Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/3131382e3135312e3232332e302f32342d3234203d3e20313338313332.roa
File:                     3131382e3135312e3232332e302f32342d3234203d3e20313338313332.roa (raw, json)
Hash identifier:          wElx3747Rs5Rb63MWEmC0SIzSxAUfGybLbhA33mQea4=
Subject key identifier:   80:28:91:54:A9:7D:D3:E5:B8:CA:51:09:29:6B:35:9C:9B:DF:17:D1
Certificate issuer:       /CN=F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8
Certificate serial:       26A678D8D704E023F02310780318DE834A73BFFC
Authority key identifier: F1:B7:1C:4F:9F:FB:EC:16:8C:86:45:DF:F7:9B:A9:06:BE:B2:3F:E8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/3131382e3135312e3232332e302f32342d3234203d3e20313338313332.roa
Signing time:             Sun 28 Aug 2022 23:04:31 +0000
ROA not before:           Sun 28 Aug 2022 22:59:31 +0000
ROA not after:            Sun 27 Aug 2023 23:04:31 +0000
asID:                     138132
IP address blocks:        118.151.223.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:a6:78:d8:d7:04:e0:23:f0:23:10:78:03:18:de:83:4a:73:bf:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8
        Validity
            Not Before: Aug 28 22:59:31 2022 GMT
            Not After : Aug 27 23:04:31 2023 GMT
        Subject: CN=80289154A97DD3E5B8CA5109296B359C9BDF17D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:11:96:07:79:8e:87:a5:12:ea:11:50:e5:fc:
                    1a:e5:2d:f0:72:86:f7:43:41:2e:86:42:50:8e:7f:
                    67:68:2c:a8:fb:5c:8d:88:d4:8c:db:bb:f0:f6:0b:
                    4a:44:18:d7:8a:35:eb:a9:57:da:7b:f4:44:4d:2e:
                    fc:6f:f4:07:aa:27:22:56:bd:53:d6:f0:cd:31:de:
                    a6:4a:82:6b:f1:fc:93:e9:a4:6a:08:17:c0:8c:a9:
                    3f:26:e9:f7:f1:dd:6e:57:00:4b:ce:c4:3a:fa:e4:
                    dd:58:04:9e:ee:b8:dc:7a:09:b4:7c:90:31:68:99:
                    de:60:1c:84:77:39:92:c5:d1:3f:98:cd:c1:08:2d:
                    b8:4e:73:16:0e:cf:76:62:b0:39:a9:69:36:50:85:
                    e5:c0:be:7f:56:ff:b5:f9:e5:5c:10:61:55:56:48:
                    31:98:32:6b:4c:fd:8c:b8:3d:56:eb:72:1e:d5:c4:
                    fa:75:77:7c:9d:de:2c:fc:f2:39:73:79:e9:50:e2:
                    2c:3b:52:2e:9a:0c:a7:5c:41:8f:27:9d:47:0b:bf:
                    f2:1c:00:49:ef:31:7c:f8:21:18:cb:42:24:de:d8:
                    d0:3c:29:6f:65:41:0d:88:12:a9:6c:0c:0c:29:bd:
                    11:d3:22:ce:c7:2a:c6:bf:2f:e2:58:f6:dc:45:68:
                    c4:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:28:91:54:A9:7D:D3:E5:B8:CA:51:09:29:6B:35:9C:9B:DF:17:D1
            X509v3 Authority Key Identifier:
                keyid:F1:B7:1C:4F:9F:FB:EC:16:8C:86:45:DF:F7:9B:A9:06:BE:B2:3F:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/3131382e3135312e3232332e302f32342d3234203d3e20313338313332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.151.223.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:72:82:03:e6:60:36:45:c8:5f:47:43:a8:8e:0c:a6:69:6f:
         c4:dd:d2:2d:f1:dd:76:e5:1a:09:88:e2:b9:4d:0a:07:c8:c8:
         46:47:a9:b0:7b:3a:5b:5b:f7:3f:9f:98:4b:12:23:97:6b:bc:
         58:0a:0f:59:67:0c:bc:12:10:bc:b9:ea:0f:c6:16:ca:ba:ac:
         91:ca:39:a0:50:69:01:2c:f2:33:3d:1a:7b:a9:e9:dc:c9:29:
         a9:3e:89:b9:d8:13:eb:de:6b:88:6d:98:aa:63:75:49:d6:c4:
         9b:d0:7f:7e:ee:bc:d0:87:79:10:44:0e:12:30:38:27:28:d7:
         79:16:42:14:c5:4c:da:a5:2d:ec:58:ba:36:8d:4c:6d:5a:0b:
         d0:08:ef:aa:62:ba:75:e3:dd:cb:85:4a:99:88:e8:4d:22:ee:
         9e:27:da:5e:49:c9:cb:6b:8d:f0:62:4c:03:30:95:e1:e3:92:
         3f:17:6e:54:6c:1e:c0:26:32:17:44:ef:19:35:eb:fa:68:3c:
         9c:48:d0:fe:d0:a2:d5:18:fe:53:be:fb:b4:b4:d6:17:ed:92:
         20:23:b6:40:a6:77:dc:cc:47:d2:f7:49:66:58:9a:77:bb:85:
         39:b5:44:16:ef:b8:c2:15:39:47:a4:22:33:2f:58:7f:2f:91:
         e1:45:55:82
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUJqZ42NcE4CPwIxB4Axjeg0pzv/wwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjFCNzFDNEY5RkZCRUMxNjhDODY0NURGRjc5QkE5MDZC
RUIyM0ZFODAeFw0yMjA4MjgyMjU5MzFaFw0yMzA4MjcyMzA0MzFaMDMxMTAvBgNV
BAMTKDgwMjg5MTU0QTk3REQzRTVCOENBNTEwOTI5NkIzNTlDOUJERjE3RDEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpEZYHeY6HpRLqEVDl/BrlLfBy
hvdDQS6GQlCOf2doLKj7XI2I1Izbu/D2C0pEGNeKNeupV9p79ERNLvxv9AeqJyJW
vVPW8M0x3qZKgmvx/JPppGoIF8CMqT8m6ffx3W5XAEvOxDr65N1YBJ7uuNx6CbR8
kDFomd5gHIR3OZLF0T+YzcEILbhOcxYOz3ZisDmpaTZQheXAvn9W/7X55VwQYVVW
SDGYMmtM/Yy4PVbrch7VxPp1d3yd3iz88jlzeelQ4iw7Ui6aDKdcQY8nnUcLv/Ic
AEnvMXz4IRjLQiTe2NA8KW9lQQ2IEqlsDAwpvRHTIs7HKsa/L+JY9txFaMSTAgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUgCiRVKl90+W4ylEJKWs1nJvfF9EwHwYDVR0j
BBgwFoAU8bccT5/77BaMhkXf95upBr6yP+gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
NTdiOTBjYi04ZWJkLTRjN2ItOGMzMS0xMzNhOGI0ZWQ2OWMvMC9GMUI3MUM0RjlG
RkJFQzE2OEM4NjQ1REZGNzlCQTkwNkJFQjIzRkU4LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRjFCNzFDNEY5RkZCRUMxNjhDODY0NURGRjc5QkE5MDZCRUIy
M0ZFOC5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M1N2I5MGNiLThlYmQtNGM3Yi04
YzMxLTEzM2E4YjRlZDY5Yy8wLzMxMzEzODJlMzEzNTMxMmUzMjMyMzMyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTMzMzgzMTMzMzIucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAB2l98wDQYJ
KoZIhvcNAQELBQADggEBACJyggPmYDZFyF9HQ6iODKZpb8Td0i3x3XblGgmI4rlN
CgfIyEZHqbB7Oltb9z+fmEsSI5drvFgKD1lnDLwSELy56g/GFsq6rJHKOaBQaQEs
8jM9Gnup6dzJKak+ibnYE+vea4htmKpjdUnWxJvQf37uvNCHeRBEDhIwOCco13kW
QhTFTNqlLexYujaNTG1aC9AI76piunXj3cuFSpmI6E0i7p4n2l5JyctrjfBiTAMw
leHjkj8XblRsHsAmMhdE7xk16/poPJxI0P7QotUY/lO++7S01hftkiAjtkCmd9zM
R9L3SWZYmne7hTm1RBbvuMIVOUekIjMvWH8vkeFFVYI=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:16 2024 by rpki-client on console-fra.rpki-client.org