Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/ea0bdcc5-4cd9-46b0-9d7b-d231a9e57b50/0/3130332e3136352e3235322e302f32342d3234203d3e20313437313337.roa
File:                     3130332e3136352e3235322e302f32342d3234203d3e20313437313337.roa (raw, json)
Hash identifier:          0TYkdDNr+nUmwf7wjWEcP34iaQPi283P8hTKYYZX72g=
Subject key identifier:   25:DF:AF:4C:CB:A1:FE:14:6F:8B:F1:97:6C:11:F1:9E:6B:A3:52:94
Certificate issuer:       /CN=1E8E853BD0B0EC8B2C020B975B205A556C14E8E9
Certificate serial:       048B0102AC4D7795FC604BF16A483C3936231503
Authority key identifier: 1E:8E:85:3B:D0:B0:EC:8B:2C:02:0B:97:5B:20:5A:55:6C:14:E8:E9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/ea0bdcc5-4cd9-46b0-9d7b-d231a9e57b50/0/3130332e3136352e3235322e302f32342d3234203d3e20313437313337.roa
Signing time:             Sun 30 Apr 2023 07:23:56 +0000
ROA not before:           Sun 30 Apr 2023 07:18:56 +0000
ROA not after:            Sun 28 Apr 2024 07:23:56 +0000
asID:                     147137
IP address blocks:        103.165.252.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:8b:01:02:ac:4d:77:95:fc:60:4b:f1:6a:48:3c:39:36:23:15:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1E8E853BD0B0EC8B2C020B975B205A556C14E8E9
        Validity
            Not Before: Apr 30 07:18:56 2023 GMT
            Not After : Apr 28 07:23:56 2024 GMT
        Subject: CN=25DFAF4CCBA1FE146F8BF1976C11F19E6BA35294
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:11:f2:cd:9c:8d:11:94:4f:52:7c:b2:13:9e:
                    cf:21:13:1e:cf:ef:45:8f:39:3f:3e:fb:a4:da:b8:
                    f8:56:e6:b6:b8:34:af:03:6b:c9:00:df:bf:06:2e:
                    31:1a:25:80:9c:1a:52:f1:8b:81:b4:74:e0:c9:3a:
                    1a:fa:a8:8d:18:a3:02:46:c9:01:f5:c8:c9:68:6f:
                    00:69:29:1c:5e:f5:59:eb:58:1f:c1:98:8d:fe:48:
                    47:de:48:62:4b:c4:a7:34:cc:42:40:2d:73:5c:3f:
                    65:6c:26:2b:be:ca:32:92:20:19:62:51:66:a7:60:
                    ed:57:f1:12:1d:ae:7d:cd:9d:a5:fb:10:e7:0c:bd:
                    4d:ae:5f:48:fa:c7:ef:f2:3f:a0:fe:51:5f:7d:e3:
                    b8:63:03:30:a9:af:24:91:ee:0c:b3:3b:87:6c:2c:
                    f0:5a:3a:b5:02:e2:84:6e:f9:9e:dc:1f:23:60:07:
                    1b:0d:8c:3e:b6:f4:82:ce:90:52:9f:77:b5:94:93:
                    c4:f4:3f:0e:57:db:89:35:e8:7a:6f:7d:51:bf:c3:
                    b1:29:df:83:7a:ae:d2:84:06:cd:5f:db:21:8e:83:
                    c0:bd:07:fe:50:ce:d9:16:24:17:67:73:f8:0f:45:
                    3c:15:10:6d:d5:81:97:b7:20:3f:d3:d8:88:90:01:
                    01:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:DF:AF:4C:CB:A1:FE:14:6F:8B:F1:97:6C:11:F1:9E:6B:A3:52:94
            X509v3 Authority Key Identifier:
                keyid:1E:8E:85:3B:D0:B0:EC:8B:2C:02:0B:97:5B:20:5A:55:6C:14:E8:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/ea0bdcc5-4cd9-46b0-9d7b-d231a9e57b50/0/1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1E8E853BD0B0EC8B2C020B975B205A556C14E8E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ea0bdcc5-4cd9-46b0-9d7b-d231a9e57b50/0/3130332e3136352e3235322e302f32342d3234203d3e20313437313337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.165.252.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:c9:52:fe:3f:3e:0c:fe:ae:47:68:70:b7:d1:b4:6f:1a:e6:
         16:92:a3:cd:c6:2a:19:93:80:56:77:ab:c8:43:5d:61:91:0c:
         34:4c:30:d7:97:d4:c7:fb:27:ae:59:89:e9:f8:15:f9:a0:71:
         18:58:bc:8c:05:bb:b2:a7:d9:b0:a8:bd:2c:53:89:a6:04:d8:
         83:00:17:38:f2:ce:da:fa:43:ec:16:ef:e9:87:3a:16:f4:91:
         97:95:9f:d4:18:86:df:1a:24:0a:bb:e3:6a:c6:19:1c:6e:23:
         68:f3:63:52:28:9b:2f:6b:06:b6:83:c8:2c:68:d2:32:2d:b0:
         45:7c:66:db:25:8d:f4:d1:f4:db:32:03:58:06:b8:e0:0b:5f:
         3e:26:a7:62:98:f1:f7:b3:ec:63:65:3f:3e:42:44:e9:e6:03:
         f1:ec:0a:ea:b3:63:8c:19:f6:2b:c8:be:cd:5c:60:07:ea:b4:
         99:1a:3b:40:19:b0:6a:a8:e6:b3:f7:61:f3:0d:c7:b6:38:dd:
         bc:58:dd:f3:83:77:6b:23:43:1d:b8:e0:a1:6e:67:d5:b8:48:
         54:75:af:55:cd:eb:61:b8:91:6f:1f:d1:79:94:ee:ef:be:c4:
         98:83:8c:3d:a6:5e:c6:f9:d1:85:e6:b0:71:eb:13:f8:10:16:
         a5:17:97:7a
-----BEGIN CERTIFICATE-----
MIIFLDCCBBSgAwIBAgIUBIsBAqxNd5X8YEvxakg8OTYjFQMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUU4RTg1M0JEMEIwRUM4QjJDMDIwQjk3NUIyMDVBNTU2
QzE0RThFOTAeFw0yMzA0MzAwNzE4NTZaFw0yNDA0MjgwNzIzNTZaMDMxMTAvBgNV
BAMTKDI1REZBRjRDQ0JBMUZFMTQ2RjhCRjE5NzZDMTFGMTlFNkJBMzUyOTQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtEfLNnI0RlE9SfLITns8hEx7P
70WPOT8++6TauPhW5ra4NK8Da8kA378GLjEaJYCcGlLxi4G0dODJOhr6qI0YowJG
yQH1yMlobwBpKRxe9VnrWB/BmI3+SEfeSGJLxKc0zEJALXNcP2VsJiu+yjKSIBli
UWanYO1X8RIdrn3NnaX7EOcMvU2uX0j6x+/yP6D+UV9947hjAzCprySR7gyzO4ds
LPBaOrUC4oRu+Z7cHyNgBxsNjD629ILOkFKfd7WUk8T0Pw5X24k16HpvfVG/w7Ep
34N6rtKEBs1f2yGOg8C9B/5QztkWJBdnc/gPRTwVEG3VgZe3ID/T2IiQAQH9AgMB
AAGjggI2MIICMjAdBgNVHQ4EFgQUJd+vTMuh/hRvi/GXbBHxnmujUpQwHwYDVR0j
BBgwFoAUHo6FO9Cw7IssAguXWyBaVWwU6OkwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
YTBiZGNjNS00Y2Q5LTQ2YjAtOWQ3Yi1kMjMxYTllNTdiNTAvMC8xRThFODUzQkQw
QjBFQzhCMkMwMjBCOTc1QjIwNUE1NTZDMTRFOEU5LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMUU4RTg1M0JEMEIwRUM4QjJDMDIwQjk3NUIyMDVBNTU2QzE0
RThFOS5jZXIwgaYGCCsGAQUFBwELBIGZMIGWMIGTBggrBgEFBQcwC4aBhnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2VhMGJkY2M1LTRjZDktNDZiMC05
ZDdiLWQyMzFhOWU1N2I1MC8wLzMxMzAzMzJlMzEzNjM1MmUzMjM1MzIyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM0MzczMTMzMzcucm9hMBgGA1UdIAEB/wQOMAww
CgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBABnpfwwDQYJ
KoZIhvcNAQELBQADggEBAFfJUv4/Pgz+rkdocLfRtG8a5haSo83GKhmTgFZ3q8hD
XWGRDDRMMNeX1Mf7J65Zien4FfmgcRhYvIwFu7Kn2bCovSxTiaYE2IMAFzjyztr6
Q+wW7+mHOhb0kZeVn9QYht8aJAq742rGGRxuI2jzY1Iomy9rBraDyCxo0jItsEV8
ZtsljfTR9NsyA1gGuOALXz4mp2KY8fez7GNlPz5CROnmA/HsCuqzY4wZ9ivIvs1c
YAfqtJkaO0AZsGqo5rP3YfMNx7Y43bxY3fODd2sjQx244KFuZ9W4SFR1r1XN62G4
kW8f0XmU7u++xJiDjD2mXsb50YXmsHHrE/gQFqUXl3o=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:16 2024 by rpki-client on console-fra.rpki-client.org