Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/3130332e3137392e3234392e302f32342d3234203d3e203338373630.roa
File:                     3130332e3137392e3234392e302f32342d3234203d3e203338373630.roa (raw, json)
Hash identifier:          2tS4UFM7vhG5pA9tmaDOmX1VytEmxlFXu/Ow3M2wtdo=
Subject key identifier:   22:14:06:90:C9:72:6D:38:E8:E3:EC:66:55:70:6D:BE:FF:65:E9:75
Certificate issuer:       /CN=70FE5658A7C2993DC505F75545A128384472227E
Certificate serial:       29E733D47536DBB28F90562E5F2C98F920A0B907
Authority key identifier: 70:FE:56:58:A7:C2:99:3D:C5:05:F7:55:45:A1:28:38:44:72:22:7E
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/70FE5658A7C2993DC505F75545A128384472227E.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/3130332e3137392e3234392e302f32342d3234203d3e203338373630.roa
Signing time:             Thu 10 Feb 2022 17:13:24 +0000
ROA not before:           Thu 10 Feb 2022 17:08:24 +0000
ROA not after:            Fri 10 Feb 2023 17:13:24 +0000
asID:                     38760
IP address blocks:        103.179.249.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:e7:33:d4:75:36:db:b2:8f:90:56:2e:5f:2c:98:f9:20:a0:b9:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70FE5658A7C2993DC505F75545A128384472227E
        Validity
            Not Before: Feb 10 17:08:24 2022 GMT
            Not After : Feb 10 17:13:24 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e1:25:5f:5d:34:e9:3a:06:52:85:50:2b:eb:
                    6d:88:ba:34:16:49:1a:14:09:1f:fd:34:3a:eb:7c:
                    f7:d2:ca:d9:11:8f:81:ce:32:a4:a1:30:fb:36:48:
                    15:84:19:55:ff:b4:ce:e1:00:89:28:21:2c:2c:b9:
                    04:05:c3:99:b5:b0:e5:11:73:14:72:35:13:78:c5:
                    04:b2:56:ba:fc:56:40:6c:79:47:13:fc:fc:35:c1:
                    78:d5:26:63:98:08:6d:2c:13:2c:39:2d:66:ea:d8:
                    91:7e:74:a3:07:b4:6c:70:9d:82:2a:4a:24:22:f5:
                    68:15:58:3f:0d:14:f5:47:5b:7d:5e:08:06:8c:f4:
                    98:df:46:81:07:ae:c4:3a:ec:1d:91:51:9a:93:1a:
                    1d:45:ef:6d:ef:25:58:93:34:ad:c3:1f:44:8a:84:
                    82:54:e7:14:f7:76:ea:25:eb:89:a4:01:2a:6f:ba:
                    70:6b:20:6e:94:aa:ca:50:76:0a:0a:11:c7:8a:a6:
                    64:de:04:9f:50:2b:cc:d8:3d:b2:be:7d:82:01:2b:
                    3f:6f:17:a1:5f:49:f6:f0:59:f7:7f:dc:9a:6a:5f:
                    2e:e6:14:1a:c5:fa:12:c4:cd:fc:52:0c:79:50:b3:
                    42:93:bd:6a:80:46:bf:3a:17:43:8d:3c:2e:1c:4a:
                    17:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:14:06:90:C9:72:6D:38:E8:E3:EC:66:55:70:6D:BE:FF:65:E9:75
            X509v3 Authority Key Identifier:
                keyid:70:FE:56:58:A7:C2:99:3D:C5:05:F7:55:45:A1:28:38:44:72:22:7E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/70FE5658A7C2993DC505F75545A128384472227E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/70FE5658A7C2993DC505F75545A128384472227E.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a95901cc-1b8e-4f3f-a3d0-3269f0e16c41/0/3130332e3137392e3234392e302f32342d3234203d3e203338373630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.179.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:44:12:f9:99:9f:c0:9a:f6:0a:b3:6d:4f:03:00:3a:9c:3b:
         ef:44:40:fc:9c:44:94:f2:d3:ac:92:6f:fb:b3:a8:72:52:2d:
         71:19:2d:8f:01:75:ae:85:b5:6d:06:6f:cf:35:5e:c6:08:04:
         0f:33:2a:7f:59:ea:6e:46:c7:63:1b:cb:65:9a:21:ed:5c:2d:
         48:62:55:7e:8d:e1:c5:1d:60:ce:cc:d9:f0:17:58:1f:c6:3f:
         73:ca:74:5d:61:6f:d3:66:d2:df:82:10:fc:b7:d8:05:2c:cc:
         2c:36:62:cb:f7:f3:7c:84:6f:b3:97:99:f1:51:a9:11:11:66:
         33:a3:3a:e1:2a:06:53:a1:61:eb:c6:33:19:6e:69:ca:3e:10:
         77:cd:9b:91:36:df:6b:41:58:a3:04:c0:ad:e5:76:41:59:48:
         3e:bf:1b:91:8f:c7:15:20:51:a4:f4:67:0f:1e:51:8b:ff:8f:
         20:f9:9b:bb:91:43:b3:8d:82:d8:a0:38:eb:c9:94:b6:a0:06:
         44:db:0e:08:86:4a:4d:3a:9b:de:80:60:4b:0d:3d:b3:05:52:
         6f:c8:1f:39:b2:04:21:68:da:b4:00:6f:e5:80:b2:b7:a7:97:
         38:f3:e4:49:c1:51:bf:81:20:b7:ba:ca:82:15:37:49:cc:f9:
         c7:06:7e:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:15 2024 by rpki-client on console-fra.rpki-client.org