Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c13739e1-b5db-4734-838a-b0b580beb9f3/0/3130332e3137382e39312e302f32342d3234203d3e203539323733.roa
File:                     3130332e3137382e39312e302f32342d3234203d3e203539323733.roa (raw, json)
Hash identifier:          /IZ5Mu+SHjJ22bqPl4b8deaOGisJq7hrDPQqoNO/rmE=
Subject key identifier:   78:75:25:DD:26:EE:C2:83:50:E6:71:3A:AB:4B:4A:C2:F7:01:E0:4D
Certificate issuer:       /CN=411479424B4016269EB9E266CD48905F63DC9F0B
Certificate serial:       0E6D3E51E52F0B6FA6A3A6660D4CC51D262B2D13
Authority key identifier: 41:14:79:42:4B:40:16:26:9E:B9:E2:66:CD:48:90:5F:63:DC:9F:0B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/411479424B4016269EB9E266CD48905F63DC9F0B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c13739e1-b5db-4734-838a-b0b580beb9f3/0/3130332e3137382e39312e302f32342d3234203d3e203539323733.roa
Signing time:             Mon 21 Feb 2022 11:03:31 +0000
ROA not before:           Mon 21 Feb 2022 10:58:31 +0000
ROA not after:            Tue 21 Feb 2023 11:03:31 +0000
asID:                     59273
IP address blocks:        103.178.91.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:6d:3e:51:e5:2f:0b:6f:a6:a3:a6:66:0d:4c:c5:1d:26:2b:2d:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=411479424B4016269EB9E266CD48905F63DC9F0B
        Validity
            Not Before: Feb 21 10:58:31 2022 GMT
            Not After : Feb 21 11:03:31 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:9c:86:13:b6:ba:db:f2:75:67:77:fd:99:6f:
                    bb:b2:f4:96:22:e8:6c:28:16:75:4c:0f:36:b7:8e:
                    bd:ed:29:50:43:41:43:fa:70:9b:99:16:6e:c3:f0:
                    f6:5f:e7:ac:6f:87:96:a6:06:91:1b:1b:80:d8:c8:
                    c7:6b:f2:f2:df:53:9d:72:55:cf:0e:98:94:08:cb:
                    63:0f:5a:a6:8f:42:aa:a2:df:1f:44:49:93:45:33:
                    c1:74:7d:16:e0:a4:0a:7f:74:f2:92:bc:e3:e1:53:
                    ae:c5:fe:37:37:35:23:a2:3b:72:3d:bf:4c:9a:13:
                    a2:c6:b6:f8:2f:d9:b8:f5:c4:66:0a:57:32:76:90:
                    0d:19:2f:8a:1d:80:9d:84:21:a4:f8:bc:dc:1c:5a:
                    76:e6:99:23:d3:11:73:80:3b:e6:86:21:1a:85:72:
                    37:cc:bc:36:59:41:ac:9d:f6:9f:5c:cc:86:ce:0c:
                    dc:0b:e0:d9:2c:2d:8a:cd:5d:b0:fe:02:ea:f7:ae:
                    8a:15:c7:63:49:a0:87:eb:83:25:d8:61:0e:09:0a:
                    55:df:e4:e3:e9:14:03:1f:66:bf:5e:fb:63:84:7a:
                    5d:03:74:3d:f1:74:27:2f:da:d3:43:ac:93:e3:03:
                    bf:96:1d:23:55:1b:b5:d3:49:3a:ce:64:af:0d:06:
                    73:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:75:25:DD:26:EE:C2:83:50:E6:71:3A:AB:4B:4A:C2:F7:01:E0:4D
            X509v3 Authority Key Identifier:
                keyid:41:14:79:42:4B:40:16:26:9E:B9:E2:66:CD:48:90:5F:63:DC:9F:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c13739e1-b5db-4734-838a-b0b580beb9f3/0/411479424B4016269EB9E266CD48905F63DC9F0B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/411479424B4016269EB9E266CD48905F63DC9F0B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c13739e1-b5db-4734-838a-b0b580beb9f3/0/3130332e3137382e39312e302f32342d3234203d3e203539323733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.178.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4a:2f:14:61:7d:ac:3f:b5:c3:e1:b9:ff:e4:0a:c2:20:c1:34:
         d2:28:25:54:22:bd:f4:86:9d:77:a1:bf:7d:d8:12:18:fe:21:
         5e:12:ff:f7:8e:80:92:86:55:ef:30:6c:a0:3d:70:46:d6:5d:
         15:29:df:94:09:a7:c1:53:91:43:1e:94:85:fa:1c:26:9b:c2:
         f9:ae:5d:2a:db:c9:c5:5e:16:58:2b:a1:da:fe:17:a9:65:53:
         83:31:f2:a9:db:73:f4:e8:c1:5d:2d:fa:b8:90:88:e0:25:d4:
         fa:0e:90:e2:45:15:0c:d8:18:7d:b4:5a:1c:33:a1:c3:77:61:
         6d:2e:3b:ac:27:04:24:70:10:12:16:48:f9:6a:0f:ce:88:ad:
         8a:35:8b:04:8f:86:3d:a2:9b:92:21:de:51:06:27:bf:a9:ae:
         5f:d1:30:fb:f4:6a:cc:07:e7:b9:9f:0a:3e:da:eb:79:97:eb:
         39:50:a6:47:13:e9:8a:b3:06:1d:da:0d:5b:85:99:6d:c8:7c:
         0f:99:e1:13:98:b5:0b:99:ea:26:ab:19:54:5f:f8:c4:7a:bd:
         9d:59:d2:6a:d5:84:aa:69:c0:42:4d:a4:41:8f:f4:19:16:37:
         7e:ee:e0:ae:30:89:02:c0:1f:04:e2:9c:62:e6:4f:f3:d3:c3:
         60:92:9f:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:15 2024 by rpki-client on console-fra.rpki-client.org