Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/eb81bcea-b70f-4374-924b-b6c778109837/0/3130332e3130382e3234332e302f32342d3234203d3e20313336383535.roa
File:                     3130332e3130382e3234332e302f32342d3234203d3e20313336383535.roa (raw, json)
Hash identifier:          Rr3Ndixz3tdgs1njxAGwWxcrpHl54bL2e6AGa7IYktU=
Subject key identifier:   37:FD:33:68:5E:02:1A:86:56:86:58:EA:7D:DD:38:41:C8:F6:C6:8C
Certificate issuer:       /CN=CA47BA6D9780611AEA68BC9BF72724AE94799AA6
Certificate serial:       72276E7FC1C97FD23EE70B7E79B1B6F9922D55D8
Authority key identifier: CA:47:BA:6D:97:80:61:1A:EA:68:BC:9B:F7:27:24:AE:94:79:9A:A6
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA47BA6D9780611AEA68BC9BF72724AE94799AA6.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/eb81bcea-b70f-4374-924b-b6c778109837/0/3130332e3130382e3234332e302f32342d3234203d3e20313336383535.roa
Signing time:             Fri 04 Feb 2022 15:43:22 +0000
ROA not before:           Fri 04 Feb 2022 15:38:22 +0000
ROA not after:            Sat 04 Feb 2023 15:43:22 +0000
asID:                     136855
IP address blocks:        103.108.243.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:27:6e:7f:c1:c9:7f:d2:3e:e7:0b:7e:79:b1:b6:f9:92:2d:55:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA47BA6D9780611AEA68BC9BF72724AE94799AA6
        Validity
            Not Before: Feb  4 15:38:22 2022 GMT
            Not After : Feb  4 15:43:22 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ab:bc:c9:9c:3a:10:c4:b8:c8:89:cb:b3:fc:
                    72:f5:cf:b7:c2:35:2d:c7:99:02:e8:4e:0c:17:7c:
                    d5:73:6f:9f:10:cb:8e:44:c9:06:34:8f:db:de:c0:
                    a9:8a:0f:75:9c:ce:db:0a:56:4c:b5:7e:13:b0:e1:
                    91:1f:76:72:f9:40:9d:96:66:e9:27:21:96:5a:1c:
                    15:47:4c:50:80:3e:e0:af:98:cd:cd:a3:3f:78:e5:
                    e6:23:3e:9f:06:7d:24:95:9b:72:e9:ad:06:60:5c:
                    1e:09:aa:71:1d:a0:58:a5:83:40:00:06:06:97:b9:
                    2f:96:3c:7d:2f:08:d6:82:4a:21:72:18:0c:54:e1:
                    91:74:3e:4f:b6:a1:80:e0:74:09:7c:35:ba:cb:fc:
                    36:4a:32:71:d8:26:19:5a:84:c5:4f:c7:ad:94:6d:
                    fa:c0:e0:e7:11:2c:eb:4d:6a:cb:5f:04:4a:01:7f:
                    5b:3d:e1:27:1e:ff:29:9b:b0:94:34:5a:0a:48:fc:
                    f8:e1:93:95:6a:e9:92:d0:62:1f:a3:64:70:66:60:
                    19:b5:cd:cd:33:98:46:c8:6e:d7:5e:fc:35:1d:3c:
                    db:a0:c2:88:17:78:f4:ea:8d:cb:43:50:70:18:d4:
                    78:39:cf:c5:a6:4f:78:9f:c3:2b:fc:08:ee:8d:68:
                    6c:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:FD:33:68:5E:02:1A:86:56:86:58:EA:7D:DD:38:41:C8:F6:C6:8C
            X509v3 Authority Key Identifier:
                keyid:CA:47:BA:6D:97:80:61:1A:EA:68:BC:9B:F7:27:24:AE:94:79:9A:A6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/eb81bcea-b70f-4374-924b-b6c778109837/0/CA47BA6D9780611AEA68BC9BF72724AE94799AA6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/CA47BA6D9780611AEA68BC9BF72724AE94799AA6.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/eb81bcea-b70f-4374-924b-b6c778109837/0/3130332e3130382e3234332e302f32342d3234203d3e20313336383535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.108.243.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:65:bf:cc:74:a4:18:f0:6a:46:7a:2c:41:5a:f0:43:72:fb:
         90:f3:ec:50:bf:f6:03:0b:ea:3f:4a:41:56:80:c1:74:ec:b3:
         74:3c:8d:28:8d:fd:be:3a:63:0b:83:25:10:e9:71:fc:35:ca:
         20:dc:64:e7:ab:af:c0:fd:2d:ed:84:24:77:87:a2:d0:f3:47:
         03:63:6c:56:b9:be:81:f7:fd:cb:e9:59:2a:8b:76:c0:72:aa:
         89:84:51:9b:cc:3a:67:38:a3:8e:52:34:31:22:dd:34:79:79:
         35:6b:ae:f6:59:df:07:c4:90:9f:02:69:28:5c:f3:23:a5:fa:
         cf:e6:60:cc:f1:d2:99:65:e9:eb:3a:40:bf:59:c6:56:73:d8:
         40:c3:fd:50:0d:8d:94:2d:5e:36:06:84:c8:f3:a8:71:d8:82:
         ea:46:26:a3:73:6d:ac:bb:9c:09:da:43:79:8f:6b:6a:9a:f7:
         d8:5f:70:44:db:d3:cf:b3:65:eb:9b:60:fa:4f:67:38:9b:b7:
         38:a0:2b:2c:a1:5e:f3:f0:0d:7d:ec:6f:52:d3:05:ab:a8:dc:
         71:d5:0e:67:5f:f1:f2:2d:11:a9:19:f3:c9:52:97:bb:ba:93:
         bf:9c:c5:83:75:ad:60:d1:f8:66:8b:48:1c:75:42:72:14:d3:
         df:be:85:7e
-----BEGIN CERTIFICATE-----
MIIHKDCCBhCgAwIBAgIUciduf8HJf9I+5wt+ebG2+ZItVdgwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQ0E0N0JBNkQ5NzgwNjExQUVBNjhCQzlCRjcyNzI0QUU5
NDc5OUFBNjAeFw0yMjAyMDQxNTM4MjJaFw0yMzAyMDQxNTQzMjJaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkFBQkJDQzk5QzNBMTBDNEI4
Qzg4OUNCQjNGQzcyRjVDRkI3QzIzNTJEQzc5OTAyRTg0RTBDMTc3Q0Q1NzM2RjlG
MTBDQjhFNDRDOTA2MzQ4RkRCREVDMEE5OEEwRjc1OUNDRURCMEE1NjRDQjU3RTEz
QjBFMTkxMUY3NjcyRjk0MDlEOTY2NkU5MjcyMTk2NUExQzE1NDc0QzUwODAzRUUw
QUY5OENEQ0RBMzNGNzhFNUU2MjMzRTlGMDY3RDI0OTU5QjcyRTlBRDA2NjA1QzFF
MDlBQTcxMURBMDU4QTU4MzQwMDAwNjA2OTdCOTJGOTYzQzdEMkYwOEQ2ODI0QTIx
NzIxODBDNTRFMTkxNzQzRTRGQjZBMTgwRTA3NDA5N0MzNUJBQ0JGQzM2NEEzMjcx
RDgyNjE5NUE4NEM1NEZDN0FEOTQ2REZBQzBFMEU3MTEyQ0VCNEQ2QUNCNUYwNDRB
MDE3RjVCM0RFMTI3MUVGRjI5OUJCMDk0MzQ1QTBBNDhGQ0Y4RTE5Mzk1NkFFOTky
RDA2MjFGQTM2NDcwNjY2MDE5QjVDRENEMzM5ODQ2Qzg2RUQ3NUVGQzM1MUQzQ0RC
QTBDMjg4MTc3OEY0RUE4RENCNDM1MDcwMThENDc4MzlDRkM1QTY0Rjc4OUZDMzJC
RkMwOEVFOEQ2ODZDNkQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAuqu8yZw6EMS4yInLs/xy9c+3wjUtx5kC6E4MF3zVc2+fEMuORMkG
NI/b3sCpig91nM7bClZMtX4TsOGRH3Zy+UCdlmbpJyGWWhwVR0xQgD7gr5jNzaM/
eOXmIz6fBn0klZty6a0GYFweCapxHaBYpYNAAAYGl7kvljx9LwjWgkohchgMVOGR
dD5PtqGA4HQJfDW6y/w2SjJx2CYZWoTFT8etlG36wODnESzrTWrLXwRKAX9bPeEn
Hv8pm7CUNFoKSPz44ZOVaumS0GIfo2RwZmAZtc3NM5hGyG7XXvw1HTzboMKIF3j0
6o3LQ1BwGNR4Oc/Fpk94n8Mr/AjujWhsbQIDAQABo4ICNjCCAjIwHQYDVR0OBBYE
FDf9M2heAhqGVoZY6n3dOEHI9saMMB8GA1UdIwQYMBaAFMpHum2XgGEa6mi8m/cn
JK6UeZqmMA4GA1UdDwEB/wQEAwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZWI4MWJjZWEtYjcwZi00Mzc0LTky
NGItYjZjNzc4MTA5ODM3LzAvQ0E0N0JBNkQ5NzgwNjExQUVBNjhCQzlCRjcyNzI0
QUU5NDc5OUFBNi5jcmwwdAYIKwYBBQUHAQEEaDBmMGQGCCsGAQUFBzAChlhyc3lu
YzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8yL0NBNDdCQTZE
OTc4MDYxMUFFQTY4QkM5QkY3MjcyNEFFOTQ3OTlBQTYuY2VyMIGmBggrBgEFBQcB
CwSBmTCBljCBkwYIKwYBBQUHMAuGgYZyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby9lYjgxYmNlYS1iNzBmLTQzNzQtOTI0Yi1iNmM3NzgxMDk4MzcvMC8z
MTMwMzMyZTMxMzAzODJlMzIzNDMzMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEz
MzM2MzgzNTM1LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAZ2zzMA0GCSqGSIb3DQEBCwUAA4IBAQBXZb/M
dKQY8GpGeixBWvBDcvuQ8+xQv/YDC+o/SkFWgMF07LN0PI0ojf2+OmMLgyUQ6XH8
Ncog3GTnq6/A/S3thCR3h6LQ80cDY2xWub6B9/3L6Vkqi3bAcqqJhFGbzDpnOKOO
UjQxIt00eXk1a672Wd8HxJCfAmkoXPMjpfrP5mDM8dKZZenrOkC/WcZWc9hAw/1Q
DY2ULV42BoTI86hx2ILqRiajc22su5wJ2kN5j2tqmvfYX3BE29PPs2Xrm2D6T2c4
m7c4oCssoV7z8A197G9S0wWrqNxx1Q5nX/HyLRGpGfPJUpe7upO/nMWDda1g0fhm
i0gcdUJyFNPfvoV+
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:16 2024 by rpki-client on console-fra.rpki-client.org