Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/3130332e3137392e3234382e302f32342d3234203d3e203338373630.roa
File:                     3130332e3137392e3234382e302f32342d3234203d3e203338373630.roa (raw, json)
Hash identifier:          x1bDjEEeWs68rKb6fGSPiC1iwru5TUNgfFmyvrdW4i8=
Subject key identifier:   DF:4C:AB:5C:9D:93:CB:6F:69:FE:A7:C5:D8:05:99:F1:46:7A:C1:C0
Certificate issuer:       /CN=70FE5658A7C2993DC505F75545A128384472227E
Certificate serial:       7F84583F01BB1ED2C5D896FE00718D534CCE20D2
Authority key identifier: 70:FE:56:58:A7:C2:99:3D:C5:05:F7:55:45:A1:28:38:44:72:22:7E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/70FE5658A7C2993DC505F75545A128384472227E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/3130332e3137392e3234382e302f32342d3234203d3e203338373630.roa
Signing time:             Thu 10 Feb 2022 17:13:08 +0000
ROA not before:           Thu 10 Feb 2022 17:08:08 +0000
ROA not after:            Fri 10 Feb 2023 17:13:08 +0000
asID:                     38760
IP address blocks:        103.179.248.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:84:58:3f:01:bb:1e:d2:c5:d8:96:fe:00:71:8d:53:4c:ce:20:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70FE5658A7C2993DC505F75545A128384472227E
        Validity
            Not Before: Feb 10 17:08:08 2022 GMT
            Not After : Feb 10 17:13:08 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:89:9b:d6:c4:6a:61:0f:de:6a:10:56:82:6e:
                    83:e6:86:a9:79:da:51:79:fc:13:2a:44:bf:1b:b7:
                    6a:ac:13:42:93:ae:fc:e7:17:2e:d3:ac:5d:d5:0c:
                    f2:bc:1b:80:d5:9d:32:00:b3:0f:a0:31:d4:36:3e:
                    f0:99:82:47:38:c9:08:f1:d5:93:b8:88:7c:46:5d:
                    b9:8b:01:ea:78:72:af:4b:7f:e0:19:1c:88:5f:14:
                    15:e1:8a:41:a2:44:c2:15:5b:6d:1f:59:5b:07:00:
                    1d:5f:c9:59:07:28:66:ce:74:60:f2:25:ba:e7:39:
                    69:ed:72:0e:67:6e:bb:42:18:0e:90:8e:44:c8:2b:
                    6f:cc:ca:84:79:a4:74:e9:0c:d4:47:51:f5:b6:d0:
                    36:f2:81:6f:31:b9:5b:d2:5e:ee:00:fb:3e:e4:c7:
                    d6:5f:d3:12:08:50:ed:2e:71:00:50:d6:99:5d:a4:
                    2a:ed:4b:fe:2e:47:d4:77:39:1f:70:e3:0c:31:06:
                    07:d0:63:d6:49:86:af:b0:bb:f8:d5:fb:f4:59:d6:
                    bf:e2:2a:02:f9:64:97:ca:9b:bc:5f:76:81:cd:8b:
                    82:e6:04:75:1b:80:66:ca:2a:93:64:4e:0c:ed:a7:
                    35:ec:85:69:62:6c:32:e7:7a:d9:34:eb:f3:3b:15:
                    a3:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:4C:AB:5C:9D:93:CB:6F:69:FE:A7:C5:D8:05:99:F1:46:7A:C1:C0
            X509v3 Authority Key Identifier:
                keyid:70:FE:56:58:A7:C2:99:3D:C5:05:F7:55:45:A1:28:38:44:72:22:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/70FE5658A7C2993DC505F75545A128384472227E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/70FE5658A7C2993DC505F75545A128384472227E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/3130332e3137392e3234382e302f32342d3234203d3e203338373630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.179.248.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:f3:bc:d5:99:9d:cb:49:e4:41:17:19:a0:2b:cf:ab:af:13:
         42:6f:72:bc:cd:29:d0:2c:6c:80:2e:42:72:b5:66:50:64:f5:
         c6:46:c3:6d:d2:ea:bd:69:22:c3:8f:95:7c:a8:c9:ec:e1:59:
         96:5e:d1:5f:9e:2d:92:5c:22:44:31:84:16:f1:22:bd:ab:d8:
         c2:d7:24:c1:08:ee:cb:42:73:79:b4:e4:99:65:1b:79:b5:45:
         c4:a3:07:10:e9:e1:be:7d:e9:b5:1c:40:e2:1a:6c:35:6c:44:
         0d:37:3c:42:be:9c:68:d1:ea:5f:02:2a:51:03:de:9d:8e:c7:
         f9:57:6d:14:8d:92:2b:cb:c4:c0:41:2f:d0:08:5b:56:ec:c3:
         05:11:10:25:86:3b:9d:ad:a9:ca:07:03:a6:25:04:b4:9b:0f:
         dc:63:07:09:c8:cd:05:96:cf:ca:3a:13:9f:93:a8:ca:dd:f4:
         f8:0c:fa:93:88:e3:4d:66:cd:f9:ca:18:88:36:0e:73:da:a8:
         ee:45:7b:88:28:88:fa:91:4b:ea:67:c2:14:bd:24:98:e0:0c:
         05:62:cd:4d:d3:48:c7:b4:39:57:35:69:51:f3:59:ab:6e:21:
         2e:d4:38:34:bf:72:2a:45:50:c6:5b:17:e5:35:9d:a1:7f:af:
         04:c2:13:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:52 2024 by rpki-client on console-ams.rpki-client.org