Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/3130332e3136322e3135322e302f32342d3234203d3e2037353937.roa
File:                     3130332e3136322e3135322e302f32342d3234203d3e2037353937.roa (raw, json)
Hash identifier:          bRwN1Xmczk+V/AIBcAKJlMTXE62agmwKmLWeSlsF6io=
Subject key identifier:   83:36:92:94:3D:FC:50:9D:07:12:FE:1C:B5:DA:68:60:F1:93:F9:5B
Certificate issuer:       /CN=83906AB18A49EC17ADD841F2072FDC55E0EC22F6
Certificate serial:       4688F9DA6ADC3E7BA0B6D41C4159D3AFD2D57471
Authority key identifier: 83:90:6A:B1:8A:49:EC:17:AD:D8:41:F2:07:2F:DC:55:E0:EC:22:F6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83906AB18A49EC17ADD841F2072FDC55E0EC22F6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/3130332e3136322e3135322e302f32342d3234203d3e2037353937.roa
Signing time:             Sat 23 Jul 2022 17:14:10 +0000
ROA not before:           Sat 23 Jul 2022 17:09:10 +0000
ROA not after:            Sat 22 Jul 2023 17:14:10 +0000
asID:                     7597
IP address blocks:        103.162.152.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:88:f9:da:6a:dc:3e:7b:a0:b6:d4:1c:41:59:d3:af:d2:d5:74:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83906AB18A49EC17ADD841F2072FDC55E0EC22F6
        Validity
            Not Before: Jul 23 17:09:10 2022 GMT
            Not After : Jul 22 17:14:10 2023 GMT
        Subject: CN=833692943DFC509D0712FE1CB5DA6860F193F95B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:7f:fc:21:33:ae:2e:6a:bb:60:f5:d8:e5:77:
                    df:7c:35:02:fe:0a:42:df:90:f9:0d:54:9e:dc:c0:
                    c4:5b:14:de:55:f4:f5:fa:87:30:7c:12:97:1f:45:
                    da:a2:2a:06:49:9b:6f:ff:69:90:8b:eb:29:6e:c5:
                    b1:1b:8e:5f:2b:39:2b:31:de:d7:cb:ea:85:b4:e9:
                    bb:c7:43:56:65:c7:58:af:35:58:ab:6a:fb:a7:e5:
                    6e:5f:70:f8:62:9b:28:05:ff:a0:73:af:18:f4:54:
                    85:f8:d2:68:14:2d:3f:5f:dc:0a:63:f2:4e:91:35:
                    21:89:6b:2b:9e:f7:86:85:8c:0d:de:f0:a1:f5:e7:
                    f8:9d:13:20:33:3f:01:28:22:88:12:72:f2:db:c3:
                    67:46:40:22:30:ed:60:22:ac:80:78:61:76:44:49:
                    e4:bf:a5:d1:8b:c5:56:a9:21:95:cb:86:40:a3:13:
                    45:af:2d:36:fe:0c:a2:48:70:5e:41:91:1e:ce:e9:
                    94:c6:b6:29:b0:17:d8:59:d2:c6:16:81:f1:d2:f8:
                    24:de:65:94:63:b4:aa:cd:bc:88:93:ea:dd:e7:67:
                    46:ad:d7:6d:ca:ba:d3:47:3c:92:b3:83:fe:e5:c4:
                    97:c3:da:16:37:fa:68:25:5f:51:50:43:71:be:cc:
                    a6:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:36:92:94:3D:FC:50:9D:07:12:FE:1C:B5:DA:68:60:F1:93:F9:5B
            X509v3 Authority Key Identifier:
                keyid:83:90:6A:B1:8A:49:EC:17:AD:D8:41:F2:07:2F:DC:55:E0:EC:22:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/83906AB18A49EC17ADD841F2072FDC55E0EC22F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83906AB18A49EC17ADD841F2072FDC55E0EC22F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/3130332e3136322e3135322e302f32342d3234203d3e2037353937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.162.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8b:d4:19:7a:a1:ef:82:b0:f7:62:69:3a:f4:31:04:9f:70:16:
         56:97:15:e8:a3:d4:55:77:f0:c7:d6:8a:6d:0e:3a:77:6a:51:
         49:32:cb:96:f5:7d:02:4a:d8:3b:94:a9:73:f8:c9:73:3a:3f:
         17:95:72:29:1d:d7:bd:0d:2b:ff:b4:1b:c0:ab:a5:0c:99:ee:
         09:00:3c:4e:15:f8:f4:da:09:9e:ad:91:d2:bc:30:04:1e:4a:
         30:5d:e7:34:6f:94:cd:e8:27:55:3e:89:5b:a8:c6:30:2e:6f:
         05:0f:a3:22:10:52:b1:5e:05:7d:e5:97:df:0d:89:d9:33:da:
         ce:b2:9e:8d:24:a4:fe:f1:f9:92:f3:ce:0a:02:65:39:78:16:
         2f:bc:85:c6:28:7c:dc:37:7c:54:1e:54:c9:a6:14:99:32:f2:
         07:5a:97:68:9c:e9:2d:6a:62:6b:77:c6:d7:b0:fe:7d:15:66:
         f9:bc:a5:6c:45:13:fd:5c:ed:a5:ab:04:61:38:45:61:4a:94:
         96:94:1a:61:2b:31:ce:2f:41:72:ed:e4:ca:59:65:f1:1e:13:
         58:ad:e2:a5:99:a9:0e:91:57:8f:77:d3:62:35:0f:09:24:35:
         70:72:2e:94:60:8a:d9:9f:23:b7:6b:4a:48:5a:b6:55:bc:40:
         c1:a9:69:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:41 2024 by rpki-client on console-ams.rpki-client.org