Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/3130332e3234312e3137382e302f32342d3234203d3e20313335343737.roa
File:                     3130332e3234312e3137382e302f32342d3234203d3e20313335343737.roa (raw, json)
Hash identifier:          88MB7PnUW463uKuXnPwYfDUrDm/vpIwFc/AWL7moUaQ=
Subject key identifier:   78:95:F9:C3:66:39:7D:8F:E0:D7:01:75:0A:04:57:F7:B2:2E:E5:E1
Certificate issuer:       /CN=9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61
Certificate serial:       7F89D8711F24AB6113AECEE2C87E6D4CC8FD1903
Authority key identifier: 99:73:E5:D6:F7:F6:5D:CF:01:5E:9D:AF:CE:F3:94:F5:12:E4:FD:61
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/3130332e3234312e3137382e302f32342d3234203d3e20313335343737.roa
Signing time:             Thu 18 Aug 2022 05:00:00 +0000
ROA not before:           Thu 18 Aug 2022 04:55:00 +0000
ROA not after:            Thu 17 Aug 2023 05:00:00 +0000
asID:                     135477
IP address blocks:        103.241.178.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:89:d8:71:1f:24:ab:61:13:ae:ce:e2:c8:7e:6d:4c:c8:fd:19:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61
        Validity
            Not Before: Aug 18 04:55:00 2022 GMT
            Not After : Aug 17 05:00:00 2023 GMT
        Subject: CN=7895F9C366397D8FE0D701750A0457F7B22EE5E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:70:c9:55:8d:ea:34:17:57:b6:d8:05:c4:17:
                    f7:81:fd:bb:dc:27:9a:c7:44:7c:2c:d0:26:39:6d:
                    0a:4c:fb:66:71:bf:86:e8:71:51:f0:de:ad:1d:aa:
                    ea:b0:5c:cb:8d:0c:af:3b:8c:46:45:ef:35:84:67:
                    75:0f:e6:3f:d8:c3:39:a4:06:0b:94:99:2b:89:82:
                    f0:e4:2d:5b:df:a8:71:21:7b:b3:75:a0:e0:21:e1:
                    6c:9c:a1:ea:3d:a3:c2:e4:e5:1b:6c:5c:e4:36:d0:
                    c8:96:f9:d8:63:ad:97:9a:6b:0b:c4:35:d5:b2:60:
                    15:c5:eb:4f:fb:02:a6:c4:15:fa:c5:37:52:ce:0f:
                    4c:43:62:70:0a:96:6a:e3:38:c3:25:6f:c9:02:61:
                    7f:cf:35:1f:f5:e8:18:75:de:08:bb:31:14:da:3f:
                    d0:5b:13:b7:f4:8c:4b:da:c8:a5:d7:0c:8b:44:e6:
                    ce:06:1e:0b:29:af:11:6d:9d:55:67:74:21:25:fd:
                    ca:b4:78:49:dd:37:9d:78:98:00:f4:2d:b0:51:cc:
                    5f:e5:05:dd:05:94:b1:8b:67:51:34:56:6c:74:7a:
                    e5:06:1e:87:87:e5:62:4f:c6:58:61:9e:8d:3b:52:
                    2c:76:80:3b:95:56:6a:84:f2:a9:05:7a:c2:38:fa:
                    7e:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:95:F9:C3:66:39:7D:8F:E0:D7:01:75:0A:04:57:F7:B2:2E:E5:E1
            X509v3 Authority Key Identifier:
                keyid:99:73:E5:D6:F7:F6:5D:CF:01:5E:9D:AF:CE:F3:94:F5:12:E4:FD:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/3130332e3234312e3137382e302f32342d3234203d3e20313335343737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.241.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:26:ed:ff:8a:98:28:68:55:a2:53:1b:54:44:64:13:37:80:
         0e:31:2e:13:57:63:74:b7:d8:86:96:04:a8:ed:d6:12:bb:ca:
         f4:30:79:36:0d:bc:26:01:2e:b3:67:07:0e:53:f7:35:b8:2e:
         ea:1a:78:a4:3a:ac:7f:62:71:30:23:d6:40:72:f2:10:47:21:
         e4:dd:77:38:a1:fe:db:18:2e:a7:87:c8:5c:a9:c5:98:cb:83:
         6c:8c:f7:c1:82:c6:eb:76:5e:89:05:fa:45:7b:aa:cf:6f:be:
         32:7f:a7:00:bb:8d:d3:49:be:c9:a7:74:e6:26:55:73:9e:4d:
         7c:01:df:85:cc:3a:c7:36:36:e1:d5:6d:5c:e7:1c:56:92:29:
         9b:99:93:b7:f6:eb:7d:dd:e5:e0:d2:39:4e:b5:d8:f5:f1:84:
         3f:08:af:3f:97:bf:83:73:8c:0a:3f:23:c9:f5:95:f2:53:24:
         d1:8f:05:dc:0d:1b:97:f6:46:f0:9d:8d:0e:5a:d7:8f:1d:8e:
         c2:eb:96:19:a9:16:6b:9a:21:21:a8:bd:f1:d1:f8:19:63:87:
         23:d2:b6:4b:9d:9e:54:37:dd:61:89:54:11:c8:3d:f6:cc:5f:
         fd:04:b8:7b:75:82:ed:fe:8f:6a:98:fd:5f:88:cc:02:76:be:
         da:bb:16:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:16 2024 by rpki-client on console-fra.rpki-client.org