Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/3130332e3136322e3135322e302f32342d3234203d3e20313431363630.roa
File:                     3130332e3136322e3135322e302f32342d3234203d3e20313431363630.roa (raw, json)
Hash identifier:          Ram4fSO7FwNB7l3nThObmbf/S1AnvtEfimSHFt+axac=
Subject key identifier:   9E:1F:17:9C:4D:C2:CD:B8:A2:7B:87:BE:5C:9C:DE:70:A0:EE:07:23
Certificate issuer:       /CN=83906AB18A49EC17ADD841F2072FDC55E0EC22F6
Certificate serial:       3B83DEAE58EE0539FC81B09E436AB589D3E60F74
Authority key identifier: 83:90:6A:B1:8A:49:EC:17:AD:D8:41:F2:07:2F:DC:55:E0:EC:22:F6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83906AB18A49EC17ADD841F2072FDC55E0EC22F6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/3130332e3136322e3135322e302f32342d3234203d3e20313431363630.roa
Signing time:             Sun 24 Jul 2022 16:58:16 +0000
ROA not before:           Sun 24 Jul 2022 16:53:16 +0000
ROA not after:            Sun 23 Jul 2023 16:58:16 +0000
asID:                     141660
IP address blocks:        103.162.152.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:83:de:ae:58:ee:05:39:fc:81:b0:9e:43:6a:b5:89:d3:e6:0f:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83906AB18A49EC17ADD841F2072FDC55E0EC22F6
        Validity
            Not Before: Jul 24 16:53:16 2022 GMT
            Not After : Jul 23 16:58:16 2023 GMT
        Subject: CN=9E1F179C4DC2CDB8A27B87BE5C9CDE70A0EE0723
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c3:4c:ea:66:2c:60:43:a0:7d:ee:9c:48:3c:
                    5a:c4:3b:5d:0f:0b:82:7c:30:f5:79:ef:ec:b5:34:
                    29:eb:b7:42:fb:4a:63:00:3d:e2:bc:7e:c6:79:ce:
                    7f:5e:db:d7:f2:21:d8:c5:57:44:58:52:b0:0f:26:
                    eb:8d:d4:63:0a:45:44:62:de:32:7b:de:ff:36:89:
                    d7:5e:1b:54:a9:86:63:ab:fe:4a:fe:05:7b:35:87:
                    38:39:bd:c3:86:02:ca:ef:73:d6:d8:a5:56:1f:f0:
                    0d:05:fe:8c:1d:d8:cc:cf:7f:93:9e:8a:35:e3:2a:
                    e5:2c:75:1e:3f:10:4b:3e:85:9c:2d:8a:82:6c:0f:
                    a6:68:ad:da:ef:ca:cf:b8:71:90:48:d0:43:8c:3b:
                    94:74:28:96:e3:10:38:52:db:f0:05:ae:b1:75:e0:
                    7d:f4:8d:4c:d6:88:e8:b6:1a:5b:30:d2:4d:b7:55:
                    a9:4b:04:8b:27:48:ee:ae:01:d1:ca:d6:08:58:b1:
                    d1:9a:4b:40:c1:5f:d4:40:36:4f:7d:50:e2:31:ba:
                    22:19:d0:82:9e:62:06:1a:26:04:9f:53:bc:16:e9:
                    e9:9f:6b:b5:94:d5:7c:e7:b8:73:3c:e8:df:42:d4:
                    05:dd:b9:1d:0e:5a:b6:20:51:ff:0a:9b:12:88:c7:
                    37:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:1F:17:9C:4D:C2:CD:B8:A2:7B:87:BE:5C:9C:DE:70:A0:EE:07:23
            X509v3 Authority Key Identifier:
                keyid:83:90:6A:B1:8A:49:EC:17:AD:D8:41:F2:07:2F:DC:55:E0:EC:22:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/83906AB18A49EC17ADD841F2072FDC55E0EC22F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83906AB18A49EC17ADD841F2072FDC55E0EC22F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/3130332e3136322e3135322e302f32342d3234203d3e20313431363630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.162.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:bd:b4:28:a9:6b:5f:37:68:0b:e9:8e:ee:20:fa:d6:3a:e5:
         4c:f7:f9:3e:21:61:0c:d1:d3:cb:6c:3d:64:53:ba:fa:d3:a6:
         1f:75:54:42:cf:0c:99:b1:a8:b1:fe:6c:4d:82:1e:b2:3b:3c:
         34:4a:5d:25:98:3f:fb:01:2c:8d:d7:ec:78:45:27:c3:0b:4a:
         7b:04:2f:9d:55:c6:bd:53:26:0e:5f:f5:e5:59:e9:ff:fe:ac:
         54:f0:9a:64:13:ef:d6:5f:1e:85:33:0d:8b:7e:ab:85:0c:fb:
         31:ed:21:07:38:83:df:2f:3d:8e:b5:0b:de:c9:b4:a4:09:9d:
         6b:a2:96:91:bc:20:8c:17:3c:12:4a:6e:32:36:d3:e1:ef:bb:
         5b:08:e5:aa:16:7a:cd:fe:2b:94:3e:7d:bf:01:a4:99:1e:a6:
         9f:f1:9c:7b:bd:b4:1f:05:9a:5f:d0:78:7a:7c:f8:f7:04:6e:
         a0:d0:fb:7a:fb:fa:b0:7d:b8:a1:84:be:63:21:20:c0:c7:e3:
         85:4b:d6:3e:03:c3:c9:6c:6d:87:d8:66:ed:38:f3:93:cb:5d:
         5d:a5:98:53:45:f3:c0:dc:df:7d:fb:77:dc:4c:22:14:53:61:
         34:fc:f7:d3:c2:da:68:e7:35:66:b5:7b:9d:12:9c:2e:4e:b5:
         1b:35:17:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:08 2024 by rpki-client on console-fra.rpki-client.org