Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/3130332e37332e3139322e302f32342d3234203d3e20313439343039.roa
File:                     3130332e37332e3139322e302f32342d3234203d3e20313439343039.roa (raw, json)
Hash identifier:          NbZuvqEgJhu4XNFMpmOmN6W87pROjMm2aiGg9WtzFA8=
Subject key identifier:   28:80:EE:37:98:08:FD:B7:DD:5D:60:B5:71:0D:BB:39:17:55:6D:ED
Certificate issuer:       /CN=BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8
Certificate serial:       65B9DB3F19C1731D3D46A6A0AB2CCE83251BBA84
Authority key identifier: BC:8B:D5:48:5C:9B:01:D1:76:F3:FA:A8:F3:81:E5:EC:ED:8C:D3:B8
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/3130332e37332e3139322e302f32342d3234203d3e20313439343039.roa
Signing time:             Fri 26 May 2023 03:08:33 +0000
ROA not before:           Fri 26 May 2023 03:03:33 +0000
ROA not after:            Fri 24 May 2024 03:08:33 +0000
asID:                     149409
IP address blocks:        103.73.192.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:b9:db:3f:19:c1:73:1d:3d:46:a6:a0:ab:2c:ce:83:25:1b:ba:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8
        Validity
            Not Before: May 26 03:03:33 2023 GMT
            Not After : May 24 03:08:33 2024 GMT
        Subject: CN=2880EE379808FDB7DD5D60B5710DBB3917556DED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:9c:c3:a5:05:37:ae:35:c3:80:36:4d:bb:40:
                    d2:57:7b:3c:8c:c7:c9:c6:e6:39:30:b3:99:af:da:
                    10:d4:67:97:0e:7a:44:ae:d9:d6:e5:63:7e:b8:c3:
                    a5:1c:12:02:b7:70:e3:6f:db:c2:d0:5a:a0:d8:88:
                    b6:16:18:54:b0:78:91:90:9e:87:33:23:04:2d:6a:
                    15:70:40:77:ee:59:38:ac:f9:7b:fc:0e:54:f9:fc:
                    72:a4:84:4f:96:66:45:67:6a:5d:11:47:d0:a0:81:
                    5b:50:b5:c5:34:8b:97:f0:61:6f:1c:3d:5d:52:e6:
                    81:d9:98:f4:4d:76:78:e3:bd:1b:27:78:30:92:ed:
                    a2:0b:bf:de:15:fb:4d:31:30:96:2d:0a:af:f4:3e:
                    d4:4b:00:79:ee:c1:ff:e1:cd:50:27:f4:fa:04:b0:
                    a4:48:a1:27:17:af:2a:21:30:53:de:6d:eb:dc:e8:
                    76:16:c4:38:ba:33:7f:fb:78:71:9a:21:09:02:bf:
                    fe:3f:82:45:96:a8:0c:0a:6b:59:fe:af:67:cd:65:
                    92:c6:b8:ad:b4:b1:59:13:ff:30:ed:9d:91:5c:f2:
                    30:64:c1:44:22:df:a9:23:c7:52:7d:fc:97:fb:0b:
                    aa:e1:4b:9e:86:ed:79:65:27:08:84:18:5a:7a:6c:
                    25:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:80:EE:37:98:08:FD:B7:DD:5D:60:B5:71:0D:BB:39:17:55:6D:ED
            X509v3 Authority Key Identifier:
                keyid:BC:8B:D5:48:5C:9B:01:D1:76:F3:FA:A8:F3:81:E5:EC:ED:8C:D3:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BC8BD5485C9B01D176F3FAA8F381E5ECED8CD3B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f7418013-1679-496b-80f6-2d05cc5be72f/0/3130332e37332e3139322e302f32342d3234203d3e20313439343039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.73.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0e:a2:a8:1b:5c:13:91:d7:eb:91:b9:d9:09:fd:d5:b8:a8:7e:
         6a:a4:18:97:57:0a:e8:2d:d0:f8:e6:16:59:e3:96:f9:95:86:
         1f:78:65:5c:3d:76:32:56:72:02:c6:5e:00:a1:1f:0f:4d:b9:
         d2:7b:26:6e:6d:43:5b:d8:2c:ba:9a:3f:19:3a:97:54:fc:7c:
         c2:9a:dc:c9:72:cf:f0:82:31:7f:23:8b:cd:ee:c1:fb:b7:20:
         f2:13:47:57:19:76:04:a4:45:ac:d7:ba:fa:44:c9:ce:be:e8:
         58:e6:17:83:ed:41:b2:64:bb:f3:dd:8c:0d:53:c3:41:19:f0:
         43:02:14:00:99:d2:a1:f4:67:b6:a6:05:80:b5:07:36:f7:98:
         f1:ac:ec:46:47:55:9b:fb:d1:f7:3e:b0:1c:e7:5d:18:25:37:
         7c:2a:7c:88:86:5d:83:15:50:93:66:3d:4e:f9:c4:0c:8f:bc:
         41:18:08:bd:f8:27:bb:c4:46:9a:03:96:ff:60:31:c6:5a:4a:
         70:00:08:a8:ab:4a:17:bf:4e:3f:d3:c0:7e:f8:52:ec:f5:e8:
         dc:10:76:c4:02:74:81:f5:f4:6a:6f:8f:f3:50:b7:d4:3a:f0:
         24:89:d4:de:c6:25:6b:4e:48:33:a2:42:1f:c7:fd:09:b4:da:
         c7:8b:20:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:16 2024 by rpki-client on console-fra.rpki-client.org