8:dd:0f:
                    b5:80:c7:7f:05:0c:83:60:fa:3f:3e:15:a3:2f:48:
                    95:13:ec:d1:99:86:b6:40:89:98:92:db:1e:ac:b2:
                    88:74:af:cf:89:bd:dc:53:87:3d:33:4c:0e:ed:4d:
                    cf:c9:78:cb:df:a3:18:5f:02:7a:4d:d4:1d:22:5e:
                    90:20:09:b1:45:c5:37:60:6a:ac:10:1d:2e:21:d3:
                    02:a7:60:fd:7d:d8:c8:be:fb:3a:27:64:88:0c:96:
                    4d:37:55:ba:3a:a1:b2:56:0d:b3:22:5b:ae:cd:18:
                    4d:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:2B:25:10:07:24:EE:C8:BB:4A:52:99:22:5C:D0:80:50:5F:2E:D0
            X509v3 Authority Key Identifier:
                keyid:2B:B1:38:27:42:35:75:14:1D:A0:F1:C5:7B:33:E7:DE:5D:7A:63:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2BB13827423575141DA0F1C57B33E7DE5D7A63A6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8a493be1-f064-49e6-949a-cb3ecbfc8f46/0/3130332e3233312e38312e302f32342d3234203d3e203539323837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.231.81.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7d:fb:72:9e:9b:dd:b7:7c:4f:bb:ea:46:08:59:79:db:da:36:
         64:6d:e6:0c:36:d9:5b:8f:1c:0c:ee:87:5e:61:b7:73:51:73:
         4a:d5:30:6d:11:d8:91:e5:70:3a:e7:a0:ae:94:d0:6d:ad:e3:
         50:61:1f:e5:95:51:e6:cc:5f:59:a8:46:1f:ab:d8:36:fa:4e:
         e1:d4:7a:cc:0a:cd:7b:08:77:1b:5e:1d:57:37:20:af:f9:d4:
         4e:d8:c3:cb:80:b0:05:69:56:8a:99:6e:28:ff:b0:23:bc:db:
         93:08:43:33:c6:27:5f:a0:03:c5:3b:ab:3b:cd:d3:73:77:8c:
         dd:ba:4f:e9:92:bb:fe:fd:3a:ea:5e:d6:57:a6:5d:75:cb:53:
         e6:b5:cd:99:a8:e1:81:ac:ef:89:4b:09:ea:36:07:07:f7:57:
         8f:87:1b:53:33:55:f5:60:55:99:6d:79:3e:7c:3c:5b:df:ca:
         39:ba:ea:f4:69:87:e7:e8:86:87:8c:d5:0a:f5:61:3c:87:4b:
         20:a7:11:1e:9a:91:b2:1e:15:b2:0f:e8:d7:11:f9:f5:26:e9:
         f6:59:e3:e5:08:49:9a:50:1b:de:1e:34:b3:74:eb:14:fd:3f:
         04:65:79:ac:a2:93:6e:9e:54:9e:58:2d:aa:9d:20:9d:02:73:
         a3:b7:45:3f
-----BEGIN CERTIFICATE-----
MIIHJDCCBgygAwIBAgIUacCCaDqKfV9RsapBqaG9t/zCTukwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMkJCMTM4Mjc0MjM1NzUxNDFEQTBGMUM1N0IzM0U3REU1
RDdBNjNBNjAeFw0yMTEwMDEwNjA1MzRaFw0yMjEwMDEwNjEwMzRaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQUE1QUZBNDU0QTkzMDM1NjRE
MzFEMjQ2ODZDODFBQzI5M0ExOUM0MEIyN0I2MTQ2OTg5Qzk0N0YxQ0EwQTI3QkRB
OTBCOTM5NEM3NjYzRkMyQTcyNDRBOTc1NDlDREZGOEU0NTcyQzhCOEEwQTExQjQz
Q0ZFQjBFMTRFODg4OTA1NTBEMDU5NjEzODEzNzMwRDlDNjMyNkQyREU5NEY1RDlE
NzBBN0Y0NDU1NTZFOTQwNjRGMEUyMzJGOThGN0Y0REU5RUIyRDlBQzU2MTBBQTY5
QkVEREYwMjg4NDNCMkI0OEY1NTlFNjdGNkZGQUQ5NjhGNjg2NkYzMUY2QTYyRENF
MUQ0NEI2RkIyOTAyNzc2MzUyMDgxQzE2MTc5MzBBODJGNEI4REQwRkI1ODBDNzdG
MDUwQzgzNjBGQTNGM0UxNUEzMkY0ODk1MTNFQ0QxOTk4NkI2NDA4OTk4OTJEQjFF
QUNCMjg4NzRBRkNGODlCRERDNTM4NzNEMzM0QzBFRUQ0RENGQzk3OENCREZBMzE4
NUYwMjdBNERENDFEMjI1RTkwMjAwOUIxNDVDNTM3NjA2QUFDMTAxRDJFMjFEMzAy
QTc2MEZEN0REOEM4QkVGQjNBMjc2NDg4MEM5NjREMzc1NUJBM0FBMUIyNTYwREIz
MjI1QkFFQ0QxODREM0QwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAqlr6RUqTA1ZNMdJGhsgawpOhnECye2FGmJyUfxygonvakLk5THZj
/CpyRKl1Sc3/jkVyyLigoRtDz+sOFOiIkFUNBZYTgTcw2cYybS3pT12dcKf0RVVu
lAZPDiMvmPf03p6y2axWEKppvt3wKIQ7K0j1WeZ/b/rZaPaGbzH2pi3OHUS2+ykC
d2NSCBwWF5MKgvS43Q+1gMd/BQyDYPo/PhWjL0iVE+zRmYa2QImYktserLKIdK/P
ib3cU4c9M0wO7U3PyXjL36MYXwJ6TdQdIl6QIAmxRcU3YGqsEB0uIdMCp2D9fdjI
vvs6J2SIDJZNN1W6OqGyVg2zIluuzRhNPQIDAQABo4ICMjCCAi4wHQYDVR0OBBYE
FJIrJRAHJO7Iu0pSmSJc0IBQXy7QMB8GA1UdIwQYMBaAFCuxOCdCNXUUHaDxxXsz
595demOmMA4GA1UdDwEB/wQEAwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vOGE0OTNiZTEtZjA2NC00OWU2LTk0
OWEtY2IzZWNiZmM4ZjQ2LzAvMkJCMTM4Mjc0MjM1NzUxNDFEQTBGMUM1N0IzM0U3
REU1RDdBNjNBNi5jcmwwdAYIKwYBBQUHAQEEaDBmMGQGCCsGAQUFBzAChlhyc3lu
YzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8yLzJCQjEzODI3
NDIzNTc1MTQxREEwRjFDNTdCMzNFN0RFNUQ3QTYzQTYuY2VyMIGiBggrBgEFBQcB
CwSBlTCBkjCBjwYIKwYBBQUHMAuGgYJyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby84YTQ5M2JlMS1mMDY0LTQ5ZTYtOTQ5YS1jYjNlY2JmYzhmNDYvMC8z
MTMwMzMyZTMyMzMzMTJlMzgzMTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDM1Mzkz
MjM4Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBABn51EwDQYJKoZIhvcNAQELBQADggEBAH37cp6b3bd8
T7vqRghZedvaNmRt5gw22VuPHAzuh15ht3NRc0rVMG0R2JHlcDrnoK6U0G2t41Bh
H+WVUebMX1moRh+r2Db6TuHUeswKzXsIdxteHVc3IK/51E7Yw8uAsAVpVoqZbij/
sCO825MIQzPGJ1+gA8U7qzvN03N3jN26T+mSu/79Oupe1lemXXXLU+a1zZmo4YGs
74lLCeo2Bwf3V4+HG1MzVfVgVZlteT58PFvfyjm66vRph+fohoeM1Qr1YTyHSyCn
ER6akbIeFbIP6NcR+fUm6fZZ4+UISZpQG94eNLN06xT9PwRleayik26eVJ5YLaqd
IJ0Cc6O3RT8=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:41 2024 by rpki-client on console-ams.rpki-client.org