Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/e0be2df8-2c36-4652-a50c-f6420d2cd9d3/0/3130332e3137352e3135342e302f32342d3234203d3e20313331313131.roa
File:                     3130332e3137352e3135342e302f32342d3234203d3e20313331313131.roa (raw, json)
Hash identifier:          zzbbYIaCSz3zA0cryxz2XjzF3pUBhtDzJrit3X5l0Qc=
Subject key identifier:   B6:85:BB:E0:F2:F9:70:BF:63:00:3B:55:43:B7:55:0D:43:12:AF:02
Certificate issuer:       /CN=ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE
Certificate serial:       3EBCBB2C722F34178B80715D5FEE75CE8E5B9B62
Authority key identifier: AD:FF:CB:4A:8D:29:AE:5B:A5:53:F9:23:57:6F:7E:1B:7E:13:3C:AE
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/e0be2df8-2c36-4652-a50c-f6420d2cd9d3/0/3130332e3137352e3135342e302f32342d3234203d3e20313331313131.roa
Signing time:             Wed 10 Nov 2021 03:05:42 +0000
ROA not before:           Wed 10 Nov 2021 03:00:42 +0000
ROA not after:            Thu 10 Nov 2022 03:05:42 +0000
asID:                     131111
IP address blocks:        103.175.154.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:bc:bb:2c:72:2f:34:17:8b:80:71:5d:5f:ee:75:ce:8e:5b:9b:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE
        Validity
            Not Before: Nov 10 03:00:42 2021 GMT
            Not After : Nov 10 03:05:42 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:10:5b:e0:5d:ba:2c:43:95:45:26:76:7f:39:
                    03:07:02:a0:c9:04:5e:42:5e:fd:c5:75:4a:a5:45:
                    fb:05:5e:47:3b:78:e5:15:63:ec:c0:a1:11:a2:8b:
                    47:ec:c8:d7:a1:77:8a:9b:5d:dd:6b:1f:9e:eb:09:
                    f0:91:ae:31:16:5c:ca:cd:ba:d6:ed:80:eb:a7:8e:
                    21:d5:0d:a9:f4:c1:c8:b5:cd:e1:20:04:fb:8c:61:
                    86:86:3a:0a:4a:63:b0:44:c8:28:93:1c:55:e5:dc:
                    39:11:a5:bb:ab:3f:08:25:7f:b4:88:e3:15:06:73:
                    ea:a3:8f:63:a9:c3:7d:77:7e:b9:ac:52:5a:8d:35:
                    ea:a2:f0:79:23:a5:a4:2a:b5:be:29:72:66:16:7d:
                    9e:89:76:3d:88:a3:16:27:f1:8a:e3:91:2a:bf:f3:
                    65:94:05:d0:ce:da:c5:75:26:62:82:f3:3f:1c:49:
                    84:af:d5:db:f2:18:62:52:18:c0:48:d1:1b:5d:f5:
                    11:78:14:a3:f0:ff:82:22:ad:a3:e7:3d:73:4f:1c:
                    2c:1c:aa:8f:74:45:79:c0:39:15:8f:d6:c8:0d:44:
                    a4:b4:b3:65:69:fa:bb:db:c7:1a:1d:e4:db:16:98:
                    83:c9:f5:e3:8a:2e:2c:51:ad:e4:ab:28:46:a2:fa:
                    5f:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:85:BB:E0:F2:F9:70:BF:63:00:3B:55:43:B7:55:0D:43:12:AF:02
            X509v3 Authority Key Identifier:
                keyid:AD:FF:CB:4A:8D:29:AE:5B:A5:53:F9:23:57:6F:7E:1B:7E:13:3C:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/e0be2df8-2c36-4652-a50c-f6420d2cd9d3/0/ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/ADFFCB4A8D29AE5BA553F923576F7E1B7E133CAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e0be2df8-2c36-4652-a50c-f6420d2cd9d3/0/3130332e3137352e3135342e302f32342d3234203d3e20313331313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.175.154.0/24

    Signature Algorithm: sha256WithRSAEncryption
         55:61:e9:74:b2:ae:5b:a3:4c:79:15:60:03:ee:e5:fd:0d:63:
         70:f9:f7:35:d3:cb:ca:5e:82:18:49:71:1b:e2:51:de:db:f6:
         b0:41:2a:d6:88:39:e2:a5:31:c1:dd:97:5f:94:d0:ad:06:5f:
         c3:67:32:8d:2f:a4:da:03:48:2e:45:5c:5b:8e:41:ac:e7:41:
         2b:82:d7:34:47:7a:f1:3b:3b:fd:f3:9a:57:0e:77:4c:f0:95:
         ac:3f:87:1d:02:28:9a:65:d0:3c:de:6e:df:3a:3a:0b:6d:b1:
         ea:6e:8b:7d:33:f3:a1:03:d0:6d:ff:c8:60:17:2a:72:b6:1c:
         85:c9:4d:06:4e:c4:8b:34:eb:0c:44:77:36:ba:6f:3d:df:6d:
         ae:36:fd:a0:4f:c8:57:92:43:06:98:cc:ac:d3:ba:54:2e:7f:
         f8:cf:aa:d8:1e:5f:09:75:c5:32:64:80:a1:fc:3b:d4:0a:cb:
         8e:26:3c:21:d8:1e:e2:48:0b:e3:ca:9e:26:ca:94:4a:7b:06:
         6f:df:8b:c3:3b:08:51:44:a6:d3:cb:b5:ab:e1:b7:fc:01:eb:
         27:d4:5e:8f:65:ec:3f:4c:76:58:ae:76:c8:fb:4a:25:f9:38:
         25:8e:87:a0:e3:be:f7:b7:09:fb:ef:ad:91:4d:2d:3c:d4:3a:
         36:40:dc:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:52 2024 by rpki-client on console-ams.rpki-client.org