Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/3130332e3132312e3138372e302f32342d3234203d3e20313530393633.roa
File:                     3130332e3132312e3138372e302f32342d3234203d3e20313530393633.roa (raw, json)
Hash identifier:          CqGCQ17VnC6SuTQXdtqNRTzcP6Z/BEHI2g6+6c+/09k=
Subject key identifier:   E9:30:F0:B0:E5:44:36:93:89:D6:1F:1F:A0:0F:B2:8E:54:E9:14:98
Certificate issuer:       /CN=473225269441779F80E443B1EA516CC99E4ED4DA
Certificate serial:       075653578F5F9D3EAA758786584E659312ED055D
Authority key identifier: 47:32:25:26:94:41:77:9F:80:E4:43:B1:EA:51:6C:C9:9E:4E:D4:DA
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473225269441779F80E443B1EA516CC99E4ED4DA.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/3130332e3132312e3138372e302f32342d3234203d3e20313530393633.roa
Signing time:             Tue 23 May 2023 08:02:26 +0000
ROA not before:           Tue 23 May 2023 07:57:26 +0000
ROA not after:            Tue 21 May 2024 08:02:26 +0000
asID:                     150963
IP address blocks:        103.121.187.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:56:53:57:8f:5f:9d:3e:aa:75:87:86:58:4e:65:93:12:ed:05:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=473225269441779F80E443B1EA516CC99E4ED4DA
        Validity
            Not Before: May 23 07:57:26 2023 GMT
            Not After : May 21 08:02:26 2024 GMT
        Subject: CN=E930F0B0E544369389D61F1FA00FB28E54E91498
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:70:85:a1:86:94:27:64:d1:68:fb:bf:3e:ef:
                    ad:ff:00:28:56:ee:64:48:59:14:90:c7:f2:f3:4f:
                    1f:3d:26:e2:3d:ad:20:60:6b:89:28:af:d4:76:18:
                    dc:00:3d:0d:30:4d:3c:29:85:20:4f:95:33:7f:21:
                    eb:26:cd:fd:66:55:f3:3d:61:67:2c:85:ac:c3:1d:
                    89:58:2a:64:a3:72:f8:12:5b:90:d4:be:0d:eb:b7:
                    bf:4f:e2:95:ca:51:ac:f9:55:79:9f:88:14:40:51:
                    3f:a2:32:45:fc:54:8d:ce:d8:8c:0e:93:2a:e0:a8:
                    52:e0:21:72:25:09:03:7a:4d:a7:36:20:63:2e:6a:
                    ef:59:53:c0:0c:a2:cb:5e:fa:f6:ad:14:be:54:f7:
                    0f:03:c7:2d:ab:89:96:06:a0:c9:df:05:c9:2a:86:
                    cb:ac:00:b9:64:e2:01:11:4a:bb:33:6d:37:f7:2b:
                    d9:2e:c5:7b:12:b1:05:e2:47:11:7b:cc:67:9b:f6:
                    5b:b6:4b:48:8f:74:cd:b0:13:84:d1:e5:98:11:9e:
                    84:07:bf:ad:a5:79:13:ce:84:21:8d:8e:4b:fb:13:
                    33:49:69:1e:bd:ca:53:c4:4f:4a:58:cc:46:d4:bb:
                    e5:88:38:92:20:27:bf:e0:fd:ac:aa:ab:b6:9d:7a:
                    99:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:30:F0:B0:E5:44:36:93:89:D6:1F:1F:A0:0F:B2:8E:54:E9:14:98
            X509v3 Authority Key Identifier:
                keyid:47:32:25:26:94:41:77:9F:80:E4:43:B1:EA:51:6C:C9:9E:4E:D4:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/473225269441779F80E443B1EA516CC99E4ED4DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473225269441779F80E443B1EA516CC99E4ED4DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e0620cfc-b46c-457c-9fde-297710c546a9/0/3130332e3132312e3138372e302f32342d3234203d3e20313530393633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.121.187.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:ca:81:52:f9:77:85:f5:e5:a9:3c:75:32:08:37:bd:09:cb:
         cf:76:a1:da:cf:1e:4b:56:0d:dd:30:21:6a:4c:a9:ea:f0:cb:
         94:dd:4f:44:0a:be:cf:9a:bd:9f:e2:c0:45:67:95:d8:be:8f:
         8a:04:57:0b:9d:b0:72:b3:8e:7c:92:de:ea:f0:2e:ca:53:60:
         6c:db:8d:45:cf:2b:00:fd:a4:34:14:e1:c5:16:ce:2c:e6:81:
         d0:cf:67:41:56:dc:90:7f:af:7a:87:d3:ef:09:9b:2f:91:69:
         a3:19:c4:50:14:89:43:53:8d:d5:ab:a8:4d:b8:03:e8:18:df:
         7a:eb:7d:03:19:fd:5a:0d:a7:da:66:e2:cb:20:de:42:b0:02:
         9a:44:92:3f:fb:95:ae:0c:04:46:2e:33:a5:8a:62:a1:b0:dc:
         2d:da:18:4a:83:e1:e7:70:a6:14:05:4b:e1:65:8d:d0:a0:5e:
         e4:20:77:55:e3:c8:56:ed:4e:ed:f3:30:0f:fb:e8:7b:4b:b3:
         4a:bc:82:da:f1:23:14:f0:e1:12:a9:4a:ed:06:d8:33:73:f6:
         1c:6b:35:85:1f:67:59:40:c6:4b:03:cb:1d:81:48:02:05:b7:
         bd:f8:f7:f4:12:67:37:ab:b4:7b:82:0c:66:dc:81:bb:8a:13:
         f9:cd:51:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:52 2024 by rpki-client on console-ams.rpki-client.org