Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/c8e8ff49-f70a-4b6f-aae6-8c77769c5dee/0/3130332e3134362e3230322e302f32332d3234203d3e20313339393333.roa
File:                     3130332e3134362e3230322e302f32332d3234203d3e20313339393333.roa (raw, json)
Hash identifier:          F2tQhfxh26pF67rL8guv9x3DxchDIv1W3jKXpx/Uvfw=
Subject key identifier:   29:23:39:25:50:4D:8A:7A:5E:88:3E:63:4B:E3:81:E6:25:95:3E:A0
Certificate issuer:       /CN=BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981
Certificate serial:       622B60C8F3D19DDE77110777EE41A0607D976377
Authority key identifier: BB:69:F1:3D:2C:ED:C5:F3:48:CE:A1:C1:BB:F6:E1:DC:24:B1:D9:81
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/c8e8ff49-f70a-4b6f-aae6-8c77769c5dee/0/3130332e3134362e3230322e302f32332d3234203d3e20313339393333.roa
Signing time:             Wed 09 Feb 2022 07:53:39 +0000
ROA not before:           Wed 09 Feb 2022 07:48:39 +0000
ROA not after:            Thu 09 Feb 2023 07:53:39 +0000
asID:                     139933
IP address blocks:        103.146.202.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:2b:60:c8:f3:d1:9d:de:77:11:07:77:ee:41:a0:60:7d:97:63:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981
        Validity
            Not Before: Feb  9 07:48:39 2022 GMT
            Not After : Feb  9 07:53:39 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:88:63:a1:15:4b:81:06:81:ec:34:3a:07:e7:
                    bd:74:95:de:67:61:f3:35:1a:61:93:c0:3f:48:39:
                    8a:cb:3a:63:d9:02:b2:d3:cb:d0:ef:a5:63:8b:1e:
                    b0:29:51:3c:df:84:9b:65:35:46:27:20:5d:4c:57:
                    54:0e:cd:64:05:97:cf:8e:c3:df:db:cb:f6:5c:18:
                    a6:93:8c:64:82:82:70:ff:e3:30:65:7b:87:64:62:
                    e3:35:d1:79:1f:fd:eb:83:75:a2:78:22:a9:c1:7d:
                    f1:00:37:dd:99:e7:2e:b6:1b:a1:63:9c:72:5c:90:
                    72:55:6b:24:96:81:32:3c:cb:90:01:70:a5:c9:a4:
                    85:59:07:af:05:6c:ab:a6:af:9c:ae:09:8f:76:9c:
                    79:2d:67:08:f6:00:9e:b9:11:f4:11:31:a7:d6:3b:
                    2b:8d:48:02:f5:e4:01:cb:27:cb:99:11:56:ac:22:
                    9f:16:2b:07:e1:c5:58:d4:fe:11:e9:c0:27:fb:bf:
                    93:13:b5:34:7f:28:2b:0c:1e:92:cb:6a:d6:e2:4a:
                    bd:00:80:b2:45:25:4f:8d:03:94:9d:8b:ed:2e:86:
                    e6:21:ae:af:fd:5f:a2:73:9c:8a:75:ca:f1:47:33:
                    94:f8:88:6a:4f:57:dd:ad:0c:07:af:25:9f:af:79:
                    ed:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:23:39:25:50:4D:8A:7A:5E:88:3E:63:4B:E3:81:E6:25:95:3E:A0
            X509v3 Authority Key Identifier:
                keyid:BB:69:F1:3D:2C:ED:C5:F3:48:CE:A1:C1:BB:F6:E1:DC:24:B1:D9:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/c8e8ff49-f70a-4b6f-aae6-8c77769c5dee/0/BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BB69F13D2CEDC5F348CEA1C1BBF6E1DC24B1D981.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c8e8ff49-f70a-4b6f-aae6-8c77769c5dee/0/3130332e3134362e3230322e302f32332d3234203d3e20313339393333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.146.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a8:ae:b4:b5:2e:71:60:97:be:06:21:b2:38:10:37:50:cb:98:
         94:93:57:49:f2:05:18:d7:01:38:54:3e:79:e7:c8:21:1b:17:
         44:e7:ea:04:a6:ff:fa:07:b5:8c:29:4c:f3:2c:f5:64:4e:ed:
         b7:3e:7e:4d:00:95:0c:58:a1:a5:95:d3:e6:cc:aa:39:e0:7d:
         84:fe:79:8c:de:cc:55:5a:3f:63:36:84:12:2a:79:b3:7d:62:
         1f:ab:9c:d4:28:3e:25:ee:27:dd:88:0e:35:5a:c7:35:5f:53:
         ff:1f:3f:40:d9:08:fd:e3:d4:a9:37:65:59:9a:31:5b:83:a0:
         3f:2d:ae:e1:e8:74:aa:22:de:49:fc:b4:95:1d:49:16:d6:9a:
         19:a3:bc:c7:31:b0:41:8c:50:76:3c:0f:3d:5f:47:03:a4:37:
         1d:f0:94:fe:29:b9:d4:bd:ec:af:8d:ff:df:4c:c7:ad:de:6c:
         e2:1c:51:8e:fe:ab:d1:5a:a3:12:ae:c5:a2:23:9b:0e:16:3a:
         bd:82:ec:79:0b:13:32:11:cc:64:2a:48:6d:b8:c7:4e:cd:dd:
         d0:9a:34:57:7f:45:fc:0a:6f:63:78:4c:7d:d2:48:57:2c:7c:
         c9:80:d6:cc:07:9d:1f:2c:0d:54:01:42:1f:27:21:9d:32:2a:
         36:36:15:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:21 2023 by rpki-client on console-ams.rpki-client.org