Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/3130332e3132312e3138362e302f32332d3233203d3e20313530393633.roa
File:                     3130332e3132312e3138362e302f32332d3233203d3e20313530393633.roa (raw, json)
Hash identifier:          cgKwe9wIyGvw8sLJX73Nm92659XoYxJCy0LYZej2XJg=
Subject key identifier:   94:46:CD:39:C7:5C:9E:EE:F1:6E:78:FE:B7:F9:87:7F:DE:51:80:5E
Certificate issuer:       /CN=473225269441779F80E443B1EA516CC99E4ED4DA
Certificate serial:       08C2AA224070221A7262DE97CB092A7CFADCDF0B
Authority key identifier: 47:32:25:26:94:41:77:9F:80:E4:43:B1:EA:51:6C:C9:9E:4E:D4:DA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473225269441779F80E443B1EA516CC99E4ED4DA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/3130332e3132312e3138362e302f32332d3233203d3e20313530393633.roa
Signing time:             Tue 23 May 2023 08:01:47 +0000
ROA not before:           Tue 23 May 2023 07:56:47 +0000
ROA not after:            Tue 21 May 2024 08:01:47 +0000
asID:                     150963
IP address blocks:        103.121.186.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:c2:aa:22:40:70:22:1a:72:62:de:97:cb:09:2a:7c:fa:dc:df:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=473225269441779F80E443B1EA516CC99E4ED4DA
        Validity
            Not Before: May 23 07:56:47 2023 GMT
            Not After : May 21 08:01:47 2024 GMT
        Subject: CN=9446CD39C75C9EEEF16E78FEB7F9877FDE51805E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:67:cd:39:ba:a8:93:1d:ee:33:86:cb:50:3a:
                    18:eb:8b:9f:67:dd:2e:88:b8:74:23:d9:ce:c5:37:
                    b9:86:83:6d:e9:e5:11:56:eb:2a:a8:19:9e:29:b3:
                    aa:57:e8:8f:57:ee:39:20:84:db:62:fa:e9:a5:30:
                    12:a0:e5:20:2f:66:e9:29:0f:c9:a0:4a:1d:c2:b0:
                    7f:c6:eb:85:96:59:2b:67:e1:10:82:97:f0:66:0f:
                    d8:f2:9d:8e:ec:1b:7b:08:24:5e:46:c8:cc:99:d7:
                    74:c9:d2:44:e5:d3:66:b1:ce:bf:99:aa:d8:65:30:
                    80:41:bf:1d:3f:87:61:4e:77:c5:41:91:94:8e:45:
                    f9:ad:d5:6f:9f:ce:d4:c9:d1:9b:ac:24:c5:92:e6:
                    25:8e:91:af:70:8e:18:12:96:39:db:4c:ab:7f:72:
                    f5:f4:d3:83:bc:1f:6d:3a:5e:2f:2a:63:76:26:0d:
                    bb:74:cf:a7:ba:3b:5a:aa:36:5b:47:65:fd:2c:90:
                    39:06:b0:2c:bf:6e:f6:fd:a8:ce:9d:73:51:ea:e2:
                    fd:2e:69:b8:62:4f:27:ab:26:9e:38:53:69:16:e6:
                    cd:27:84:77:34:c4:fb:31:b6:3b:b3:35:95:dc:a5:
                    fd:94:b6:df:79:c2:7c:ee:ed:cf:06:ee:ea:ba:f5:
                    8e:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:46:CD:39:C7:5C:9E:EE:F1:6E:78:FE:B7:F9:87:7F:DE:51:80:5E
            X509v3 Authority Key Identifier:
                keyid:47:32:25:26:94:41:77:9F:80:E4:43:B1:EA:51:6C:C9:9E:4E:D4:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/473225269441779F80E443B1EA516CC99E4ED4DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473225269441779F80E443B1EA516CC99E4ED4DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/3130332e3132312e3138362e302f32332d3233203d3e20313530393633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.121.186.0/23

    Signature Algorithm: sha256WithRSAEncryption
         31:ce:ec:5e:56:1c:db:ce:51:29:39:7b:b6:a2:57:97:55:7d:
         41:89:78:48:ff:e1:28:18:06:a8:da:3e:2d:24:83:59:bb:d1:
         ce:4e:0c:e3:a0:b7:0c:9d:7b:11:30:ed:54:6c:f2:5e:c7:b4:
         25:8e:3c:7c:45:f5:0a:75:b6:0b:44:6b:45:f8:6b:d7:ca:ab:
         37:b6:47:a0:c8:5f:6c:a4:5c:7d:d7:d8:0a:0c:7e:6e:7c:53:
         a4:1c:49:ea:8a:c5:3b:f8:60:19:e1:37:fc:6e:5a:84:43:d1:
         f9:fb:6a:dc:fe:ac:b4:fe:54:da:60:0c:ab:6f:54:d2:81:5f:
         6c:87:b6:26:12:44:a7:87:9d:4c:3b:34:82:b8:7d:64:5c:91:
         f9:27:9f:c8:f4:76:48:74:10:8f:1b:b5:21:28:69:a5:25:37:
         b5:7b:46:8a:d3:5c:62:da:8f:80:4e:37:64:93:9e:23:41:48:
         08:28:f7:9a:57:7c:cb:31:38:8a:b0:1d:51:c1:2e:f1:8f:26:
         e8:5d:16:8a:34:60:f6:66:bc:44:fc:eb:01:f0:60:5e:28:7f:
         80:6a:fa:13:76:0d:f4:17:93:50:2f:6d:cc:58:9b:45:2b:d0:
         c0:19:6f:1a:d5:6c:73:73:32:94:ae:9f:28:de:e9:c4:3d:38:
         2a:d9:5d:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:16 2024 by rpki-client on console-fra.rpki-client.org