Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/3130332e3138392e39362e302f32332d3234203d3e20313439383834.roa
File:                     3130332e3138392e39362e302f32332d3234203d3e20313439383834.roa (raw, json)
Hash identifier:          2Fl4HbH5RS60bIkr3uq4PLNO4EVEQXb1WxVRtJJpe4g=
Subject key identifier:   99:4B:FD:6E:4C:A9:83:5D:3D:7E:CC:C1:A4:9C:BD:4C:41:F1:48:DB
Certificate issuer:       /CN=A3969B26389933D7D21F3A8D757CB9C5687740E4
Certificate serial:       579182E8A91689C0B5C18A9670FF2A3BB03AB6EA
Authority key identifier: A3:96:9B:26:38:99:33:D7:D2:1F:3A:8D:75:7C:B9:C5:68:77:40:E4
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3969B26389933D7D21F3A8D757CB9C5687740E4.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/3130332e3138392e39362e302f32332d3234203d3e20313439383834.roa
Signing time:             Mon 25 Jul 2022 07:29:17 +0000
ROA not before:           Mon 25 Jul 2022 07:24:17 +0000
ROA not after:            Mon 24 Jul 2023 07:29:17 +0000
asID:                     149884
IP address blocks:        103.189.96.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:91:82:e8:a9:16:89:c0:b5:c1:8a:96:70:ff:2a:3b:b0:3a:b6:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A3969B26389933D7D21F3A8D757CB9C5687740E4
        Validity
            Not Before: Jul 25 07:24:17 2022 GMT
            Not After : Jul 24 07:29:17 2023 GMT
        Subject: CN=994BFD6E4CA9835D3D7ECCC1A49CBD4C41F148DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e5:ee:36:64:d5:12:f7:56:5f:dc:9e:3d:df:
                    fb:c5:2d:6c:7c:e0:f4:4b:25:67:ec:63:12:24:31:
                    80:af:1f:12:a9:ff:c9:69:b2:4f:ca:d3:5e:62:47:
                    7f:e3:25:4c:d0:78:f7:83:88:50:62:5c:88:25:19:
                    87:b6:5a:e9:f8:13:57:5f:a7:af:d7:46:6f:a6:d4:
                    b5:66:fd:dd:1a:47:a9:76:5b:63:47:3e:f9:96:43:
                    e8:d9:94:ec:4d:9b:6c:4e:b3:28:fc:e6:46:29:e5:
                    9e:de:88:4f:6f:76:2b:2e:c0:b2:76:d1:c0:a1:4a:
                    f9:f4:7f:01:94:ff:4f:75:e5:59:a8:5c:60:0e:f4:
                    c4:22:5d:0c:4b:4b:50:4a:78:d9:a0:1b:cb:e1:57:
                    f0:10:bb:bb:77:ff:67:aa:a5:88:86:2f:9b:b7:19:
                    f1:95:27:71:fb:80:ce:a0:73:c5:ad:d8:46:31:d8:
                    4c:66:f0:b9:c2:be:b3:2c:74:f0:e0:a8:48:18:37:
                    29:1c:3b:59:25:e9:58:0c:aa:d8:71:76:e7:fc:e2:
                    7c:0f:bf:2d:31:c4:f4:0f:f9:9d:3c:dd:ee:b4:e5:
                    cb:36:71:cc:1e:a4:d5:e9:70:26:93:78:38:38:65:
                    fe:91:c6:91:08:b3:70:41:5b:06:66:81:6c:07:66:
                    2f:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:4B:FD:6E:4C:A9:83:5D:3D:7E:CC:C1:A4:9C:BD:4C:41:F1:48:DB
            X509v3 Authority Key Identifier:
                keyid:A3:96:9B:26:38:99:33:D7:D2:1F:3A:8D:75:7C:B9:C5:68:77:40:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/A3969B26389933D7D21F3A8D757CB9C5687740E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/A3969B26389933D7D21F3A8D757CB9C5687740E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a43336f8-e546-462c-8410-b7732b6c8015/0/3130332e3138392e39362e302f32332d3234203d3e20313439383834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.189.96.0/23

    Signature Algorithm: sha256WithRSAEncryption
         12:09:53:e0:c1:9d:23:43:a4:c4:16:50:e8:c4:88:58:8f:21:
         cf:da:7d:20:f2:af:70:97:e8:3d:d3:36:7c:33:28:27:33:53:
         90:f2:2f:ae:23:71:56:68:8f:87:6d:12:9f:95:c9:02:00:10:
         00:87:60:e9:06:29:fe:d6:b5:70:3e:46:8e:dc:d1:20:ec:ca:
         c4:b0:90:7f:16:1d:da:0f:b8:7c:1d:02:4d:5a:99:c4:0c:07:
         7f:ef:75:c8:57:cd:66:0b:9f:41:00:d5:2d:4c:98:d0:ef:9c:
         86:25:2c:77:28:a3:b1:97:1d:62:27:2a:92:20:37:46:78:cd:
         43:f9:44:e7:88:0f:d3:b3:e4:ab:eb:e7:86:ff:6e:ce:70:f0:
         32:56:27:88:a3:e9:ae:cb:db:08:b3:c3:7a:81:71:f8:68:51:
         36:23:cb:7a:55:8a:e7:31:1b:26:a8:76:c2:78:a2:3b:26:2c:
         87:8c:6e:04:33:be:af:0f:ae:ca:e6:d1:3d:c8:b0:58:ea:7c:
         f1:cd:db:81:f5:a4:83:c2:89:64:cd:83:cf:96:1c:33:9d:b4:
         f3:91:24:17:13:e8:3b:0b:13:ab:13:87:5b:85:c5:c2:e5:82:
         10:f7:5a:85:e0:29:1a:92:4b:a5:28:a7:7a:36:d8:74:76:19:
         1d:13:bf:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:13 2024 by rpki-client on console-fra.rpki-client.org