Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/3130332e3136322e3135332e302f32342d3234203d3e20313431363630.roa
File:                     3130332e3136322e3135332e302f32342d3234203d3e20313431363630.roa (raw, json)
Hash identifier:          EJrSNoAnG68FdOG7q7XOwkY7D8IWX+Va87C7+hhG4oI=
Subject key identifier:   5D:2F:43:CE:19:36:52:22:E3:26:8B:15:F0:E4:02:5C:53:59:5D:17
Certificate issuer:       /CN=83906AB18A49EC17ADD841F2072FDC55E0EC22F6
Certificate serial:       A53B6A8ABEA9F162499AD81CCAEF773E69F15B
Authority key identifier: 83:90:6A:B1:8A:49:EC:17:AD:D8:41:F2:07:2F:DC:55:E0:EC:22:F6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83906AB18A49EC17ADD841F2072FDC55E0EC22F6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/3130332e3136322e3135332e302f32342d3234203d3e20313431363630.roa
Signing time:             Sat 23 Jul 2022 17:14:45 +0000
ROA not before:           Sat 23 Jul 2022 17:09:45 +0000
ROA not after:            Sat 22 Jul 2023 17:14:45 +0000
asID:                     141660
IP address blocks:        103.162.153.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            a5:3b:6a:8a:be:a9:f1:62:49:9a:d8:1c:ca:ef:77:3e:69:f1:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83906AB18A49EC17ADD841F2072FDC55E0EC22F6
        Validity
            Not Before: Jul 23 17:09:45 2022 GMT
            Not After : Jul 22 17:14:45 2023 GMT
        Subject: CN=5D2F43CE19365222E3268B15F0E4025C53595D17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:1c:ba:64:06:f5:a0:d4:5a:cd:d7:58:b5:b9:
                    eb:21:20:ae:45:e3:9a:db:73:ca:aa:a8:df:49:d3:
                    95:ff:c0:68:ea:bb:bb:7b:cc:91:bb:30:c5:6f:f6:
                    3f:05:d6:9d:94:a9:fa:0c:24:b6:6e:1b:7f:ee:80:
                    ce:79:40:49:ef:b5:31:42:a0:8a:03:91:34:8f:82:
                    f5:d4:68:0d:2d:13:72:16:a3:ed:ed:7b:5b:a4:63:
                    74:85:0c:72:36:38:dc:e7:34:95:cc:84:d1:51:70:
                    f6:37:cd:89:a9:d8:95:37:6b:8e:5c:dd:be:f7:8d:
                    c4:02:32:0c:0b:10:f6:46:ce:e5:90:b8:50:f2:58:
                    c4:5b:72:c7:f9:b5:91:bc:6a:1f:6c:8a:8f:39:26:
                    c5:eb:21:87:14:96:93:d2:ec:5b:d0:5f:e4:53:79:
                    a6:0a:a5:38:9e:39:b8:ec:ce:ef:84:bd:52:8c:8e:
                    99:3b:76:72:2e:50:16:d4:3d:2a:80:ee:4d:ce:1f:
                    19:01:a6:f6:14:9d:5d:5e:e5:7e:6f:41:c0:47:db:
                    58:a9:06:b4:6f:60:6d:2f:90:bd:53:da:03:17:aa:
                    44:40:79:ee:b7:99:ba:85:54:22:16:c0:80:c8:89:
                    ca:c9:2c:43:54:07:2f:e0:dd:29:c0:b2:65:b6:f0:
                    e0:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:2F:43:CE:19:36:52:22:E3:26:8B:15:F0:E4:02:5C:53:59:5D:17
            X509v3 Authority Key Identifier:
                keyid:83:90:6A:B1:8A:49:EC:17:AD:D8:41:F2:07:2F:DC:55:E0:EC:22:F6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/83906AB18A49EC17ADD841F2072FDC55E0EC22F6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/83906AB18A49EC17ADD841F2072FDC55E0EC22F6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8ab3c03d-2e2e-4897-869b-21ce48601619/0/3130332e3136322e3135332e302f32342d3234203d3e20313431363630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.162.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:6a:ad:fb:c7:7e:c0:fa:ed:34:0b:4b:aa:00:ef:6b:24:db:
         89:a4:b7:d2:2d:1c:0d:65:ec:77:b1:82:d1:46:6b:73:10:06:
         f1:fa:15:5a:dc:4e:0b:c5:4f:33:d6:1f:60:03:b9:6f:5f:b1:
         2e:69:c5:33:4e:37:89:54:35:4c:42:ea:00:df:3b:87:91:a2:
         cb:e5:14:52:b8:20:3d:2d:62:ae:33:83:8d:0d:c2:d5:55:92:
         01:ef:bf:42:85:10:5c:5d:c7:67:a4:72:70:e1:c5:fd:18:99:
         09:48:24:a2:8d:c3:8b:a4:95:ff:b9:08:b9:8d:6a:0e:38:0f:
         e6:68:e7:e4:e1:45:cc:78:95:59:d8:6d:89:e3:31:74:98:35:
         4e:74:bb:43:56:c5:af:e2:34:44:e9:f6:f4:19:b0:d9:5d:7c:
         5c:0a:9f:3c:d7:47:a6:73:8c:91:03:a7:a4:90:da:c2:df:b1:
         f8:4e:2f:5c:02:bd:09:e8:cb:97:c1:8c:fc:ec:74:15:a1:70:
         4d:d0:47:bb:5e:fd:19:02:e7:06:48:10:d7:67:d2:e4:56:5e:
         1a:ef:76:ae:fe:ba:8b:5c:f1:1b:b1:0e:4f:22:1b:dd:9c:f8:
         a6:4a:bd:e1:1a:db:48:0a:f4:02:c2:ad:d6:38:0f:10:bf:a4:
         5b:b4:8e:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:41 2024 by rpki-client on console-ams.rpki-client.org