Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c8e8ff49-f70a-4b6f-aae6-8c77769c5dee/0/3130332e3134362e3230322e302f32332d3233203d3e20313336303532.roa
File:                     3130332e3134362e3230322e302f32332d3233203d3e20313336303532.roa (raw, json)
Hash identifier:          pwarkqtUwPshEIArV/PJgTvNJHEVCDpGGED03gdHRms=
Subject key identifier:   71:FA:84:55:F5:91:A6:2A:9C:8E:C9:94:9D:C1:53:C4:D0:62:B7:D7
Certificate issuer:       /CN=BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981
Certificate serial:       1EAE3A3D5146FACF39266E45FE38449A123A51FA
Authority key identifier: BB:69:F1:3D:2C:ED:C5:F3:48:CE:A1:C1:BB:F6:E1:DC:24:B1:D9:81
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c8e8ff49-f70a-4b6f-aae6-8c77769c5dee/0/3130332e3134362e3230322e302f32332d3233203d3e20313336303532.roa
Signing time:             Fri 27 Aug 2021 02:05:41 +0000
ROA not before:           Fri 27 Aug 2021 02:00:41 +0000
ROA not after:            Sat 27 Aug 2022 02:05:41 +0000
asID:                     136052
IP address blocks:        103.146.202.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:ae:3a:3d:51:46:fa:cf:39:26:6e:45:fe:38:44:9a:12:3a:51:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981
        Validity
            Not Before: Aug 27 02:00:41 2021 GMT
            Not After : Aug 27 02:05:41 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:98:2c:09:99:7e:b8:7d:33:7a:4c:6a:0b:d0:
                    92:a8:51:a1:25:11:3a:03:e2:ca:40:9b:0c:83:4e:
                    76:d5:48:ba:cf:9a:93:36:bc:0b:29:55:e2:b3:70:
                    de:4d:c2:a0:35:d7:31:c3:e3:ae:11:b4:f5:57:05:
                    42:60:ed:a6:5e:f8:b8:ca:a6:ff:6a:b7:63:58:7e:
                    57:f0:cd:ee:d9:58:de:cd:e5:67:ac:27:94:10:0d:
                    22:c8:3f:c5:fb:99:6c:c9:ac:09:27:4b:d2:85:d8:
                    89:81:b6:de:ee:46:77:e1:a1:d0:6f:2e:df:6c:f9:
                    6f:41:ed:e1:c3:c1:db:67:4c:dc:50:92:a6:fd:99:
                    53:65:db:99:c3:a2:c3:6c:95:e0:39:5b:d1:27:d6:
                    8f:4d:df:a5:32:af:63:e1:10:8d:8c:15:73:70:86:
                    30:7b:2f:d2:7e:9c:07:b7:65:64:a2:b6:fc:ef:8f:
                    f5:67:76:f3:ff:ef:12:2a:03:64:d5:a4:b8:83:6e:
                    77:54:a7:a5:80:c4:1b:21:f2:04:31:69:b7:00:34:
                    c0:c4:db:b2:3c:6e:48:28:0a:85:f8:14:f9:79:d7:
                    8d:dd:50:e4:f1:5a:e8:75:26:f2:ab:eb:2a:49:b8:
                    4a:ec:5d:85:f6:01:02:b8:7b:80:cb:64:2c:93:af:
                    06:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:FA:84:55:F5:91:A6:2A:9C:8E:C9:94:9D:C1:53:C4:D0:62:B7:D7
            X509v3 Authority Key Identifier:
                keyid:BB:69:F1:3D:2C:ED:C5:F3:48:CE:A1:C1:BB:F6:E1:DC:24:B1:D9:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c8e8ff49-f70a-4b6f-aae6-8c77769c5dee/0/BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c8e8ff49-f70a-4b6f-aae6-8c77769c5dee/0/3130332e3134362e3230322e302f32332d3233203d3e20313336303532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.146.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0d:c1:8b:73:1e:00:70:26:bb:f9:73:5a:dc:f1:46:ee:45:f4:
         dd:c1:a8:40:1a:96:3c:4c:ad:c8:96:d7:87:59:35:b0:50:90:
         fa:5a:29:6b:5d:2f:31:f0:c2:54:57:17:28:8f:1d:98:c4:31:
         73:53:04:98:1c:69:1d:99:46:9f:26:52:18:84:9f:57:7e:bf:
         31:18:33:ca:f1:81:d8:5a:29:fb:26:c4:ab:2c:ab:65:49:0d:
         94:2d:b8:aa:45:f5:73:2b:9a:17:15:1e:0e:7d:40:3b:92:50:
         0c:b9:38:4b:a9:9d:bb:e5:cd:77:d9:28:cf:f1:fe:55:29:2c:
         e3:53:c5:d9:84:76:95:82:38:b2:40:6f:7d:27:91:a3:24:46:
         05:e0:dd:d7:af:39:aa:be:65:ea:e8:30:c6:65:ae:04:ba:f9:
         08:c3:6b:5f:bf:da:4e:73:3d:77:4b:b9:7e:af:cc:0a:eb:cd:
         20:07:09:aa:a0:21:aa:cb:9f:00:ce:56:d7:10:c8:19:da:86:
         ec:0e:16:24:54:b8:da:92:0f:6e:78:13:f2:0c:95:a5:30:d5:
         30:88:8a:87:3f:40:d3:b4:0e:60:13:77:d9:1b:4a:61:7c:7b:
         f4:4d:29:67:7a:de:c2:7a:da:6f:e2:3e:10:86:32:8e:20:d9:
         20:56:44:c6
-----BEGIN CERTIFICATE-----
MIIHKDCCBhCgAwIBAgIUHq46PVFG+s85Jm5F/jhEmhI6UfowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkI2OUYxM0QyQ0VEQzVGMzQ4Q0VBMUMxQkJGNkUxREMy
NEIxRDk4MTAeFw0yMTA4MjcwMjAwNDFaFw0yMjA4MjcwMjA1NDFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRDg5ODJDMDk5OTdFQjg3RDMz
N0E0QzZBMEJEMDkyQTg1MUExMjUxMTNBMDNFMkNBNDA5QjBDODM0RTc2RDU0OEJB
Q0Y5QTkzMzZCQzBCMjk1NUUyQjM3MERFNERDMkEwMzVENzMxQzNFM0FFMTFCNEY1
NTcwNTQyNjBFREE2NUVGOEI4Q0FBNkZGNkFCNzYzNTg3RTU3RjBDREVFRDk1OERF
Q0RFNTY3QUMyNzk0MTAwRDIyQzgzRkM1RkI5OTZDQzlBQzA5Mjc0QkQyODVEODg5
ODFCNkRFRUU0Njc3RTFBMUQwNkYyRURGNkNGOTZGNDFFREUxQzNDMURCNjc0Q0RD
NTA5MkE2RkQ5OTUzNjVEQjk5QzNBMkMzNkM5NUUwMzk1QkQxMjdENjhGNERERkE1
MzJBRjYzRTExMDhEOEMxNTczNzA4NjMwN0IyRkQyN0U5QzA3Qjc2NTY0QTJCNkZD
RUY4RkY1Njc3NkYzRkZFRjEyMkEwMzY0RDVBNEI4ODM2RTc3NTRBN0E1ODBDNDFC
MjFGMjA0MzE2OUI3MDAzNEMwQzREQkIyM0M2RTQ4MjgwQTg1RjgxNEY5NzlENzhE
REQ1MEU0RjE1QUU4NzUyNkYyQUJFQjJBNDlCODRBRUM1RDg1RjYwMTAyQjg3Qjgw
Q0I2NDJDOTNBRjA2N0IwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA2JgsCZl+uH0zekxqC9CSqFGhJRE6A+LKQJsMg0521Ui6z5qTNrwL
KVXis3DeTcKgNdcxw+OuEbT1VwVCYO2mXvi4yqb/ardjWH5X8M3u2VjezeVnrCeU
EA0iyD/F+5lsyawJJ0vShdiJgbbe7kZ34aHQby7fbPlvQe3hw8HbZ0zcUJKm/ZlT
ZduZw6LDbJXgOVvRJ9aPTd+lMq9j4RCNjBVzcIYwey/SfpwHt2Vkorb874/1Z3bz
/+8SKgNk1aS4g253VKelgMQbIfIEMWm3ADTAxNuyPG5IKAqF+BT5edeN3VDk8Vro
dSbyq+sqSbhK7F2F9gECuHuAy2Qsk68GewIDAQABo4ICNjCCAjIwHQYDVR0OBBYE
FHH6hFX1kaYqnI7JlJ3BU8TQYrfXMB8GA1UdIwQYMBaAFLtp8T0s7cXzSM6hwbv2
4dwksdmBMA4GA1UdDwEB/wQEAwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYzhlOGZmNDktZjcwYS00YjZmLWFh
ZTYtOGM3Nzc2OWM1ZGVlLzAvQkI2OUYxM0QyQ0VEQzVGMzQ4Q0VBMUMxQkJGNkUx
REMyNEIxRDk4MS5jcmwwdAYIKwYBBQUHAQEEaDBmMGQGCCsGAQUFBzAChlhyc3lu
YzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8yL0JCNjlGMTNE
MkNFREM1RjM0OENFQTFDMUJCRjZFMURDMjRCMUQ5ODEuY2VyMIGmBggrBgEFBQcB
CwSBmTCBljCBkwYIKwYBBQUHMAuGgYZyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby9jOGU4ZmY0OS1mNzBhLTRiNmYtYWFlNi04Yzc3NzY5YzVkZWUvMC8z
MTMwMzMyZTMxMzQzNjJlMzIzMDMyMmUzMDJmMzIzMzJkMzIzMzIwM2QzZTIwMzEz
MzM2MzAzNTMyLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQBZ5LKMA0GCSqGSIb3DQEBCwUAA4IBAQANwYtz
HgBwJrv5c1rc8UbuRfTdwahAGpY8TK3IlteHWTWwUJD6WilrXS8x8MJUVxcojx2Y
xDFzUwSYHGkdmUafJlIYhJ9Xfr8xGDPK8YHYWin7JsSrLKtlSQ2ULbiqRfVzK5oX
FR4OfUA7klAMuThLqZ275c132SjP8f5VKSzjU8XZhHaVgjiyQG99J5GjJEYF4N3X
rzmqvmXq6DDGZa4EuvkIw2tfv9pOcz13S7l+r8wK680gBwmqoCGqy58AzlbXEMgZ
2obsDhYkVLjakg9ueBPyDJWlMNUwiIqHP0DTtA5gE3fZG0phfHv0TSlnet7Cetpv
4j4QhjKOINkgVkTG
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:52 2024 by rpki-client on console-ams.rpki-client.org