Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/3131302e37362e3135302e302f32332d3234203d3e20313339393632.roa
File:                     3131302e37362e3135302e302f32332d3234203d3e20313339393632.roa (raw, json)
Hash identifier:          tLX4Ijb3ap3Z2CSV5XxKY1HgYCh6qfZEVZWop2iF+sg=
Subject key identifier:   00:64:83:D9:08:58:FE:CF:56:9C:93:AB:17:45:8E:68:26:EF:A4:36
Certificate issuer:       /CN=0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2
Certificate serial:       4DD50D84DB9D85F03DDD3042479D4755F9529C04
Authority key identifier: 0F:D0:44:D6:13:48:C8:8D:DC:FF:C4:F3:C3:3B:FB:C4:51:BC:17:A2
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/3131302e37362e3135302e302f32332d3234203d3e20313339393632.roa
Signing time:             Tue 26 Jul 2022 06:24:16 +0000
ROA not before:           Tue 26 Jul 2022 06:19:16 +0000
ROA not after:            Tue 25 Jul 2023 06:24:16 +0000
asID:                     139962
IP address blocks:        110.76.150.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:d5:0d:84:db:9d:85:f0:3d:dd:30:42:47:9d:47:55:f9:52:9c:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2
        Validity
            Not Before: Jul 26 06:19:16 2022 GMT
            Not After : Jul 25 06:24:16 2023 GMT
        Subject: CN=006483D90858FECF569C93AB17458E6826EFA436
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:3a:f7:5d:b5:23:33:1c:21:fe:fc:5d:09:86:
                    27:7a:ce:b8:c6:dc:25:31:34:e7:51:08:d0:ab:28:
                    25:3f:41:c4:68:76:a7:0c:c6:9c:dd:a3:b6:32:a0:
                    c3:03:f1:70:0c:c5:39:0a:6a:37:98:16:a9:c2:93:
                    a1:eb:ae:bf:e8:db:92:e2:88:f2:33:52:b4:16:e1:
                    fa:55:9d:cd:5f:fd:a4:37:f3:b3:5d:1a:19:33:88:
                    9e:f7:ed:ac:f3:ae:b5:82:a5:24:87:98:10:01:8f:
                    d8:9c:73:be:97:bb:eb:3b:a9:ad:92:cf:4c:c9:0f:
                    5c:9e:4f:6d:53:68:e6:d2:f0:84:2e:9d:c3:95:e4:
                    7e:0a:35:2c:be:70:9b:f0:48:9c:74:bc:2e:07:74:
                    be:8e:4d:ac:ca:69:64:75:48:b6:b9:3e:99:55:ee:
                    01:f1:cf:5f:2e:dd:85:ce:a6:e8:d5:05:d1:51:db:
                    05:c8:7c:0e:d7:60:fc:e6:82:1d:1a:de:d6:1a:75:
                    80:36:13:15:e5:3c:13:4a:e6:c1:99:71:19:8e:87:
                    ad:d4:63:86:36:e4:80:2c:bb:d6:87:df:56:be:11:
                    3e:16:31:57:91:6d:4e:29:7c:59:09:fd:29:8b:00:
                    23:24:fc:27:74:c8:d6:04:83:83:c4:d9:52:03:7a:
                    a2:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:64:83:D9:08:58:FE:CF:56:9C:93:AB:17:45:8E:68:26:EF:A4:36
            X509v3 Authority Key Identifier:
                keyid:0F:D0:44:D6:13:48:C8:8D:DC:FF:C4:F3:C3:3B:FB:C4:51:BC:17:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/3131302e37362e3135302e302f32332d3234203d3e20313339393632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.76.150.0/23

    Signature Algorithm: sha256WithRSAEncryption
         49:f2:a4:15:d9:bc:2a:69:58:eb:73:72:e0:2e:06:00:e2:09:
         c0:d0:73:15:b3:dd:86:82:1a:c1:3f:1c:c0:1f:8b:6c:d3:4d:
         e4:d5:5d:17:40:b9:b0:b9:ff:2d:12:eb:49:0f:3d:3a:e2:7b:
         4a:43:0b:1b:b0:e4:f0:b9:45:7b:d6:63:f6:b2:7f:78:d2:cf:
         04:4f:a3:77:88:f7:6b:95:b6:72:68:b7:c5:da:4a:f8:d7:22:
         b0:f8:56:64:3d:0c:73:da:4e:42:e6:d6:ff:dd:77:c6:94:54:
         ac:e6:b3:e8:e1:ff:b3:9a:2f:67:5b:03:0e:7c:e6:19:2a:21:
         fd:fc:ae:a3:78:5b:66:6a:78:f5:4f:12:1e:9a:8e:82:ef:ea:
         93:69:84:14:bc:bb:82:2c:b8:95:8a:53:48:f7:fa:59:d4:92:
         8b:42:74:2a:60:40:33:5b:a5:90:37:5b:28:fc:28:37:36:ea:
         6e:37:2d:20:12:0d:11:b4:36:64:b9:ea:12:ae:a3:38:5f:fd:
         76:d7:a6:19:5b:6a:7d:fa:1c:63:42:02:54:c6:d4:89:34:20:
         33:a2:ee:d2:e7:e3:36:8e:da:d1:d8:21:c4:07:e4:f2:e4:97:
         cb:b0:11:c9:01:2a:45:2b:1f:17:c3:2b:d2:ea:27:5f:a5:51:
         9c:81:a4:91
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUTdUNhNudhfA93TBCR51HVflSnAQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEZEMDQ0RDYxMzQ4Qzg4RERDRkZDNEYzQzMzQkZCQzQ1
MUJDMTdBMjAeFw0yMjA3MjYwNjE5MTZaFw0yMzA3MjUwNjI0MTZaMDMxMTAvBgNV
BAMTKDAwNjQ4M0Q5MDg1OEZFQ0Y1NjlDOTNBQjE3NDU4RTY4MjZFRkE0MzYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdOvddtSMzHCH+/F0Jhid6zrjG
3CUxNOdRCNCrKCU/QcRodqcMxpzdo7YyoMMD8XAMxTkKajeYFqnCk6Hrrr/o25Li
iPIzUrQW4fpVnc1f/aQ387NdGhkziJ737azzrrWCpSSHmBABj9icc76Xu+s7qa2S
z0zJD1yeT21TaObS8IQuncOV5H4KNSy+cJvwSJx0vC4HdL6OTazKaWR1SLa5PplV
7gHxz18u3YXOpujVBdFR2wXIfA7XYPzmgh0a3tYadYA2ExXlPBNK5sGZcRmOh63U
Y4Y25IAsu9aH31a+ET4WMVeRbU4pfFkJ/SmLACMk/Cd0yNYEg4PE2VIDeqLXAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUAGSD2QhY/s9WnJOrF0WOaCbvpDYwHwYDVR0j
BBgwFoAUD9BE1hNIyI3c/8Tzwzv7xFG8F6IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
YjU0OGJhZC03ZmVkLTQxZmQtYjQyZS03ODAzNzJjNDUyNTUvMC8wRkQwNDRENjEz
NDhDODhERENGRkM0RjNDMzNCRkJDNDUxQkMxN0EyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMEZEMDQ0RDYxMzQ4Qzg4RERDRkZDNEYzQzMzQkZCQzQ1MUJD
MTdBMi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhiNTQ4YmFkLTdmZWQtNDFmZC1i
NDJlLTc4MDM3MmM0NTI1NS8wLzMxMzEzMDJlMzczNjJlMzEzNTMwMmUzMDJmMzIz
MzJkMzIzNDIwM2QzZTIwMzEzMzM5MzkzNjMyLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBbkyWMA0GCSqG
SIb3DQEBCwUAA4IBAQBJ8qQV2bwqaVjrc3LgLgYA4gnA0HMVs92GghrBPxzAH4ts
003k1V0XQLmwuf8tEutJDz064ntKQwsbsOTwuUV71mP2sn940s8ET6N3iPdrlbZy
aLfF2kr41yKw+FZkPQxz2k5C5tb/3XfGlFSs5rPo4f+zmi9nWwMOfOYZKiH9/K6j
eFtmanj1TxIemo6C7+qTaYQUvLuCLLiVilNI9/pZ1JKLQnQqYEAzW6WQN1so/Cg3
NupuNy0gEg0RtDZkueoSrqM4X/1216YZW2p9+hxjQgJUxtSJNCAzou7S5+M2jtrR
2CHEB+Ty5JfLsBHJASpFKx8XwyvS6idfpVGcgaSR
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:08 2024 by rpki-client on console-fra.rpki-client.org