Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d275fd76-e8ee-46c8-9d82-b735b9f70431/0/3130332e39312e3134382e302f32332d3234203d3e20313530393139.roa
File:                     3130332e39312e3134382e302f32332d3234203d3e20313530393139.roa (raw, json)
Hash identifier:          MmF1D4tmVHUPLp7VB6hbFvOTGL3nL5cdCYxnWCan4bM=
Subject key identifier:   DE:3F:13:D4:5A:1A:81:7A:85:62:A5:22:3A:7A:76:2E:9D:B2:8B:B4
Certificate issuer:       /CN=781285AE1A8C595D354913D0B93F6982FCDFD898
Certificate serial:       6F0913EC0BF661D0A07F22678F1BF7728D30B068
Authority key identifier: 78:12:85:AE:1A:8C:59:5D:35:49:13:D0:B9:3F:69:82:FC:DF:D8:98
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/781285AE1A8C595D354913D0B93F6982FCDFD898.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d275fd76-e8ee-46c8-9d82-b735b9f70431/0/3130332e39312e3134382e302f32332d3234203d3e20313530393139.roa
Signing time:             Fri 31 Mar 2023 04:33:55 +0000
ROA not before:           Fri 31 Mar 2023 04:28:55 +0000
ROA not after:            Fri 29 Mar 2024 04:33:55 +0000
asID:                     150919
IP address blocks:        103.91.148.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:09:13:ec:0b:f6:61:d0:a0:7f:22:67:8f:1b:f7:72:8d:30:b0:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=781285AE1A8C595D354913D0B93F6982FCDFD898
        Validity
            Not Before: Mar 31 04:28:55 2023 GMT
            Not After : Mar 29 04:33:55 2024 GMT
        Subject: CN=DE3F13D45A1A817A8562A5223A7A762E9DB28BB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:19:e7:24:49:9b:04:23:3f:51:e9:10:6b:a5:
                    1e:04:b9:b2:de:e5:b1:fe:6e:8c:38:ec:fe:89:d9:
                    0e:ee:e3:c9:d0:c1:4c:35:33:a2:71:b2:2f:19:12:
                    bf:6a:a6:2a:e3:d7:95:6f:44:35:b2:49:66:39:41:
                    14:08:c1:a4:47:7a:67:c0:59:2f:b5:55:af:b4:97:
                    b1:38:11:2a:4c:0c:46:59:ac:98:45:ca:19:2f:b7:
                    2c:0a:a4:1d:42:19:1c:09:d2:2a:3d:80:38:43:ad:
                    33:4b:cf:38:40:e1:7b:ad:4d:09:8f:ca:50:6a:b3:
                    58:92:7f:25:29:04:11:f2:56:99:fc:ba:1b:f0:2a:
                    ef:fb:15:fb:11:19:c1:68:15:fe:4f:8a:1f:81:08:
                    7e:be:c2:1e:6d:28:42:3d:82:1a:db:0b:4e:dd:9a:
                    4a:23:2f:ee:3b:e6:f5:65:5a:93:d0:21:75:0c:61:
                    f7:b4:e2:17:c3:92:f3:6f:fd:d5:a3:f6:e0:03:cd:
                    cf:1a:68:1b:69:a1:13:19:0a:7b:31:e8:da:6d:e7:
                    cc:22:39:86:93:af:22:7a:c3:a4:ec:5a:54:1f:84:
                    0d:c2:67:31:0b:d7:9f:73:b4:f3:7e:8a:91:9e:06:
                    3e:8a:58:9e:c3:bb:aa:81:2f:7d:85:ec:23:86:95:
                    e7:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:3F:13:D4:5A:1A:81:7A:85:62:A5:22:3A:7A:76:2E:9D:B2:8B:B4
            X509v3 Authority Key Identifier:
                keyid:78:12:85:AE:1A:8C:59:5D:35:49:13:D0:B9:3F:69:82:FC:DF:D8:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d275fd76-e8ee-46c8-9d82-b735b9f70431/0/781285AE1A8C595D354913D0B93F6982FCDFD898.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/781285AE1A8C595D354913D0B93F6982FCDFD898.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d275fd76-e8ee-46c8-9d82-b735b9f70431/0/3130332e39312e3134382e302f32332d3234203d3e20313530393139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.91.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         46:ca:51:5a:f4:53:b6:58:8f:ee:e0:6a:fd:a2:fe:9b:39:0d:
         2b:15:17:04:a5:02:1e:9a:95:ba:ba:e3:73:7a:a8:d1:2a:74:
         5c:e3:84:59:4e:ad:72:24:72:51:ff:35:8b:3e:49:54:7b:d8:
         29:3e:f4:1e:a6:c3:78:1e:f5:f3:a8:db:97:3f:3a:a9:2b:bd:
         3b:68:8d:65:f1:af:71:77:7b:fa:e3:23:43:31:e5:b6:4c:55:
         25:f6:35:52:9a:ed:95:cd:3e:ae:51:7a:4f:82:4a:db:29:fd:
         bf:46:68:9a:d3:af:82:04:54:fd:17:d9:fa:de:fb:ed:55:4b:
         bf:b9:5f:86:30:2b:b9:be:e0:fc:7a:14:8d:22:16:ff:95:86:
         11:6f:43:77:96:36:ca:f5:68:00:42:6a:10:d0:c3:dc:51:78:
         0d:40:43:bd:c2:55:a9:29:5d:85:31:b3:ce:cd:e2:e0:0c:c9:
         e4:2a:d9:4a:32:80:fa:9e:40:74:f3:18:c4:6e:85:19:f1:fa:
         72:86:49:ad:69:49:c0:d8:72:e3:eb:ba:a7:3d:05:ab:c9:a9:
         f4:ba:ba:67:26:31:ae:b1:69:75:f8:72:74:cf:db:f1:65:5d:
         8f:f8:21:1d:5a:cc:fe:76:35:7c:21:b8:a8:6e:71:b0:7b:e5:
         62:22:a2:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:16 2024 by rpki-client on console-fra.rpki-client.org