Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/3130332e3132352e3131362e302f32332d3233203d3e20313338313032.roa
File:                     3130332e3132352e3131362e302f32332d3233203d3e20313338313032.roa (raw, json)
Hash identifier:          t3HJS3esc7RL8qFEe7DRxhua9cInlmP6QXN7/9YVsis=
Subject key identifier:   15:0B:A3:04:A3:13:78:31:24:F4:DD:A5:17:BB:4D:F2:55:4E:03:B4
Certificate issuer:       /CN=4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9
Certificate serial:       38A15AD251AC317EB74943631DCFD03D0DE29802
Authority key identifier: 4D:EF:BD:D9:85:4B:E8:D1:E2:8F:73:30:A0:B8:02:C3:EE:6A:D1:F9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/3130332e3132352e3131362e302f32332d3233203d3e20313338313032.roa
Signing time:             Mon 20 Feb 2023 02:38:51 +0000
ROA not before:           Mon 20 Feb 2023 02:33:51 +0000
ROA not after:            Mon 19 Feb 2024 02:38:51 +0000
asID:                     138102
IP address blocks:        103.125.116.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:a1:5a:d2:51:ac:31:7e:b7:49:43:63:1d:cf:d0:3d:0d:e2:98:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9
        Validity
            Not Before: Feb 20 02:33:51 2023 GMT
            Not After : Feb 19 02:38:51 2024 GMT
        Subject: CN=150BA304A313783124F4DDA517BB4DF2554E03B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:b0:b5:50:e2:ba:aa:c3:73:71:98:8e:94:fc:
                    23:a5:dc:30:87:76:9f:7d:63:c8:c3:4f:71:f5:d5:
                    89:2a:f9:b5:52:91:dd:3c:39:08:88:d2:24:1f:96:
                    db:c2:54:a0:14:5d:61:6f:7f:ea:2a:45:35:27:12:
                    6a:19:80:2f:db:a1:22:8c:a6:7c:8b:b7:ca:c6:24:
                    14:98:9d:79:55:2b:d7:19:ba:4b:da:81:7d:ca:4c:
                    33:61:c8:76:df:f4:57:16:e8:0f:d3:e0:fc:83:d4:
                    24:4b:b4:5c:49:d6:a1:84:f3:c4:bb:85:79:5f:12:
                    70:5e:54:0b:82:19:31:5d:5e:7e:f9:98:f8:77:92:
                    d9:60:a7:68:e3:d3:63:4a:17:92:c7:8b:17:71:99:
                    26:04:cc:e3:97:86:c4:f5:a2:f7:dd:9f:59:a5:49:
                    5e:85:56:44:14:31:ae:0c:fb:b8:bb:a0:8e:7e:f2:
                    b8:99:30:21:bd:ff:52:9f:9a:22:a9:11:5e:76:b7:
                    fc:2b:f2:85:bf:3a:e8:0f:cc:29:01:a6:c7:cd:06:
                    c9:59:93:a6:7b:f8:cf:75:fa:07:83:ed:c5:be:5a:
                    66:f9:04:be:64:4e:83:f9:91:b3:10:79:6f:ad:5e:
                    bf:d2:9d:ac:a6:2d:5b:6b:56:ea:00:f1:3d:9b:12:
                    a3:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:0B:A3:04:A3:13:78:31:24:F4:DD:A5:17:BB:4D:F2:55:4E:03:B4
            X509v3 Authority Key Identifier:
                keyid:4D:EF:BD:D9:85:4B:E8:D1:E2:8F:73:30:A0:B8:02:C3:EE:6A:D1:F9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/3130332e3132352e3131362e302f32332d3233203d3e20313338313032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.125.116.0/23

    Signature Algorithm: sha256WithRSAEncryption
         82:44:75:b2:89:e4:d1:4e:0d:c7:18:3a:d7:8c:59:68:82:47:
         60:f3:07:1e:b0:8d:da:83:61:02:b7:57:17:8d:ce:c1:61:5d:
         6d:19:0d:3b:de:82:75:57:77:76:c7:af:0c:f7:11:b4:1c:96:
         b5:1e:60:84:04:5b:84:ec:ea:03:97:30:13:91:f4:12:54:67:
         a6:47:16:f7:68:84:72:c7:34:49:a5:0a:f1:81:57:e5:d2:12:
         10:f5:59:07:ee:65:75:72:70:df:40:0d:fa:5f:29:9a:13:a7:
         e4:4c:3b:2f:23:92:3b:a6:17:64:57:ff:4b:f9:ce:ab:1a:d1:
         0d:60:1a:69:f4:e0:d8:b5:ae:21:71:76:2b:28:62:80:59:34:
         79:cd:ae:12:43:7c:74:de:bd:fc:37:4c:18:b6:2d:ff:e8:bd:
         24:4c:e2:e5:6c:32:5a:34:1b:85:ce:78:40:4c:0a:c6:de:e6:
         81:0d:97:7e:56:1f:3f:18:2c:31:6b:4e:d9:a1:04:29:5b:7a:
         02:72:d1:1d:02:1c:16:04:b3:ef:21:bf:32:96:29:9c:18:ae:
         de:cb:11:b5:87:b1:2f:09:8f:91:22:a6:f8:6f:2f:d7:26:90:
         43:a3:b4:72:67:e1:ef:12:46:ba:2c:60:06:c3:82:19:35:81:
         86:33:5b:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:08 2024 by rpki-client on console-fra.rpki-client.org