Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c13739e1-b5db-4734-838a-b0b580beb9f3/0/3130332e3137382e39302e302f32342d3234203d3e203539323733.roa
File:                     3130332e3137382e39302e302f32342d3234203d3e203539323733.roa (raw, json)
Hash identifier:          87xMSmIHqifGkgQB6A7W/NDXtQNQu8VMjMU23Bd8O2U=
Subject key identifier:   69:E5:D0:92:E2:87:44:05:EF:50:12:D8:D9:52:6D:22:74:F5:F8:68
Certificate issuer:       /CN=411479424B4016269EB9E266CD48905F63DC9F0B
Certificate serial:       696C85105B3F6DFD4A43F44541907B72EC9A7088
Authority key identifier: 41:14:79:42:4B:40:16:26:9E:B9:E2:66:CD:48:90:5F:63:DC:9F:0B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/411479424B4016269EB9E266CD48905F63DC9F0B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c13739e1-b5db-4734-838a-b0b580beb9f3/0/3130332e3137382e39302e302f32342d3234203d3e203539323733.roa
Signing time:             Thu 23 Dec 2021 18:01:22 +0000
ROA not before:           Thu 23 Dec 2021 17:56:22 +0000
ROA not after:            Fri 23 Dec 2022 18:01:22 +0000
asID:                     59273
IP address blocks:        103.178.90.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:6c:85:10:5b:3f:6d:fd:4a:43:f4:45:41:90:7b:72:ec:9a:70:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=411479424B4016269EB9E266CD48905F63DC9F0B
        Validity
            Not Before: Dec 23 17:56:22 2021 GMT
            Not After : Dec 23 18:01:22 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:97:e2:97:15:d7:99:1c:84:46:77:63:d2:92:
                    4b:45:53:28:67:0a:23:94:6c:48:e4:d8:af:8b:ce:
                    6a:ab:e0:86:f6:76:c7:ab:d4:dc:83:76:d3:37:78:
                    38:f7:e1:4a:87:c4:8b:a5:88:c3:db:79:3f:2c:24:
                    6b:0f:c9:b1:af:16:04:1a:85:bd:6f:96:af:87:05:
                    f3:b9:48:f5:96:a7:30:3d:35:c2:c3:68:c9:2c:5b:
                    cd:12:86:28:e2:b2:a1:0b:7b:ea:47:c1:e9:8d:4f:
                    36:c4:20:83:3a:c7:68:ed:ee:4a:ae:c5:4b:97:4b:
                    76:c5:cd:0b:5a:e7:56:d9:39:39:bd:7f:4f:f6:57:
                    5e:ce:24:3f:a8:86:7b:d7:3d:38:fb:24:fe:33:4d:
                    c9:aa:a8:d9:cb:94:5f:23:ae:4f:0b:b3:03:4e:10:
                    af:65:51:85:5e:f0:b4:5b:ad:71:c3:89:86:27:64:
                    1f:45:28:2f:5c:ce:70:5c:ae:54:d5:3a:85:f4:4a:
                    57:8a:27:bd:5c:a0:55:f0:b4:66:71:44:8b:c1:53:
                    a9:2d:8d:0f:42:a1:17:69:8f:e0:a6:e0:97:d7:13:
                    9a:d1:e3:2c:30:77:ae:3d:28:60:f3:2f:1a:bc:d8:
                    ba:c2:9c:19:36:65:e3:0b:b9:7d:6f:e5:de:56:1f:
                    e8:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:E5:D0:92:E2:87:44:05:EF:50:12:D8:D9:52:6D:22:74:F5:F8:68
            X509v3 Authority Key Identifier:
                keyid:41:14:79:42:4B:40:16:26:9E:B9:E2:66:CD:48:90:5F:63:DC:9F:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c13739e1-b5db-4734-838a-b0b580beb9f3/0/411479424B4016269EB9E266CD48905F63DC9F0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/411479424B4016269EB9E266CD48905F63DC9F0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c13739e1-b5db-4734-838a-b0b580beb9f3/0/3130332e3137382e39302e302f32342d3234203d3e203539323733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.178.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:06:ca:80:7f:fd:1b:3f:b2:e1:9d:33:f4:2c:64:0a:ce:68:
         fb:a8:f2:9e:d2:a9:bb:16:b5:ac:7c:0e:08:f9:32:b3:7d:92:
         e0:f5:0c:c4:c3:02:ee:91:64:29:80:f7:93:20:3c:8b:45:87:
         f3:b2:94:1e:c4:d9:2b:3a:41:77:1a:86:f9:ee:49:2d:df:ec:
         f1:c1:ee:56:15:90:a3:e1:41:ea:75:8d:7d:59:31:25:c3:cf:
         50:2b:db:bf:14:19:16:0a:95:8e:ab:5b:69:8d:2c:b1:68:00:
         c2:8f:2e:d1:14:3e:cb:3b:99:e4:11:1e:35:3e:5e:78:1a:50:
         98:08:64:6d:fe:56:aa:cd:c9:a8:59:5f:cb:96:42:d2:67:d7:
         c4:2e:50:f5:20:a1:c2:5c:e3:36:d6:ab:fe:d5:25:54:6c:3e:
         d0:a9:1d:1b:8c:8e:48:06:6b:af:b5:e0:51:3c:28:c5:eb:93:
         a9:7d:7a:a9:2e:b9:09:e4:bd:47:8f:94:69:f4:80:29:e0:fe:
         10:07:68:f6:4c:5e:73:65:08:10:9d:65:37:0e:d1:4c:fe:02:
         53:f9:af:4b:7e:5d:bd:5d:70:73:bc:86:55:b8:37:4b:c2:16:
         fc:06:6a:97:7e:cf:64:d1:d0:3d:40:6b:1e:92:6d:80:28:6d:
         b6:e4:fe:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:52 2024 by rpki-client on console-ams.rpki-client.org