Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/3130332e3133342e35312e302f32342d3234203d3e20313332383239.roa
File:                     3130332e3133342e35312e302f32342d3234203d3e20313332383239.roa (raw, json)
Hash identifier:          GM4tMNKhZ2Fl4ZVUQId63hFRh0bCsyHOOTWxMiztwEU=
Subject key identifier:   FB:1C:57:6B:54:6D:AE:93:B5:35:F1:AE:B7:D2:18:C3:B0:2B:79:1D
Certificate issuer:       /CN=284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA
Certificate serial:       0F85A4425F03031E6F0F7618D9CB649FE6030477
Authority key identifier: 28:4B:8A:DA:D3:E0:98:E9:BF:BE:AC:6A:91:29:EF:A6:44:4D:F2:EA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/3130332e3133342e35312e302f32342d3234203d3e20313332383239.roa
Signing time:             Tue 14 Feb 2023 01:13:25 +0000
ROA not before:           Tue 14 Feb 2023 01:08:25 +0000
ROA not after:            Tue 13 Feb 2024 01:13:25 +0000
asID:                     132829
IP address blocks:        103.134.51.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:85:a4:42:5f:03:03:1e:6f:0f:76:18:d9:cb:64:9f:e6:03:04:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA
        Validity
            Not Before: Feb 14 01:08:25 2023 GMT
            Not After : Feb 13 01:13:25 2024 GMT
        Subject: CN=FB1C576B546DAE93B535F1AEB7D218C3B02B791D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:6c:bf:72:88:af:d0:8f:50:c4:4d:1f:a6:85:
                    f5:23:c5:04:ea:bb:71:6c:e7:ec:e0:4d:1b:08:50:
                    88:e0:92:fe:c4:0f:95:b1:c9:d0:e9:c0:d0:a9:c4:
                    ee:ba:80:ae:f6:26:f8:af:45:29:34:a1:cc:92:b0:
                    95:ea:a2:2f:50:69:eb:2a:b5:d0:2f:49:85:97:52:
                    6c:bb:dc:6e:d5:df:a3:62:30:2d:ec:7f:36:35:ca:
                    e2:35:cb:69:b9:b6:fe:1d:8a:cc:cc:e3:81:be:3a:
                    1e:13:05:41:0b:3a:09:06:1e:90:fe:f6:50:ab:7b:
                    90:2d:47:ad:77:00:ff:e7:ef:f4:5a:70:a4:e7:3a:
                    bb:86:fc:df:8a:18:67:fe:bc:28:24:58:b5:56:3c:
                    c6:15:26:6a:1f:d3:65:8e:ca:5a:70:32:b1:c9:84:
                    41:01:a8:e1:a1:0d:b9:ea:ff:fb:07:09:4a:25:2e:
                    83:1f:03:25:e0:fd:32:89:c3:8d:ce:c6:98:7c:1f:
                    e3:b7:94:b5:36:15:0b:d9:f8:04:95:b7:a6:31:52:
                    e3:38:6f:51:17:47:75:8e:29:18:57:65:f5:32:12:
                    29:58:ac:2f:31:97:1a:12:35:b2:db:ab:83:ba:f7:
                    34:73:75:14:36:9b:10:e5:42:85:27:3c:a9:34:e4:
                    e9:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:1C:57:6B:54:6D:AE:93:B5:35:F1:AE:B7:D2:18:C3:B0:2B:79:1D
            X509v3 Authority Key Identifier:
                keyid:28:4B:8A:DA:D3:E0:98:E9:BF:BE:AC:6A:91:29:EF:A6:44:4D:F2:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/284B8ADAD3E098E9BFBEAC6A9129EFA6444DF2EA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/9c85c6b9-34f9-4a85-9cea-c16e98a8b5e0/0/3130332e3133342e35312e302f32342d3234203d3e20313332383239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.134.51.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:21:59:0d:79:a4:5e:82:17:c0:da:4f:b7:2c:2d:1c:a7:c0:
         ff:67:98:7d:04:ac:b1:51:f6:07:f2:99:78:87:94:e3:f0:84:
         a6:3b:05:87:66:f0:b4:41:11:ab:7b:9d:d6:46:61:c4:6a:07:
         79:c8:5d:45:9a:89:91:35:32:91:27:98:81:43:7f:cb:81:bd:
         29:0f:b7:81:a3:68:38:96:40:68:9e:bc:02:4b:cd:e5:56:04:
         f4:2d:f1:55:eb:64:ef:70:e2:66:01:f6:85:50:02:b3:34:27:
         c0:ce:6c:04:c3:b5:2a:b2:66:03:a0:6b:c7:89:47:83:53:cd:
         e0:ba:e5:8f:d4:b2:ce:19:e1:c3:0f:4f:66:70:e9:07:ee:01:
         93:ca:bd:e7:01:10:7f:6a:6c:e0:b9:95:61:86:43:2b:0e:19:
         7e:5b:aa:32:fa:93:4a:5b:58:7d:42:f0:ba:4b:27:52:2d:60:
         24:e0:97:af:9a:2a:68:f9:da:91:55:60:d0:b5:b5:f7:b7:6c:
         ff:dd:e7:95:a2:16:72:37:11:08:7a:67:12:25:d8:68:80:ba:
         3b:16:d3:18:62:b9:52:17:f9:27:81:23:68:58:f3:4c:98:f8:
         67:38:ad:12:fd:5e:3b:97:d4:9d:8e:3d:6e:bf:bd:79:c3:2e:
         02:6d:19:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:41 2024 by rpki-client on console-ams.rpki-client.org