Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/3130332e3134382e31382e302f32332d3234203d3e20313339393730.roa
File:                     3130332e3134382e31382e302f32332d3234203d3e20313339393730.roa (raw, json)
Hash identifier:          ez58gkhyiw0HwAexQuFiFQ55DkRsRNYA4B4t8cFLR78=
Subject key identifier:   08:76:F4:36:62:7D:6F:2E:95:24:39:2B:77:16:5F:F8:AD:80:25:57
Certificate issuer:       /CN=8603B0F726A05AB356D10DB170BD8E27963AFE1A
Certificate serial:       0CD223721BE2310C4130C361CC2BC741F3824DC5
Authority key identifier: 86:03:B0:F7:26:A0:5A:B3:56:D1:0D:B1:70:BD:8E:27:96:3A:FE:1A
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8603B0F726A05AB356D10DB170BD8E27963AFE1A.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/3130332e3134382e31382e302f32332d3234203d3e20313339393730.roa
Signing time:             Wed 15 Dec 2021 07:35:57 +0000
ROA not before:           Wed 15 Dec 2021 07:30:57 +0000
ROA not after:            Thu 15 Dec 2022 07:35:57 +0000
asID:                     139970
IP address blocks:        103.148.18.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:d2:23:72:1b:e2:31:0c:41:30:c3:61:cc:2b:c7:41:f3:82:4d:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8603B0F726A05AB356D10DB170BD8E27963AFE1A
        Validity
            Not Before: Dec 15 07:30:57 2021 GMT
            Not After : Dec 15 07:35:57 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e3:07:14:90:85:ec:a6:1e:1a:fb:8a:61:60:
                    c2:32:35:23:09:4d:40:d5:66:0a:e3:8f:7f:5e:8b:
                    28:0e:52:fe:f8:4b:e3:b3:0b:3f:5b:8e:5b:56:87:
                    e4:90:04:9f:98:d9:17:8e:9f:bf:cf:f2:2b:f5:89:
                    6f:be:de:75:02:a6:2b:6e:28:9e:f4:c9:6b:96:f3:
                    41:18:7e:97:0a:af:46:ea:dd:fa:c4:19:22:c1:fa:
                    a3:38:fa:17:8c:58:58:41:13:f2:89:3d:05:c5:7e:
                    16:5b:6c:0c:1d:ca:38:09:46:4d:c7:e1:48:ea:e1:
                    9b:a1:f8:e4:eb:cb:ab:e9:31:d4:a0:1b:58:54:b8:
                    61:3d:b5:bf:1e:9c:42:54:40:4c:69:15:2c:38:a5:
                    f2:f1:6f:e9:a5:ff:72:e3:46:9c:23:01:ec:6b:88:
                    ef:62:07:95:b5:48:7b:1a:44:27:5d:6b:16:fa:56:
                    34:1a:9e:c6:de:24:9a:ce:a2:a3:1d:28:d7:67:80:
                    d5:d0:bc:13:2e:e3:64:b4:df:fc:5a:ac:f0:80:89:
                    16:84:ae:57:b3:c2:d3:9f:fd:52:5e:92:25:5b:6f:
                    ca:3f:be:d9:9d:ea:16:e1:09:30:cb:bf:a4:ba:bc:
                    99:02:d0:29:3d:a9:ba:1e:ed:d9:64:6d:f8:21:5e:
                    75:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:76:F4:36:62:7D:6F:2E:95:24:39:2B:77:16:5F:F8:AD:80:25:57
            X509v3 Authority Key Identifier:
                keyid:86:03:B0:F7:26:A0:5A:B3:56:D1:0D:B1:70:BD:8E:27:96:3A:FE:1A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/8603B0F726A05AB356D10DB170BD8E27963AFE1A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8603B0F726A05AB356D10DB170BD8E27963AFE1A.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/b7b87f6d-29a7-4b4c-81c7-5b4cbdb2cb6a/0/3130332e3134382e31382e302f32332d3234203d3e20313339393730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.148.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4d:30:c1:15:6a:b9:30:74:40:eb:5c:2c:a5:0b:0c:49:b9:21:
         60:dd:61:6f:d0:75:bd:c7:8f:33:3c:72:e2:11:a0:55:61:27:
         64:7b:6c:72:77:9c:d8:ce:c8:5e:c0:1c:1f:d3:91:08:7e:2e:
         33:08:dc:43:79:dd:10:bb:86:77:52:24:31:c1:25:0e:ea:38:
         87:58:e9:82:f2:63:43:3a:8a:3c:4d:a4:e3:a8:54:f0:c9:ce:
         09:4e:1c:0c:4d:e7:0b:cd:cf:29:3d:dc:9a:42:4e:a2:97:6b:
         82:5e:d0:a5:81:3a:0b:d5:53:78:fa:be:f2:f4:d8:9b:b9:c6:
         ad:bc:59:6d:92:15:f2:e3:e5:6d:86:1f:c7:a7:d1:2a:e6:30:
         c4:ad:67:43:cb:f0:b8:a0:a6:d7:11:dd:ba:00:06:8c:fb:fb:
         8a:6d:24:23:d2:9c:dd:f9:42:81:da:10:f0:1a:72:4e:70:5b:
         56:50:3b:3d:f0:6f:d9:c6:ab:30:49:77:ec:31:dc:e2:f4:d7:
         04:05:2f:d3:44:e2:da:4b:da:67:f4:1a:ec:e0:13:16:23:37:
         15:1f:c7:d4:82:94:38:73:8d:28:8f:77:e3:25:ac:8c:de:29:
         90:d7:ef:af:b7:c2:5b:45:cb:67:c6:f6:b2:fe:fc:19:45:17:
         86:58:69:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:15 2024 by rpki-client on console-fra.rpki-client.org