Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/3130332e3130382e3135372e302f32342d3234203d3e20313337333036.roa
File:                     3130332e3130382e3135372e302f32342d3234203d3e20313337333036.roa (raw, json)
Hash identifier:          w1r9Oizlri1oiD3M6NXGzTGoVb65efCPjyYQcH5PvYI=
Subject key identifier:   12:E3:06:CD:4E:4D:C7:C8:3B:65:86:BE:7E:92:C0:A6:F9:1C:49:04
Certificate issuer:       /CN=E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014
Certificate serial:       7501D69BA1A7798A9F6D09A7AC088AE59D9E557B
Authority key identifier: E7:26:22:AE:0F:69:B4:CD:AB:C9:CD:22:3B:3E:06:C7:DC:5E:10:14
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/3130332e3130382e3135372e302f32342d3234203d3e20313337333036.roa
Signing time:             Sun 28 Aug 2022 23:02:37 +0000
ROA not before:           Sun 28 Aug 2022 22:57:37 +0000
ROA not after:            Sun 27 Aug 2023 23:02:37 +0000
asID:                     137306
IP address blocks:        103.108.157.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:01:d6:9b:a1:a7:79:8a:9f:6d:09:a7:ac:08:8a:e5:9d:9e:55:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014
        Validity
            Not Before: Aug 28 22:57:37 2022 GMT
            Not After : Aug 27 23:02:37 2023 GMT
        Subject: CN=12E306CD4E4DC7C83B6586BE7E92C0A6F91C4904
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:93:da:97:c5:61:0a:37:74:63:ea:b1:f5:35:
                    ad:69:33:2f:e0:fd:6c:57:47:ab:5d:90:b1:56:62:
                    53:83:06:76:29:4a:dd:07:d4:7e:d7:3e:50:37:d9:
                    2f:d2:0b:da:85:c5:b7:a1:4a:64:13:41:f7:b5:12:
                    11:0c:6e:95:11:ad:88:d6:e4:f3:2b:5a:67:0c:d8:
                    55:ab:25:64:1e:d6:f9:17:ea:f5:08:6c:78:01:cb:
                    26:1c:3a:39:9d:1a:cb:49:a0:3a:02:78:d1:c3:be:
                    a2:27:39:5c:91:6c:37:bc:3e:e5:44:38:b4:6b:24:
                    db:28:08:a5:8b:8f:19:18:88:10:7a:84:04:35:af:
                    21:b7:2b:83:15:a1:3d:94:13:82:6a:b9:2b:96:71:
                    1b:90:cf:4c:34:74:dd:4e:9d:65:a4:55:05:78:b6:
                    13:c8:62:22:83:bf:33:f8:4b:89:07:af:0a:38:ac:
                    e0:77:c4:e5:a1:4a:31:a0:20:83:bd:ce:06:f7:49:
                    b9:99:e8:56:97:64:33:54:e1:4f:c9:05:10:44:b4:
                    30:b1:1d:c2:81:ef:8a:a9:05:ce:d2:6c:2b:6d:88:
                    20:62:20:9b:8a:96:35:66:39:80:f6:6c:38:81:b6:
                    28:4c:57:23:4b:16:7c:43:e2:2f:6c:e9:d4:a1:43:
                    39:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:E3:06:CD:4E:4D:C7:C8:3B:65:86:BE:7E:92:C0:A6:F9:1C:49:04
            X509v3 Authority Key Identifier:
                keyid:E7:26:22:AE:0F:69:B4:CD:AB:C9:CD:22:3B:3E:06:C7:DC:5E:10:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/E72622AE0F69B4CDABC9CD223B3E06C7DC5E1014.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/bd35bf79-e84a-40e0-8fd4-f169c186be8f/0/3130332e3130382e3135372e302f32342d3234203d3e20313337333036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.108.157.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:8a:91:a3:e6:81:05:82:bb:1a:1d:2f:de:a3:94:cd:49:1f:
         65:55:94:0d:2e:84:58:7f:1c:00:d2:b9:21:8d:33:80:a7:80:
         61:91:8f:0b:69:7b:a0:f9:55:d8:fc:c7:ed:7f:42:db:17:31:
         4a:4c:1b:7d:ec:cc:0e:53:2a:8c:8c:e2:bd:a6:b6:9b:f3:4e:
         89:76:bd:2d:f2:44:31:74:70:80:0b:24:e8:a5:1b:7d:dd:a5:
         9c:31:d4:28:c0:7c:e8:ee:eb:fd:27:2d:38:37:c1:75:39:03:
         40:1a:34:2a:22:06:ec:2e:e0:dc:0e:9a:9e:90:53:c6:10:fb:
         3b:6b:af:cc:23:cc:3a:13:84:97:67:41:44:f1:00:50:a6:d8:
         1a:cc:c7:fa:32:06:42:b8:f8:56:a4:68:8c:31:a2:57:79:b0:
         fa:c2:bf:74:0b:fd:30:6d:dc:39:9d:4e:3d:94:f3:6f:b8:de:
         5e:8c:da:87:f0:76:bf:43:bd:8c:52:c5:0a:17:4e:c8:87:0f:
         cd:d8:2a:cf:d5:33:7c:9d:ca:75:72:75:d1:b7:17:bc:d0:75:
         be:31:65:36:24:be:03:67:ad:40:6a:2e:a4:2d:14:73:bf:93:
         4d:7a:bc:76:e8:1c:0c:41:1c:16:72:63:c7:f3:fa:b6:47:e2:
         bc:a4:1e:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:52 2024 by rpki-client on console-ams.rpki-client.org