Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/3130332e3133342e35302e302f32342d3234203d3e20313338353938.roa
File:                     3130332e3133342e35302e302f32342d3234203d3e20313338353938.roa (raw, json)
Hash identifier:          bpCvFiyH2W+KJq0ea+eHHaIODQRxAa2FUThyl7L0Q6Q=
Subject key identifier:   A9:B1:B0:CE:B6:43:A8:7B:45:E8:88:D0:05:61:C2:B1:01:08:A7:66
Certificate issuer:       /CN=284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA
Certificate serial:       36A1278BB3E3CDDD58186DB35A4D687A06BF8227
Authority key identifier: 28:4B:8A:DA:D3:E0:98:E9:BF:BE:AC:6A:91:29:EF:A6:44:4D:F2:EA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/3130332e3133342e35302e302f32342d3234203d3e20313338353938.roa
Signing time:             Mon 10 Oct 2022 08:34:44 +0000
ROA not before:           Mon 10 Oct 2022 08:29:44 +0000
ROA not after:            Mon 09 Oct 2023 08:34:44 +0000
asID:                     138598
IP address blocks:        103.134.50.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:a1:27:8b:b3:e3:cd:dd:58:18:6d:b3:5a:4d:68:7a:06:bf:82:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA
        Validity
            Not Before: Oct 10 08:29:44 2022 GMT
            Not After : Oct  9 08:34:44 2023 GMT
        Subject: CN=A9B1B0CEB643A87B45E888D00561C2B10108A766
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:80:9d:06:b8:c1:dd:07:29:27:e8:a3:5e:ae:
                    5e:fb:1c:a4:21:6f:21:3f:6d:36:24:19:64:1b:b9:
                    ba:69:6e:0b:44:89:a0:31:3f:3c:a8:99:24:91:7d:
                    6b:fd:76:47:1a:88:07:72:8f:a2:92:c0:30:a5:71:
                    8d:78:31:9e:6d:37:7e:18:1d:93:48:f7:d7:bf:a5:
                    56:63:8f:4d:03:b5:58:1b:da:bf:16:6f:53:92:dc:
                    63:3b:5d:e6:7f:4c:9f:3c:e7:04:8d:c7:61:a5:75:
                    54:2a:b6:39:45:10:6a:56:29:bb:c2:18:36:b1:c1:
                    98:f5:7f:28:4c:68:e5:37:cc:02:9d:67:d3:c0:0e:
                    66:d1:05:22:36:b0:04:90:53:0d:09:70:04:c6:a3:
                    5d:97:70:cc:bc:ff:0d:6f:dc:72:d2:c5:b3:f4:b7:
                    0d:a4:dd:3d:07:27:7a:5a:d5:c0:80:59:85:4d:62:
                    e8:3e:93:64:9a:9b:bd:bb:86:bc:6b:61:87:ee:4e:
                    8f:b7:fb:39:82:2c:45:d8:2b:f3:bf:98:1a:55:af:
                    cd:82:e2:44:fb:29:98:1a:1c:6e:e2:2f:43:7a:a6:
                    fb:e5:33:81:8a:90:fc:49:67:5a:89:c6:68:2a:8e:
                    43:36:29:a6:25:af:6d:0d:49:42:13:33:e7:ec:89:
                    28:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:B1:B0:CE:B6:43:A8:7B:45:E8:88:D0:05:61:C2:B1:01:08:A7:66
            X509v3 Authority Key Identifier:
                keyid:28:4B:8A:DA:D3:E0:98:E9:BF:BE:AC:6A:91:29:EF:A6:44:4D:F2:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/3130332e3133342e35302e302f32342d3234203d3e20313338353938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.134.50.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:25:42:ae:74:f9:fb:b2:4e:99:fa:8d:ce:76:33:e2:71:a9:
         4b:64:70:7a:aa:1b:89:aa:db:2f:be:9e:11:7c:91:dc:59:54:
         dc:b1:b7:1f:ec:87:de:45:fa:5f:32:b9:bc:6a:40:24:fd:8a:
         99:95:83:bf:55:49:93:c8:fa:5f:29:b1:e3:97:88:a1:f4:6a:
         e0:82:5e:f2:b0:3f:39:d0:f1:c5:6e:a4:ac:b7:81:70:0e:93:
         c7:80:1f:e2:4f:d5:0e:cf:b8:38:68:38:9a:ab:c0:ae:a4:b4:
         ab:a6:e6:43:5c:79:1f:7a:d0:7e:f6:93:44:28:de:80:41:2b:
         19:26:c3:ef:65:9a:9a:79:92:38:d5:ac:ab:bb:92:20:85:42:
         8d:f1:ea:63:18:c1:72:71:e4:e3:9e:9f:84:08:f8:0c:27:90:
         fc:2d:a9:45:9f:4b:32:2f:08:8b:81:f6:28:80:50:66:db:25:
         31:d7:22:a5:a1:30:1f:91:33:ea:b8:6d:93:e2:06:ac:63:ae:
         5a:fa:b7:27:56:c0:f4:21:9c:e9:a3:d0:1f:df:6f:87:61:db:
         22:a6:ba:62:9e:12:26:96:5e:71:5d:08:ff:37:a2:c0:85:9f:
         1e:ef:5f:2b:cc:35:47:40:2d:cf:2f:1e:ee:09:d2:4b:a7:ab:
         a2:c5:e1:6a
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUNqEni7Pjzd1YGG2zWk1oega/gicwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMjg0QjhBREFEM0UwOThFOUJGQkVBQzZBOTEyOUVGQTY0
NDRERjJFQTAeFw0yMjEwMTAwODI5NDRaFw0yMzEwMDkwODM0NDRaMDMxMTAvBgNV
BAMTKEE5QjFCMENFQjY0M0E4N0I0NUU4ODhEMDA1NjFDMkIxMDEwOEE3NjYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwgJ0GuMHdBykn6KNerl77HKQh
byE/bTYkGWQbubppbgtEiaAxPzyomSSRfWv9dkcaiAdyj6KSwDClcY14MZ5tN34Y
HZNI99e/pVZjj00DtVgb2r8Wb1OS3GM7XeZ/TJ885wSNx2GldVQqtjlFEGpWKbvC
GDaxwZj1fyhMaOU3zAKdZ9PADmbRBSI2sASQUw0JcATGo12XcMy8/w1v3HLSxbP0
tw2k3T0HJ3pa1cCAWYVNYug+k2Sam727hrxrYYfuTo+3+zmCLEXYK/O/mBpVr82C
4kT7KZgaHG7iL0N6pvvlM4GKkPxJZ1qJxmgqjkM2KaYlr20NSUITM+fsiSifAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUqbGwzrZDqHtF6IjQBWHCsQEIp2YwHwYDVR0j
BBgwFoAUKEuK2tPgmOm/vqxqkSnvpkRN8uowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby85
Yzg1YzZiOS0zNGY5LTRhODUtOWNlYS1jMTZlOThhOGI1ZTAvMC8yODRCOEFEQUQz
RTA5OEU5QkZCRUFDNkE5MTI5RUZBNjQ0NERGMkVBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMjg0QjhBREFEM0UwOThFOUJGQkVBQzZBOTEyOUVGQTY0NDRE
RjJFQS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzljODVjNmI5LTM0ZjktNGE4NS05
Y2VhLWMxNmU5OGE4YjVlMC8wLzMxMzAzMzJlMzEzMzM0MmUzNTMwMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzMzM4MzUzOTM4LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ4YyMA0GCSqG
SIb3DQEBCwUAA4IBAQBtJUKudPn7sk6Z+o3OdjPicalLZHB6qhuJqtsvvp4RfJHc
WVTcsbcf7IfeRfpfMrm8akAk/YqZlYO/VUmTyPpfKbHjl4ih9Grggl7ysD850PHF
bqSst4FwDpPHgB/iT9UOz7g4aDiaq8CupLSrpuZDXHkfetB+9pNEKN6AQSsZJsPv
ZZqaeZI41ayru5IghUKN8epjGMFyceTjnp+ECPgMJ5D8LalFn0syLwiLgfYogFBm
2yUx1yKloTAfkTPquG2T4gasY65a+rcnVsD0IZzpo9Af32+HYdsiprpinhImll5x
XQj/N6LAhZ8e718rzDVHQC3PLx7uCdJLp6uixeFq
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:08 2024 by rpki-client on console-fra.rpki-client.org