Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/d9243950-3fdf-49ab-bfdc-f586453704c6/0/3130332e3133312e3130372e302f32342d3234203d3e20313338303934.roa
File:                     3130332e3133312e3130372e302f32342d3234203d3e20313338303934.roa (raw, json)
Hash identifier:          ipGNj8g7GLCNpYpcPzkNJbUuxrmeXRu6T5fhhG5h7HM=
Subject key identifier:   C7:B4:7D:20:8C:F6:B0:E6:53:B8:F2:9E:69:E5:76:B9:92:54:9B:A7
Certificate issuer:       /CN=51B0CF7488516A897D04B7AFE3238190B6B5606C
Certificate serial:       187E5BF2ED4CF15F541D6D2FCF79295F84C9DCF9
Authority key identifier: 51:B0:CF:74:88:51:6A:89:7D:04:B7:AF:E3:23:81:90:B6:B5:60:6C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/51B0CF7488516A897D04B7AFE3238190B6B5606C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/d9243950-3fdf-49ab-bfdc-f586453704c6/0/3130332e3133312e3130372e302f32342d3234203d3e20313338303934.roa
Signing time:             Thu 09 Mar 2023 08:02:46 +0000
ROA not before:           Thu 09 Mar 2023 07:57:46 +0000
ROA not after:            Thu 07 Mar 2024 08:02:46 +0000
asID:                     138094
IP address blocks:        103.131.107.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:7e:5b:f2:ed:4c:f1:5f:54:1d:6d:2f:cf:79:29:5f:84:c9:dc:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51B0CF7488516A897D04B7AFE3238190B6B5606C
        Validity
            Not Before: Mar  9 07:57:46 2023 GMT
            Not After : Mar  7 08:02:46 2024 GMT
        Subject: CN=C7B47D208CF6B0E653B8F29E69E576B992549BA7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:3c:78:40:f1:47:9c:21:c9:3a:54:78:c4:16:
                    42:36:bd:f6:10:d2:0b:fe:92:bf:2e:e1:be:5d:55:
                    6a:54:cc:6c:ef:19:63:7e:f8:1d:6b:0e:ca:e2:46:
                    8f:87:98:7e:8b:7d:7d:13:73:82:65:57:7b:0f:18:
                    59:6e:66:b3:67:2e:3c:22:cf:ac:44:f9:79:6f:77:
                    34:6d:86:7f:f4:59:51:5f:92:12:67:e8:a7:44:de:
                    25:4a:74:e4:93:fa:f3:e9:89:66:88:36:05:2b:63:
                    52:e6:c7:7e:50:e7:a2:4e:76:57:ce:d6:14:59:1a:
                    0b:d7:55:13:f9:75:ac:ba:7f:22:83:c0:86:f8:a5:
                    40:74:32:72:63:11:c6:2a:5e:bf:dc:c8:0e:d0:1e:
                    f5:40:90:94:47:ca:65:a3:1d:87:f6:fd:1e:92:dc:
                    c6:0e:f0:b1:5c:eb:ca:05:1f:20:ad:72:1c:34:9f:
                    9e:f5:85:89:09:2e:bb:82:e2:b0:6f:01:3d:17:da:
                    f9:00:4d:ea:1e:50:36:db:5c:12:a1:e1:43:07:d5:
                    2f:55:fd:7e:0e:56:dd:c3:fc:37:58:0a:a4:ee:1c:
                    bf:77:d5:8d:6d:b5:e2:13:cb:08:62:dd:fc:04:d4:
                    c1:97:13:1a:61:35:c7:2b:95:6c:55:a3:a4:1c:a6:
                    95:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:B4:7D:20:8C:F6:B0:E6:53:B8:F2:9E:69:E5:76:B9:92:54:9B:A7
            X509v3 Authority Key Identifier:
                keyid:51:B0:CF:74:88:51:6A:89:7D:04:B7:AF:E3:23:81:90:B6:B5:60:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/d9243950-3fdf-49ab-bfdc-f586453704c6/0/51B0CF7488516A897D04B7AFE3238190B6B5606C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/51B0CF7488516A897D04B7AFE3238190B6B5606C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/d9243950-3fdf-49ab-bfdc-f586453704c6/0/3130332e3133312e3130372e302f32342d3234203d3e20313338303934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.131.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3a:76:04:3b:8d:92:47:db:17:53:3b:ab:88:01:76:1d:b9:8b:
         7c:59:9b:18:52:73:07:82:5a:c1:aa:34:82:74:54:bf:3d:5e:
         86:ee:5f:dd:fe:24:bf:d1:43:15:10:25:8b:af:c4:c3:40:4c:
         54:3e:72:ea:17:69:d2:fd:d3:1f:92:d9:4c:55:1e:9b:e9:6b:
         3b:bf:e1:b1:d7:e3:69:fd:4e:08:32:41:33:71:e7:55:06:89:
         a8:00:7a:e3:60:7f:4c:96:23:03:38:ba:44:1d:96:c0:81:95:
         09:ec:93:a7:4e:68:32:8c:b2:f6:71:a3:af:82:9f:f5:d6:bf:
         75:32:8b:b3:df:a1:79:b4:41:5d:23:96:db:53:65:a7:af:10:
         c9:e4:1d:60:38:93:ef:95:c1:e3:40:3c:db:bf:55:3a:5c:4c:
         3d:fb:4a:ed:60:c3:dd:dc:f3:79:25:e1:a9:f0:62:f2:f6:65:
         e0:95:26:1a:39:d3:c4:cc:f4:b1:e0:7c:3f:5d:7d:62:08:05:
         ee:04:f4:fd:de:ee:74:55:d8:d6:91:6b:ab:29:23:3c:60:c6:
         ed:66:12:87:e6:ea:56:8b:23:ca:33:5c:52:9d:ef:03:79:f7:
         ba:68:fb:bc:8a:c0:52:b8:c4:fb:cf:73:8c:b9:44:ec:e9:f2:
         76:a0:6c:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:16 2024 by rpki-client on console-fra.rpki-client.org