Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/3130332e3137392e3234382e302f32332d3233203d3e203338373630.roa
File:                     3130332e3137392e3234382e302f32332d3233203d3e203338373630.roa (raw, json)
Hash identifier:          Tro9/0E+NQNGag51EtyWwZb4rBpgkkc5Fa06ZFEEHhc=
Subject key identifier:   2B:7D:29:3C:25:D5:A5:F2:0E:9E:B3:8B:36:5C:6D:97:CF:73:E5:1F
Certificate issuer:       /CN=70FE5658A7C2993DC505F75545A128384472227E
Certificate serial:       21D0D7301862C710F15F430880C9A05EA91EB499
Authority key identifier: 70:FE:56:58:A7:C2:99:3D:C5:05:F7:55:45:A1:28:38:44:72:22:7E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/70FE5658A7C2993DC505F75545A128384472227E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/3130332e3137392e3234382e302f32332d3233203d3e203338373630.roa
Signing time:             Thu 10 Feb 2022 17:12:47 +0000
ROA not before:           Thu 10 Feb 2022 17:07:47 +0000
ROA not after:            Fri 10 Feb 2023 17:12:47 +0000
asID:                     38760
IP address blocks:        103.179.248.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:d0:d7:30:18:62:c7:10:f1:5f:43:08:80:c9:a0:5e:a9:1e:b4:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70FE5658A7C2993DC505F75545A128384472227E
        Validity
            Not Before: Feb 10 17:07:47 2022 GMT
            Not After : Feb 10 17:12:47 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:0c:a5:09:3a:b2:94:b3:2d:f6:99:67:6e:21:
                    bb:b5:56:9a:28:76:8f:2c:86:94:2c:70:b9:6d:69:
                    b6:b5:0a:cd:aa:ff:ae:f0:af:a1:4d:af:16:32:14:
                    f2:33:9d:60:d8:cc:ac:aa:07:91:df:c2:a0:f4:ea:
                    d8:e0:d0:11:85:a1:8b:ac:2b:9f:02:1a:f6:e9:27:
                    25:f9:f4:c6:1a:ee:5b:9d:95:d4:96:28:b8:3a:51:
                    aa:98:62:8f:db:42:16:00:9a:af:1b:24:92:e3:29:
                    79:9f:22:c0:eb:a8:51:7d:3d:de:1c:5b:9c:c9:5f:
                    1e:e1:65:52:b7:df:88:d8:86:81:a3:2a:05:5f:42:
                    73:e1:28:bb:ac:37:b0:94:5d:51:87:87:2c:b9:66:
                    e7:6e:e4:6c:41:35:d1:03:ed:b2:5f:cf:bd:03:eb:
                    e0:e8:9a:cc:52:cb:07:d9:a5:fd:fa:e3:98:f9:68:
                    74:48:67:65:e5:dc:20:8b:77:fd:fc:4a:39:68:46:
                    b0:14:c6:c8:1c:6b:9a:ea:07:0f:81:f2:9e:d8:3f:
                    cf:8a:13:b2:af:59:25:f2:2d:21:62:9b:43:1d:50:
                    10:b3:5f:69:63:ba:6b:95:53:6a:ac:fc:7a:17:32:
                    ef:dd:5d:3e:a2:99:5b:ac:a6:65:1e:91:a2:17:71:
                    8b:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:7D:29:3C:25:D5:A5:F2:0E:9E:B3:8B:36:5C:6D:97:CF:73:E5:1F
            X509v3 Authority Key Identifier:
                keyid:70:FE:56:58:A7:C2:99:3D:C5:05:F7:55:45:A1:28:38:44:72:22:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/70FE5658A7C2993DC505F75545A128384472227E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/70FE5658A7C2993DC505F75545A128384472227E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/3130332e3137392e3234382e302f32332d3233203d3e203338373630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.179.248.0/23

    Signature Algorithm: sha256WithRSAEncryption
         86:0f:a8:bb:64:34:42:b3:12:9e:79:cb:63:c6:b4:05:c3:b9:
         6f:39:8a:27:b1:c7:fb:00:39:b1:a5:d3:01:ba:d8:e6:cb:f7:
         6d:ac:4e:35:bf:a1:81:07:3a:f3:70:e9:b1:d8:df:7f:df:bb:
         6c:1b:d3:e7:16:3f:07:a8:66:c9:e4:14:85:27:20:ec:60:ec:
         55:a8:03:88:11:c1:3f:67:55:1e:e7:e0:bf:15:d7:7c:24:21:
         c8:f1:01:e0:d9:6b:2f:30:cd:0a:4d:47:08:fd:21:a4:f0:14:
         a3:3d:07:68:4d:6d:02:20:aa:1e:34:b5:b8:8c:c5:89:14:51:
         1f:2d:0f:2c:e9:ad:74:fa:c4:88:ad:c0:fb:0a:a5:79:cb:d3:
         bc:45:56:30:d0:4a:64:6d:c8:ff:4c:33:b8:e1:2c:a0:82:9e:
         1e:2a:8a:66:4e:4b:f2:29:d0:b1:1b:23:3f:ba:f5:d6:01:f0:
         f7:24:0a:a6:e4:0b:5d:9b:8d:4e:6a:5e:cd:03:b1:8c:0f:70:
         27:c7:2e:ae:97:16:c1:00:89:81:ce:e8:80:ea:d4:3f:e4:39:
         ce:2b:c3:a6:36:37:a0:ef:e2:45:c2:9c:c0:72:64:6c:4f:60:
         cf:f7:af:9b:1e:24:d6:fd:f7:8d:a8:03:e8:fb:0d:04:f9:7c:
         c3:05:43:36
-----BEGIN CERTIFICATE-----
MIIHJjCCBg6gAwIBAgIUIdDXMBhixxDxX0MIgMmgXqketJkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNzBGRTU2NThBN0MyOTkzREM1MDVGNzU1NDVBMTI4Mzg0
NDcyMjI3RTAeFw0yMjAyMTAxNzA3NDdaFw0yMzAyMTAxNzEyNDdaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwOUIwQ0E1MDkzQUIyOTRCMzJE
RjY5OTY3NkUyMUJCQjU1NjlBMjg3NjhGMkM4Njk0MkM3MEI5NkQ2OUI2QjUwQUNE
QUFGRkFFRjBBRkExNERBRjE2MzIxNEYyMzM5RDYwRDhDQ0FDQUEwNzkxREZDMkEw
RjRFQUQ4RTBEMDExODVBMThCQUMyQjlGMDIxQUY2RTkyNzI1RjlGNEM2MUFFRTVC
OUQ5NUQ0OTYyOEI4M0E1MUFBOTg2MjhGREI0MjE2MDA5QUFGMUIyNDkyRTMyOTc5
OUYyMkMwRUJBODUxN0QzRERFMUM1QjlDQzk1RjFFRTE2NTUyQjdERjg4RDg4Njgx
QTMyQTA1NUY0MjczRTEyOEJCQUMzN0IwOTQ1RDUxODc4NzJDQjk2NkU3NkVFNDZD
NDEzNUQxMDNFREIyNUZDRkJEMDNFQkUwRTg5QUNDNTJDQjA3RDlBNUZERkFFMzk4
Rjk2ODc0NDg2NzY1RTVEQzIwOEI3N0ZERkM0QTM5Njg0NkIwMTRDNkM4MUM2QjlB
RUEwNzBGODFGMjlFRDgzRkNGOEExM0IyQUY1OTI1RjIyRDIxNjI5QjQzMUQ1MDEw
QjM1RjY5NjNCQTZCOTU1MzZBQUNGQzdBMTczMkVGREQ1RDNFQTI5OTVCQUNBNjY1
MUU5MUEyMTc3MThCRDkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAmwylCTqylLMt9plnbiG7tVaaKHaPLIaULHC5bWm2tQrNqv+u8K+h
Ta8WMhTyM51g2MysqgeR38Kg9OrY4NARhaGLrCufAhr26Scl+fTGGu5bnZXUlii4
OlGqmGKP20IWAJqvGySS4yl5nyLA66hRfT3eHFucyV8e4WVSt9+I2IaBoyoFX0Jz
4Si7rDewlF1Rh4csuWbnbuRsQTXRA+2yX8+9A+vg6JrMUssH2aX9+uOY+Wh0SGdl
5dwgi3f9/Eo5aEawFMbIHGua6gcPgfKe2D/PihOyr1kl8i0hYptDHVAQs19pY7pr
lVNqrPx6FzLv3V0+oplbrKZlHpGiF3GL2QIDAQABo4ICNDCCAjAwHQYDVR0OBBYE
FCt9KTwl1aXyDp6zizZcbZfPc+UfMB8GA1UdIwQYMBaAFHD+Vlinwpk9xQX3VUWh
KDhEciJ+MA4GA1UdDwEB/wQEAwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTk1OTAxY2MtMWI4ZS00ZjNmLWEz
ZDAtMzI2OWYwZTE2YzQxLzAvNzBGRTU2NThBN0MyOTkzREM1MDVGNzU1NDVBMTI4
Mzg0NDcyMjI3RS5jcmwwdAYIKwYBBQUHAQEEaDBmMGQGCCsGAQUFBzAChlhyc3lu
YzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8yLzcwRkU1NjU4
QTdDMjk5M0RDNTA1Rjc1NTQ1QTEyODM4NDQ3MjIyN0UuY2VyMIGkBggrBgEFBQcB
CwSBlzCBlDCBkQYIKwYBBQUHMAuGgYRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby9hOTU5MDFjYy0xYjhlLTRmM2YtYTNkMC0zMjY5ZjBlMTZjNDEvMC8z
MTMwMzMyZTMxMzczOTJlMzIzNDM4MmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzMz
ODM3MzYzMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEAWez+DANBgkqhkiG9w0BAQsFAAOCAQEAhg+ou2Q0
QrMSnnnLY8a0BcO5bzmKJ7HH+wA5saXTAbrY5sv3baxONb+hgQc683Dpsdjff9+7
bBvT5xY/B6hmyeQUhScg7GDsVagDiBHBP2dVHufgvxXXfCQhyPEB4NlrLzDNCk1H
CP0hpPAUoz0HaE1tAiCqHjS1uIzFiRRRHy0PLOmtdPrEiK3A+wqlecvTvEVWMNBK
ZG3I/0wzuOEsoIKeHiqKZk5L8inQsRsjP7r11gHw9yQKpuQLXZuNTmpezQOxjA9w
J8curpcWwQCJgc7ogOrUP+Q5zivDpjY3oO/iRcKcwHJkbE9gz/evmx4k1v33jagD
6PsNBPl8wwVDNg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:52 2024 by rpki-client on console-ams.rpki-client.org