Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/9be9f8d8-6ef9-472f-84f0-bb97f1f50ce7/0/3130332e3137382e3132352e302f32342d3234203d3e20313432333839.roa
File:                     3130332e3137382e3132352e302f32342d3234203d3e20313432333839.roa (raw, json)
Hash identifier:          RraaiIoPUIUA29st3QW5awGERUFQZwFwwvCvQ6hGoaM=
Subject key identifier:   6F:D1:94:37:4A:CA:02:F0:20:82:EB:20:1B:42:EE:CF:EA:B2:4B:2C
Certificate issuer:       /CN=45C573917C39C2CCF38654E237AB8B4CF23929FD
Certificate serial:       33D8DAB41732C9F83F15421475A8A0EE0B1EACBA
Authority key identifier: 45:C5:73:91:7C:39:C2:CC:F3:86:54:E2:37:AB:8B:4C:F2:39:29:FD
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45C573917C39C2CCF38654E237AB8B4CF23929FD.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/9be9f8d8-6ef9-472f-84f0-bb97f1f50ce7/0/3130332e3137382e3132352e302f32342d3234203d3e20313432333839.roa
Signing time:             Tue 28 Feb 2023 15:00:00 +0000
ROA not before:           Tue 28 Feb 2023 14:55:00 +0000
ROA not after:            Tue 27 Feb 2024 15:00:00 +0000
asID:                     142389
IP address blocks:        103.178.125.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:d8:da:b4:17:32:c9:f8:3f:15:42:14:75:a8:a0:ee:0b:1e:ac:ba
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=45C573917C39C2CCF38654E237AB8B4CF23929FD
        Validity
            Not Before: Feb 28 14:55:00 2023 GMT
            Not After : Feb 27 15:00:00 2024 GMT
        Subject: CN=6FD194374ACA02F02082EB201B42EECFEAB24B2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:14:5b:cc:5b:02:e0:32:d6:f3:ab:73:26:6f:
                    4c:3f:54:32:eb:60:2a:89:7e:66:8b:e5:c2:8b:b6:
                    93:28:14:82:3a:98:6e:7f:00:d7:20:fd:aa:ec:e6:
                    9e:e7:f3:c0:cf:6d:54:7f:b7:a7:49:a5:6f:2d:f0:
                    91:91:d0:36:eb:25:ff:6d:80:6f:d4:d0:8b:d9:0d:
                    6a:13:25:a4:be:1f:28:19:45:a0:95:e7:71:6e:7f:
                    a1:22:78:40:f4:62:c5:0c:a6:b8:40:5f:28:ce:72:
                    83:a5:fe:2b:38:90:dc:1d:6a:14:43:08:07:d7:47:
                    07:06:2b:7d:1e:02:00:06:81:36:7f:f6:76:42:aa:
                    9c:6c:c3:19:9a:f5:71:27:70:9e:52:e5:a1:f8:01:
                    b5:c6:eb:87:f8:f9:a9:e1:a5:7e:29:e0:6c:b6:06:
                    c3:68:1d:34:cb:67:c1:e1:77:20:5e:fb:cb:ec:24:
                    c4:49:c9:0a:b4:26:e5:28:4b:d9:c0:c4:84:80:f5:
                    62:2f:aa:18:78:46:e2:90:c5:95:c0:e8:9b:ef:e5:
                    eb:24:9a:60:02:9f:11:48:12:e3:60:c7:56:a4:51:
                    61:d4:69:c8:f5:41:8e:3b:8c:34:16:00:06:bc:df:
                    5c:e9:ee:55:0c:d8:5f:d3:33:92:6e:06:bb:d0:7a:
                    d6:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:D1:94:37:4A:CA:02:F0:20:82:EB:20:1B:42:EE:CF:EA:B2:4B:2C
            X509v3 Authority Key Identifier:
                keyid:45:C5:73:91:7C:39:C2:CC:F3:86:54:E2:37:AB:8B:4C:F2:39:29:FD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/9be9f8d8-6ef9-472f-84f0-bb97f1f50ce7/0/45C573917C39C2CCF38654E237AB8B4CF23929FD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/45C573917C39C2CCF38654E237AB8B4CF23929FD.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9be9f8d8-6ef9-472f-84f0-bb97f1f50ce7/0/3130332e3137382e3132352e302f32342d3234203d3e20313432333839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.178.125.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a7:cb:6e:11:f0:ea:d2:45:45:fe:e9:92:e8:7f:99:99:52:e0:
         b6:e3:55:03:6d:5a:f1:c9:5c:40:7a:b5:45:2f:60:4a:05:ca:
         63:f4:ce:8a:15:ee:c5:d4:9f:91:35:fa:b8:f4:ea:c1:a3:6c:
         51:5c:cd:73:c1:31:78:c8:9c:2b:77:21:e7:61:b6:b2:f4:a7:
         c8:42:9d:15:24:0b:2a:a1:d8:b3:71:61:d9:ba:fa:59:9f:20:
         72:d1:08:ff:0c:42:47:4d:f1:57:69:bd:4a:8f:67:16:78:4c:
         c9:55:d9:d8:1c:07:54:ea:44:fe:ba:9d:d3:f8:b7:7c:03:73:
         aa:2d:f1:c6:db:5d:88:86:e8:d8:d7:2c:4a:14:d2:ec:8f:d0:
         5e:4f:a4:27:86:a2:67:40:98:03:66:74:d5:ed:d1:e0:e9:b3:
         12:a0:db:25:f5:64:e1:90:3a:8e:0e:d4:7f:65:53:be:0e:18:
         30:8d:f7:4c:28:31:16:25:2f:60:87:b5:ff:a7:16:58:5a:31:
         c6:ee:a0:42:5f:6c:8a:9e:24:e1:24:a3:0b:0c:bb:eb:a5:d6:
         17:b4:85:64:41:8d:a3:83:39:f6:e2:dd:84:9c:42:05:f3:c1:
         3c:f1:5a:65:9d:7e:f2:d3:2c:c3:5b:fa:e8:0c:d4:c9:cc:45:
         6b:56:79:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:41 2024 by rpki-client on console-ams.rpki-client.org