Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/dbbcbfd9-57df-490c-88fc-00d360070651/0/3130332e3138302e3132362e302f32332d3234203d3e20313439333734.roa
File:                     3130332e3138302e3132362e302f32332d3234203d3e20313439333734.roa (raw, json)
Hash identifier:          XVf9yMIaD8oeqLQBHm7tDO/9mAqAUhjaMaIH+YreamM=
Subject key identifier:   CE:25:2D:E7:82:D8:B9:8C:E6:78:72:40:CC:94:90:77:C3:7C:50:25
Certificate issuer:       /CN=569E00BE70FA71DE5510B7D81700C2EB98DAD8C6
Certificate serial:       6BA04819E5888540B6B675CE16013DCAA3C3E358
Authority key identifier: 56:9E:00:BE:70:FA:71:DE:55:10:B7:D8:17:00:C2:EB:98:DA:D8:C6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/569E00BE70FA71DE5510B7D81700C2EB98DAD8C6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/dbbcbfd9-57df-490c-88fc-00d360070651/0/3130332e3138302e3132362e302f32332d3234203d3e20313439333734.roa
Signing time:             Fri 25 Feb 2022 14:55:53 +0000
ROA not before:           Fri 25 Feb 2022 14:50:53 +0000
ROA not after:            Sat 25 Feb 2023 14:55:53 +0000
asID:                     149374
IP address blocks:        103.180.126.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:a0:48:19:e5:88:85:40:b6:b6:75:ce:16:01:3d:ca:a3:c3:e3:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=569E00BE70FA71DE5510B7D81700C2EB98DAD8C6
        Validity
            Not Before: Feb 25 14:50:53 2022 GMT
            Not After : Feb 25 14:55:53 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:ee:2b:af:02:9b:53:d2:12:b6:b1:12:9e:1c:
                    70:ae:b7:b6:d5:e8:60:e3:c7:d8:de:ab:39:ba:00:
                    4d:12:08:a3:ac:0f:0e:03:87:d4:a0:ef:10:4f:b0:
                    b9:12:d0:e8:9b:45:b9:29:01:aa:b1:b0:b0:aa:34:
                    b3:f0:53:e6:07:ca:ed:6d:09:9f:eb:a3:dd:0c:21:
                    27:40:e6:69:9f:56:0b:68:4f:32:14:6c:49:bb:ab:
                    53:df:fd:a3:38:79:03:a4:f9:98:ca:01:b0:38:f5:
                    38:44:e8:b6:38:02:1b:24:02:e4:74:27:d6:b6:dd:
                    73:03:ce:b9:7f:df:8d:4c:47:1a:f7:bd:51:8a:cf:
                    f2:eb:48:b7:ae:06:27:a6:ff:67:78:79:60:38:22:
                    b6:b4:d6:6f:63:f7:53:ea:08:f1:73:c9:69:db:f8:
                    95:de:27:6b:ec:9e:91:f3:75:20:09:e8:73:5d:91:
                    6a:bb:f3:40:10:b8:e1:06:f5:7b:7d:3f:ea:cd:68:
                    53:ba:04:fc:60:04:21:e7:9d:ad:59:6c:c3:00:21:
                    0d:6f:25:06:bf:0b:c9:77:16:97:75:ea:27:a2:11:
                    2a:84:33:63:3c:a1:76:3e:53:5a:4c:dc:e4:49:4b:
                    aa:d5:37:f5:2a:ec:4f:e5:f3:89:a9:77:52:ea:a3:
                    25:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:25:2D:E7:82:D8:B9:8C:E6:78:72:40:CC:94:90:77:C3:7C:50:25
            X509v3 Authority Key Identifier:
                keyid:56:9E:00:BE:70:FA:71:DE:55:10:B7:D8:17:00:C2:EB:98:DA:D8:C6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/dbbcbfd9-57df-490c-88fc-00d360070651/0/569E00BE70FA71DE5510B7D81700C2EB98DAD8C6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/569E00BE70FA71DE5510B7D81700C2EB98DAD8C6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/dbbcbfd9-57df-490c-88fc-00d360070651/0/3130332e3138302e3132362e302f32332d3234203d3e20313439333734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.180.126.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b9:a1:72:65:82:12:08:d6:b7:56:2a:fc:7f:2a:80:cb:33:c1:
         c5:61:5b:13:15:06:e0:fa:ef:82:1f:23:a5:00:88:5e:be:11:
         eb:3b:eb:5b:01:11:0d:57:a5:2d:89:28:ac:98:d3:81:21:ad:
         14:f4:c9:b8:45:ad:e7:fd:b7:77:58:88:bb:dd:33:5b:b4:9e:
         6e:8d:07:42:1b:84:c0:c2:cf:53:99:7e:cb:45:31:c4:10:fb:
         8b:a2:b6:d4:54:9c:5c:16:3d:66:b0:3f:fe:64:a8:aa:83:07:
         88:cb:c4:8f:59:55:9a:30:c2:20:2e:9c:db:1b:11:da:73:54:
         ab:6a:c2:dc:d8:61:fd:27:10:92:9b:a7:4e:a6:09:f8:79:0f:
         03:1b:43:98:48:ed:45:bf:86:37:2d:9f:a5:a4:d5:b1:95:b6:
         78:a0:cb:66:ae:7e:23:79:a9:04:b3:95:3f:a7:7f:0a:c8:06:
         7e:3f:90:27:c4:0a:89:26:59:37:37:b0:4c:b1:0b:6a:ff:73:
         93:05:b5:5f:6b:6e:fe:83:95:90:6d:16:8e:76:9b:49:ef:7a:
         1b:6e:f4:79:df:ec:86:59:51:c0:6a:30:bf:80:6a:6c:e9:e8:
         f5:a3:30:02:33:1a:1a:68:31:3d:93:3e:23:d0:78:54:ac:e8:
         56:63:7e:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:52 2024 by rpki-client on console-ams.rpki-client.org