Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/3130332e37392e3233382e302f32342d3234203d3e20313530353435.roa
File:                     3130332e37392e3233382e302f32342d3234203d3e20313530353435.roa (raw, json)
Hash identifier:          XxUBJx3Y/b0ArvJ4CJb6/Do3A+6/iM/fNeeTugaxiCg=
Subject key identifier:   CB:C2:C3:BD:E3:E0:1D:48:18:92:0D:33:4D:9B:7A:B5:68:23:FC:C7
Certificate issuer:       /CN=F027F0676E31F5D61FFCB99138BA71A6A6C2A888
Certificate serial:       23F9153CD2C6070A6B12017D4FDBF547E69A62A5
Authority key identifier: F0:27:F0:67:6E:31:F5:D6:1F:FC:B9:91:38:BA:71:A6:A6:C2:A8:88
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/3130332e37392e3233382e302f32342d3234203d3e20313530353435.roa
Signing time:             Thu 16 Feb 2023 07:10:33 +0000
ROA not before:           Thu 16 Feb 2023 07:05:33 +0000
ROA not after:            Thu 15 Feb 2024 07:10:33 +0000
asID:                     150545
IP address blocks:        103.79.238.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:f9:15:3c:d2:c6:07:0a:6b:12:01:7d:4f:db:f5:47:e6:9a:62:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F027F0676E31F5D61FFCB99138BA71A6A6C2A888
        Validity
            Not Before: Feb 16 07:05:33 2023 GMT
            Not After : Feb 15 07:10:33 2024 GMT
        Subject: CN=CBC2C3BDE3E01D4818920D334D9B7AB56823FCC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:9b:75:3b:7b:65:48:d9:a0:95:96:a0:7f:25:
                    e7:38:5f:ee:08:7b:50:20:0d:48:e6:04:3f:3d:19:
                    a4:d2:14:7d:93:24:df:87:e7:c9:50:4d:4e:46:af:
                    f8:22:95:ff:9e:24:b9:96:8f:69:9d:9b:27:09:a2:
                    6a:5b:a4:43:58:0a:7f:af:41:8b:2d:6c:6c:85:45:
                    9c:5a:08:ec:9c:58:6a:24:da:56:aa:ab:b4:ac:e8:
                    ed:85:47:c1:ab:e0:d0:10:94:92:cf:c2:e6:01:66:
                    60:c7:af:43:a1:9a:8f:c6:5b:d4:0d:1b:47:7f:78:
                    cf:b4:c4:19:ec:c6:9b:7e:6c:77:4e:79:d6:50:e4:
                    61:91:2c:6d:18:1b:c2:d6:7c:21:b3:41:75:45:a6:
                    d2:4f:c2:af:13:28:25:76:08:07:19:de:6c:ba:76:
                    0d:da:43:df:e5:ec:0e:8a:05:fe:9d:04:c7:6e:3f:
                    d3:01:cf:9b:ca:ee:69:a4:c2:8d:64:23:5a:f9:35:
                    97:b5:58:70:b3:8f:da:ad:f5:c0:d5:09:22:73:71:
                    0a:e9:03:33:6b:d4:f9:bb:d2:9a:c4:76:84:0f:1a:
                    05:62:e5:bf:7b:7e:96:31:7a:86:37:ed:61:99:62:
                    d6:88:fc:c6:13:87:0d:65:2e:5b:f2:4a:5f:98:d9:
                    13:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:C2:C3:BD:E3:E0:1D:48:18:92:0D:33:4D:9B:7A:B5:68:23:FC:C7
            X509v3 Authority Key Identifier:
                keyid:F0:27:F0:67:6E:31:F5:D6:1F:FC:B9:91:38:BA:71:A6:A6:C2:A8:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/3130332e37392e3233382e302f32342d3234203d3e20313530353435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.79.238.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8f:91:b8:7d:83:c7:47:2b:32:f2:53:31:73:a0:c7:0a:98:54:
         5b:e4:47:c5:58:e9:b3:3f:22:ad:ce:c8:f7:80:68:32:08:dc:
         99:17:6e:45:df:0a:98:34:27:73:fa:8f:af:ef:85:97:d5:50:
         d3:2c:ae:28:62:c6:fa:43:5d:54:10:10:cc:14:d7:8f:1d:b4:
         18:24:be:68:5c:a8:8b:ff:e1:af:bf:50:08:6b:38:39:0a:b7:
         da:b9:79:55:bb:07:e5:19:d1:ca:5d:9b:19:9e:b8:c0:45:f8:
         cf:a1:e9:cc:c6:b6:b2:45:7e:4b:f1:80:58:e8:b1:24:05:4e:
         70:84:db:9a:43:98:15:1c:a7:86:6b:a0:80:7d:95:4e:ab:62:
         7a:0f:db:b7:d2:d2:e0:d0:77:e6:d4:86:91:bc:6f:f8:a9:e9:
         c8:25:f7:ea:c0:62:00:e1:5e:37:15:a8:1d:44:61:99:5d:f6:
         3c:d6:24:92:59:6f:fc:bf:a2:2c:27:6e:dd:57:36:54:c1:53:
         c0:e5:9d:15:64:96:20:ab:1b:14:a2:4c:99:dc:ae:ae:77:bc:
         83:0e:7d:cb:89:1c:1c:f7:74:f4:5f:3c:c7:52:f9:7b:4e:3f:
         9b:a5:ba:29:ce:bf:69:56:66:3e:79:e7:4f:cc:a3:ec:aa:37:
         25:f6:b6:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:16 2024 by rpki-client on console-fra.rpki-client.org