Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/3130332e3136342e3137332e302f32342d3234203d3e20313339393536.roa
File:                     3130332e3136342e3137332e302f32342d3234203d3e20313339393536.roa (raw, json)
Hash identifier:          n1mqX1B2/QwqSwCLubjguodGm3MHXM+m+ReH9wowwz8=
Subject key identifier:   CF:3A:B2:83:08:8A:A8:88:FD:CA:FD:94:6A:77:79:09:FE:89:F4:08
Certificate issuer:       /CN=D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C
Certificate serial:       40A0BA1EBE57C277E54AA3FF663DDFFB84635F68
Authority key identifier: D7:85:2A:F0:5D:FB:B9:7A:CD:46:A3:73:99:F2:0D:EA:19:C2:EF:2C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/3130332e3136342e3137332e302f32342d3234203d3e20313339393536.roa
Signing time:             Fri 08 Oct 2021 13:56:29 +0000
ROA not before:           Fri 08 Oct 2021 13:51:29 +0000
ROA not after:            Sat 08 Oct 2022 13:56:29 +0000
asID:                     139956
IP address blocks:        103.164.173.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:a0:ba:1e:be:57:c2:77:e5:4a:a3:ff:66:3d:df:fb:84:63:5f:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C
        Validity
            Not Before: Oct  8 13:51:29 2021 GMT
            Not After : Oct  8 13:56:29 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:3b:e2:ed:1f:8e:d9:02:e3:ce:04:b0:eb:2c:
                    7a:12:c5:81:47:2f:b9:f8:e2:01:ba:1b:56:5e:37:
                    fc:9e:41:e4:05:13:a8:48:9b:7f:75:93:11:5c:d6:
                    22:ab:81:e8:b1:a2:d6:d9:d7:c5:00:21:17:18:73:
                    71:80:c6:af:bc:cc:c4:10:48:24:e6:69:9c:9b:d0:
                    f1:17:e6:bd:7e:ec:9a:26:98:97:7e:a6:ea:15:74:
                    0a:9a:a7:89:b1:6c:cc:76:ac:a9:ce:8c:81:4c:0f:
                    2e:37:dc:3d:57:3d:74:e2:33:a8:e3:82:ca:b4:72:
                    6d:0d:35:8a:58:47:db:bb:a2:96:9d:e7:1c:72:b0:
                    f6:3a:35:8e:63:0b:26:8c:42:12:7f:c5:de:a8:64:
                    02:71:4c:1e:db:56:69:2f:57:21:75:19:9e:5a:66:
                    9d:f0:a2:d0:ca:53:50:df:cc:a9:89:d5:95:dd:a4:
                    9b:90:29:07:7a:88:5e:97:52:1f:68:ec:21:a1:51:
                    c5:76:39:15:be:5e:12:55:01:6a:09:c7:83:ce:ae:
                    7b:81:47:ec:fb:fb:24:30:c9:3c:d7:05:67:9b:26:
                    34:05:7e:cd:64:a8:e1:fc:e9:0e:47:6e:77:4e:c8:
                    6f:ca:14:00:dd:26:5f:a2:86:55:e1:1e:91:18:4f:
                    e3:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:3A:B2:83:08:8A:A8:88:FD:CA:FD:94:6A:77:79:09:FE:89:F4:08
            X509v3 Authority Key Identifier:
                keyid:D7:85:2A:F0:5D:FB:B9:7A:CD:46:A3:73:99:F2:0D:EA:19:C2:EF:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/D7852AF05DFBB97ACD46A37399F20DEA19C2EF2C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ae89f1b4-ef63-4539-8455-98c671995ccf/0/3130332e3136342e3137332e302f32342d3234203d3e20313339393536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.164.173.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:6a:0d:ea:77:85:55:67:1e:a7:df:97:f1:22:8d:8b:12:71:
         b2:7c:b8:03:40:ec:33:65:5f:2c:5c:43:03:e8:1f:d6:8b:e5:
         8b:2b:56:5c:85:a8:a6:51:14:18:c2:77:15:45:c6:ab:2c:e6:
         5e:b2:e5:c7:1b:fa:26:8f:29:51:d5:e5:7b:47:db:07:55:4a:
         f9:84:e1:0f:4b:a6:1c:d9:de:bb:ae:ec:4c:69:58:56:e1:0f:
         82:e7:eb:32:27:b6:90:f7:58:be:87:db:fb:2c:f0:d2:29:2a:
         59:5e:15:bb:12:79:06:9e:5e:b6:7f:f4:bb:45:b1:a2:fb:7a:
         69:8d:48:74:ac:2e:a4:94:80:70:8e:14:ba:89:f0:5c:f5:ea:
         32:47:ff:a7:27:ce:bd:7d:af:0a:ca:90:0e:d1:28:7f:6a:09:
         d8:cf:de:aa:e6:b1:fc:92:6d:4e:0c:87:3c:72:e2:87:a7:8d:
         64:58:77:10:b1:13:de:e5:54:91:6a:d1:9b:52:fe:cf:65:ae:
         07:1b:5f:78:2d:4f:ba:98:01:63:6d:26:0e:71:14:d3:11:c4:
         e4:5b:ff:03:d7:13:31:bd:18:e8:f2:55:f6:de:55:af:4b:80:
         d6:8a:1c:8a:7a:67:73:27:8d:35:e5:be:e8:9a:70:a9:7b:1b:
         89:eb:da:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:15 2024 by rpki-client on console-fra.rpki-client.org