Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/3130332e37392e3233392e302f32342d3234203d3e20313530353435.roa
File:                     3130332e37392e3233392e302f32342d3234203d3e20313530353435.roa (raw, json)
Hash identifier:          q8qKYU2MuPZzVIYz3KEuzi+K0hCjM9XODl57Y5DFEN8=
Subject key identifier:   B1:F5:A0:A3:B0:77:3C:69:15:82:6A:DB:53:FE:50:A6:B7:90:37:99
Certificate issuer:       /CN=F027F0676E31F5D61FFCB99138BA71A6A6C2A888
Certificate serial:       1B7AAC46FD8410214192358DF6E6EFA42F00FA1B
Authority key identifier: F0:27:F0:67:6E:31:F5:D6:1F:FC:B9:91:38:BA:71:A6:A6:C2:A8:88
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/3130332e37392e3233392e302f32342d3234203d3e20313530353435.roa
Signing time:             Thu 16 Feb 2023 07:11:41 +0000
ROA not before:           Thu 16 Feb 2023 07:06:41 +0000
ROA not after:            Thu 15 Feb 2024 07:11:41 +0000
asID:                     150545
IP address blocks:        103.79.239.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:7a:ac:46:fd:84:10:21:41:92:35:8d:f6:e6:ef:a4:2f:00:fa:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F027F0676E31F5D61FFCB99138BA71A6A6C2A888
        Validity
            Not Before: Feb 16 07:06:41 2023 GMT
            Not After : Feb 15 07:11:41 2024 GMT
        Subject: CN=B1F5A0A3B0773C6915826ADB53FE50A6B7903799
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:27:2b:99:af:c7:4d:06:a0:f1:82:b0:e8:30:
                    25:63:76:ae:b4:31:8d:a7:85:15:71:b6:56:94:cf:
                    68:bb:a6:1a:f7:01:7f:73:09:d3:d8:23:1c:3c:b3:
                    46:25:c8:86:27:19:01:f8:78:23:b2:cb:d4:55:c3:
                    56:a1:d7:51:f2:fd:13:fe:8c:63:da:88:06:ee:3c:
                    f7:00:f9:c2:24:c2:2a:df:29:15:70:7a:ea:85:50:
                    56:8e:db:44:90:d9:ec:54:22:c4:7d:b3:cc:39:10:
                    33:55:a1:6e:ba:de:f8:b6:56:e3:c6:9c:fe:94:c7:
                    70:a8:ef:e6:14:5d:be:94:56:7b:da:7e:b8:1e:4f:
                    68:d3:9f:a0:60:aa:e2:f9:52:43:c5:68:9d:9f:3a:
                    06:5a:c0:d9:8d:dc:44:ed:01:4d:b9:1f:82:0f:35:
                    f2:c0:fe:e3:21:46:33:5c:d2:25:d9:ab:a6:ff:09:
                    bd:ae:02:81:96:8f:b1:fd:62:fe:1c:26:51:33:3a:
                    51:df:e9:0e:8a:a7:b8:81:2c:12:3b:ee:61:f5:18:
                    de:5c:e3:1e:f1:8b:a3:7c:2b:34:13:3c:4b:8e:c1:
                    d2:30:63:90:f9:cc:7a:a0:87:e8:16:3c:a6:1e:ce:
                    7c:6f:f4:e9:b3:13:dd:33:35:3e:1f:7a:ae:2d:f3:
                    44:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:F5:A0:A3:B0:77:3C:69:15:82:6A:DB:53:FE:50:A6:B7:90:37:99
            X509v3 Authority Key Identifier:
                keyid:F0:27:F0:67:6E:31:F5:D6:1F:FC:B9:91:38:BA:71:A6:A6:C2:A8:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F027F0676E31F5D61FFCB99138BA71A6A6C2A888.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d6df2691-db62-43b9-8a57-0e06da1acc64/0/3130332e37392e3233392e302f32342d3234203d3e20313530353435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.79.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         be:7b:64:fe:d9:de:a2:48:5e:81:bc:2e:bc:5f:e9:8e:fe:28:
         f5:67:43:bb:30:dc:1a:ac:eb:78:1b:6c:08:01:d1:1d:47:57:
         8f:03:53:82:d7:3a:7a:e4:aa:ba:19:12:1e:38:b9:bb:48:f4:
         fd:7d:48:5e:53:b3:c3:3e:6e:52:41:b6:97:c3:aa:7f:a3:2f:
         0b:6b:24:a3:13:61:5a:4c:56:c5:d0:a4:dd:a8:34:1d:1d:c6:
         15:81:4b:4e:61:1a:a9:1a:40:ee:83:53:e3:58:1b:5c:5a:03:
         c9:16:01:90:f5:45:f7:0a:d9:45:53:ae:43:2b:13:22:99:d2:
         9f:7b:74:8d:65:24:c1:df:8a:c2:0a:59:c5:41:9e:fd:b2:b3:
         d0:02:44:81:15:f6:1b:36:56:82:fd:2b:95:51:06:9b:08:79:
         9b:a0:81:89:be:fd:26:e5:8b:cd:2b:68:70:47:02:ef:80:1b:
         c8:ce:d7:50:cc:a9:a1:e2:db:61:c0:d6:b0:53:90:0d:4e:38:
         54:d7:da:29:f9:c9:e4:c4:1e:7d:16:01:54:1b:1a:46:b3:2e:
         2e:17:b6:05:6d:28:11:35:f2:f5:e6:f8:c0:2f:59:78:bb:5b:
         cb:20:de:6f:19:ba:e1:3b:90:5f:b6:06:f7:3f:13:9b:ef:84:
         89:e6:f0:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:16 2024 by rpki-client on console-fra.rpki-client.org