Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a72bb871-018d-4d21-9913-fc946c38794f/0/3130332e3131332e3136372e302f32342d3234203d3e20313439393530.roa
File:                     3130332e3131332e3136372e302f32342d3234203d3e20313439393530.roa (raw, json)
Hash identifier:          F+7zyyCL4BxlJslaH8qJ0s47l6+2GhKEjuxrJX+nkmE=
Subject key identifier:   20:2F:3D:AB:6A:D2:26:A0:AD:E6:15:50:99:1F:67:17:45:DC:D3:1C
Certificate issuer:       /CN=40B28402A891E6B34EB9A2F6AF76CB17DA9B003A
Certificate serial:       6EB6873A4886B61BB07D289A3BEEAFA260BEF9E0
Authority key identifier: 40:B2:84:02:A8:91:E6:B3:4E:B9:A2:F6:AF:76:CB:17:DA:9B:00:3A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/40B28402A891E6B34EB9A2F6AF76CB17DA9B003A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a72bb871-018d-4d21-9913-fc946c38794f/0/3130332e3131332e3136372e302f32342d3234203d3e20313439393530.roa
Signing time:             Fri 09 Sep 2022 11:23:48 +0000
ROA not before:           Fri 09 Sep 2022 11:18:48 +0000
ROA not after:            Fri 08 Sep 2023 11:23:48 +0000
asID:                     149950
IP address blocks:        103.113.167.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:b6:87:3a:48:86:b6:1b:b0:7d:28:9a:3b:ee:af:a2:60:be:f9:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40B28402A891E6B34EB9A2F6AF76CB17DA9B003A
        Validity
            Not Before: Sep  9 11:18:48 2022 GMT
            Not After : Sep  8 11:23:48 2023 GMT
        Subject: CN=202F3DAB6AD226A0ADE61550991F671745DCD31C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:07:4d:b1:70:c3:ad:90:a4:1e:e6:7c:c2:c4:
                    73:8a:9e:ee:9d:33:eb:bc:a6:bc:5d:8c:3c:e4:d6:
                    fa:e4:fa:dd:c9:fa:d0:16:0d:f8:79:f0:d1:cc:36:
                    e7:6b:44:4b:80:05:df:cd:70:55:2d:02:ad:b1:9d:
                    02:02:4b:1a:4d:a0:05:81:e7:d6:3c:04:a7:c2:bc:
                    56:38:28:ed:d0:ab:6d:07:95:bb:7d:53:98:0d:89:
                    04:99:cb:12:cb:2d:c2:6c:4e:b3:6d:3c:42:39:dc:
                    5b:f6:34:95:e6:23:5d:53:20:e7:b5:0e:55:d4:6c:
                    5e:97:a0:eb:67:dd:cf:8b:d1:a2:2a:24:57:32:85:
                    92:7e:cf:d3:24:f8:8b:42:e9:f5:ce:71:49:37:71:
                    82:6d:13:fe:c6:03:01:95:b9:35:b4:bc:e0:ec:cd:
                    2e:7b:ce:23:7b:de:1a:e5:cc:74:f0:45:14:0b:89:
                    72:26:64:79:e8:88:e7:af:f1:84:71:5e:c9:b7:c5:
                    3f:58:77:c5:d1:1b:9c:00:21:93:a6:62:c6:61:7e:
                    c0:3c:23:48:da:52:aa:c4:a3:d5:92:0e:fe:53:c9:
                    c9:61:e1:a6:a0:d9:3f:db:dd:09:e9:47:17:9a:28:
                    b8:a0:01:3a:5d:2c:8c:00:ba:0f:34:9d:38:5c:be:
                    e7:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:2F:3D:AB:6A:D2:26:A0:AD:E6:15:50:99:1F:67:17:45:DC:D3:1C
            X509v3 Authority Key Identifier:
                keyid:40:B2:84:02:A8:91:E6:B3:4E:B9:A2:F6:AF:76:CB:17:DA:9B:00:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a72bb871-018d-4d21-9913-fc946c38794f/0/40B28402A891E6B34EB9A2F6AF76CB17DA9B003A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/40B28402A891E6B34EB9A2F6AF76CB17DA9B003A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a72bb871-018d-4d21-9913-fc946c38794f/0/3130332e3131332e3136372e302f32342d3234203d3e20313439393530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.113.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         81:ad:a4:dd:2b:b2:2b:47:5d:e5:f1:30:b0:66:8b:c1:c5:c0:
         de:09:f4:36:97:fc:6e:bc:7a:97:d2:e9:35:1e:4d:8f:89:52:
         03:55:13:7e:ea:48:82:a9:fc:ad:70:9b:48:e0:59:e8:46:0a:
         48:62:8f:a8:fa:10:f9:ac:2a:1c:b5:cb:f9:f3:c5:d7:0a:94:
         25:15:2f:1d:75:05:e4:4b:49:da:b4:18:92:8d:d2:6b:d4:bf:
         78:4d:bc:08:50:02:8a:8f:7b:03:a5:c0:f5:bd:8c:0d:69:ed:
         d9:75:95:8c:f8:a0:fd:f4:1d:6d:66:04:29:d2:a1:42:b4:39:
         a6:18:9a:4e:6c:c4:24:3b:da:04:11:37:1f:f0:94:2f:ed:f3:
         54:4d:08:56:69:f6:3a:53:21:12:30:d9:3f:48:a9:90:b7:19:
         a6:0b:03:ec:2d:73:d8:8d:6d:ca:2e:ec:33:10:58:5c:78:ec:
         7b:c9:14:a1:6f:ac:8e:48:a6:4f:54:8c:a3:55:29:9d:1b:a8:
         51:5e:e5:cf:13:b0:98:8f:78:a9:d6:0d:0f:35:33:38:03:22:
         ee:ef:05:51:86:d1:84:e5:3c:80:1d:f5:a4:b5:49:26:0c:50:
         fb:cd:79:35:74:94:59:9b:1c:99:9a:bb:3f:36:0a:56:26:39:
         4b:62:db:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:49 2024 by rpki-client on console-ams.rpki-client.org