Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/99905b8f-5c0a-4579-b4f7-09267b558968/0/3130332e3138342e34382e302f32332d3234203d3e20313339343335.roa
File:                     3130332e3138342e34382e302f32332d3234203d3e20313339343335.roa (raw, json)
Hash identifier:          V1vWIJnbvMK04s51Ak2yBfQ/tAxsgZAwYOIXl5hR5MQ=
Subject key identifier:   17:70:49:2B:7F:A4:AA:EB:89:DC:C8:32:50:26:AF:EF:B3:98:AD:33
Certificate issuer:       /CN=E810D41602DB2D5449939EA97EB71C350841BC5D
Certificate serial:       62F642667BD3EE3691FF78E6F494B31E88B1C212
Authority key identifier: E8:10:D4:16:02:DB:2D:54:49:93:9E:A9:7E:B7:1C:35:08:41:BC:5D
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E810D41602DB2D5449939EA97EB71C350841BC5D.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/99905b8f-5c0a-4579-b4f7-09267b558968/0/3130332e3138342e34382e302f32332d3234203d3e20313339343335.roa
Signing time:             Wed 18 May 2022 08:59:56 +0000
ROA not before:           Wed 18 May 2022 08:54:56 +0000
ROA not after:            Wed 17 May 2023 08:59:56 +0000
asID:                     139435
IP address blocks:        103.184.48.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:f6:42:66:7b:d3:ee:36:91:ff:78:e6:f4:94:b3:1e:88:b1:c2:12
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E810D41602DB2D5449939EA97EB71C350841BC5D
        Validity
            Not Before: May 18 08:54:56 2022 GMT
            Not After : May 17 08:59:56 2023 GMT
        Subject: CN=1770492B7FA4AAEB89DCC8325026AFEFB398AD33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:9e:43:88:2a:bd:a4:55:c6:96:be:2e:9e:eb:
                    fb:38:46:07:ab:04:42:a5:5f:23:a0:96:6b:67:65:
                    2b:79:ad:29:0f:be:fe:2b:90:4c:19:d4:27:fb:94:
                    6c:9a:f8:ba:d3:e4:05:9e:52:4d:ef:12:9e:7b:e7:
                    46:ae:4b:1a:8e:6d:f2:36:a5:d2:ec:f7:87:6e:ef:
                    e5:93:cf:91:04:d7:b1:b8:d8:14:67:49:0e:01:45:
                    e5:a4:39:10:25:ef:ed:95:07:60:96:68:80:e7:29:
                    0c:10:ea:7c:48:81:de:84:bb:13:35:64:bd:af:4a:
                    fb:9d:59:c3:2b:1f:74:14:70:ea:42:f2:11:7b:33:
                    0b:8b:c2:9d:9c:48:de:7d:1f:83:26:8c:8c:c6:37:
                    5d:3b:65:49:97:f6:24:9c:60:d7:7c:7c:3c:d5:64:
                    2c:3c:4c:a6:92:e1:05:c7:d3:b3:97:97:3b:c9:5b:
                    5f:e9:19:21:8d:d4:2a:ec:9e:88:1d:56:8b:8e:0d:
                    21:23:c8:60:1c:99:02:e6:db:b8:e2:9f:82:6a:11:
                    cc:23:21:24:e8:cc:53:81:20:8f:19:97:76:f1:76:
                    10:e2:e0:12:1f:33:ca:bf:7c:8d:05:b2:38:d8:ab:
                    8f:56:f5:f3:ca:32:c7:d3:c0:0c:25:f9:33:35:6b:
                    31:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:70:49:2B:7F:A4:AA:EB:89:DC:C8:32:50:26:AF:EF:B3:98:AD:33
            X509v3 Authority Key Identifier:
                keyid:E8:10:D4:16:02:DB:2D:54:49:93:9E:A9:7E:B7:1C:35:08:41:BC:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/99905b8f-5c0a-4579-b4f7-09267b558968/0/E810D41602DB2D5449939EA97EB71C350841BC5D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E810D41602DB2D5449939EA97EB71C350841BC5D.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/99905b8f-5c0a-4579-b4f7-09267b558968/0/3130332e3138342e34382e302f32332d3234203d3e20313339343335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.184.48.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3c:a7:10:85:94:63:61:a4:dd:4d:71:6e:a2:31:73:f0:a4:68:
         b0:91:8c:08:0d:8d:f3:09:0d:29:1f:c6:f7:b8:f3:be:30:bf:
         ef:bc:30:2a:4d:7a:84:b3:8e:29:2a:f6:e4:a1:7b:0b:6c:9b:
         6c:89:93:97:92:78:3e:8c:81:f4:23:e9:5f:f4:dd:bd:ae:df:
         83:4b:cd:28:d8:d9:fc:ab:62:a0:2d:90:ca:28:60:dd:f2:13:
         99:80:87:b2:cd:f8:2f:a4:18:26:7f:da:c3:9c:33:5a:da:66:
         c5:5f:2a:41:40:56:0d:2f:40:42:c2:40:61:f5:e7:dc:6a:ad:
         84:37:29:7f:f5:20:2a:b5:a0:fb:a9:a8:6a:b9:9c:a5:1e:f0:
         1b:b5:c5:f0:3d:88:a4:a5:11:5c:63:a5:24:21:17:7b:00:09:
         92:73:c5:68:b6:cd:49:2b:83:7b:f8:15:28:63:84:9e:3e:55:
         9d:97:e5:3d:59:d1:49:1f:35:2e:3d:1e:d7:f2:d4:74:57:5a:
         ff:b1:c9:e1:82:b7:92:79:06:56:d1:17:cd:6c:5b:16:8d:5c:
         f2:eb:0a:de:cf:0c:fe:d1:2f:1c:82:8e:14:9e:c5:36:46:98:
         ac:98:0c:7b:00:f1:33:6a:e4:78:7d:79:ae:f8:5d:4b:9f:c3:
         ae:49:e2:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:41 2024 by rpki-client on console-ams.rpki-client.org