Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/3130332e3137352e38322e302f32342d3234203d3e20313338303634.roa
File:                     3130332e3137352e38322e302f32342d3234203d3e20313338303634.roa (raw, json)
Hash identifier:          wNddnqfSFUu15cOOUZ+C+9XRAxze1/G9FuzGR0vsibA=
Subject key identifier:   6E:E5:0C:FB:DF:40:6C:8A:52:04:A2:9A:6E:34:E7:39:77:4C:2C:06
Certificate issuer:       /CN=3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614
Certificate serial:       44237F110B9FD28F2B51CE506E9710ADE3598BE0
Authority key identifier: 3A:D7:DA:61:EB:A5:80:03:D3:EF:29:F7:9A:AF:BC:AD:86:CE:D6:14
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/3130332e3137352e38322e302f32342d3234203d3e20313338303634.roa
Signing time:             Wed 31 May 2023 21:37:13 +0000
ROA not before:           Wed 31 May 2023 21:32:13 +0000
ROA not after:            Wed 29 May 2024 21:37:13 +0000
asID:                     138064
IP address blocks:        103.175.82.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:23:7f:11:0b:9f:d2:8f:2b:51:ce:50:6e:97:10:ad:e3:59:8b:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614
        Validity
            Not Before: May 31 21:32:13 2023 GMT
            Not After : May 29 21:37:13 2024 GMT
        Subject: CN=6EE50CFBDF406C8A5204A29A6E34E739774C2C06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:ee:a0:cc:26:c7:92:96:e1:1d:8b:5c:23:1f:
                    72:c6:a7:08:6f:26:13:9e:5c:bb:f9:12:9d:65:81:
                    0d:9c:8e:55:ef:43:07:8b:30:e8:88:02:b6:33:81:
                    37:28:63:61:26:5d:e7:28:69:42:23:b2:34:ee:af:
                    44:38:d4:1a:35:4e:98:b0:bb:8f:2a:f0:f0:ae:4c:
                    cc:f4:f6:63:b7:b7:e8:69:6d:51:58:3f:20:3e:18:
                    29:da:43:c3:b2:eb:1c:1b:92:70:46:ef:f3:de:40:
                    06:37:6d:53:6e:8a:6d:76:cf:19:a2:66:13:60:1e:
                    89:ed:fd:42:f9:a9:66:58:b3:d7:76:68:8b:da:ba:
                    04:03:b6:11:c7:82:7f:f1:95:7d:d8:74:70:be:29:
                    8a:af:43:2f:99:fc:94:43:a6:db:77:d8:34:8f:a1:
                    ce:b7:76:7d:66:56:61:79:44:93:e4:41:82:ba:59:
                    3a:ad:7e:6d:7c:0d:0b:b3:93:05:f6:9c:6f:72:39:
                    0f:2e:77:23:b5:69:b7:e4:6e:9d:01:26:f4:a0:3e:
                    b9:1a:65:34:0f:9f:4d:af:b2:6d:bd:a0:1b:3f:5d:
                    9f:82:7d:e8:4d:41:80:81:7f:9b:89:da:c6:d6:d1:
                    fe:c6:d4:d4:60:09:66:27:f9:68:52:54:38:32:40:
                    38:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:E5:0C:FB:DF:40:6C:8A:52:04:A2:9A:6E:34:E7:39:77:4C:2C:06
            X509v3 Authority Key Identifier:
                keyid:3A:D7:DA:61:EB:A5:80:03:D3:EF:29:F7:9A:AF:BC:AD:86:CE:D6:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3AD7DA61EBA58003D3EF29F79AAFBCAD86CED614.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fca54781-9678-475c-ac1b-cd4bfcf5d0ea/0/3130332e3137352e38322e302f32342d3234203d3e20313338303634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.175.82.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:22:fe:c7:0b:7c:d8:9e:0b:8a:3c:c1:c4:93:87:5f:ec:72:
         c4:2d:71:5e:b4:67:47:52:0e:cc:bb:95:34:44:40:4c:ec:9d:
         92:99:17:44:9f:f0:5b:11:ce:68:3d:d1:51:db:68:96:5d:fe:
         58:da:bd:85:e1:ae:4b:cf:d9:77:90:da:23:53:8d:16:8f:17:
         67:90:51:dd:af:75:65:3c:6c:2e:53:1a:f9:b9:8b:5c:00:ff:
         f4:cf:74:24:fd:aa:b2:88:44:3d:46:68:1b:eb:4a:31:c8:29:
         ed:2e:01:7f:d6:fc:4e:81:1d:92:b5:8c:6b:c0:78:8f:c4:d3:
         c0:f0:7b:4f:db:7d:91:98:84:b9:18:af:25:2c:af:dd:79:8f:
         9f:0f:77:0d:45:bb:e5:34:52:9b:4a:a4:e3:ed:7b:8d:f5:38:
         7a:1f:59:50:64:bd:b4:80:d2:b9:8f:2a:06:6f:75:42:dc:27:
         e0:d7:3e:5a:71:08:f5:a2:1c:b2:b2:57:28:d9:6d:2c:2b:e0:
         68:2d:d6:38:c7:61:74:3c:5d:de:9c:e2:3b:d4:1c:48:82:6a:
         b1:d0:cb:77:e1:e8:97:35:0e:c3:06:81:d3:e3:c0:21:01:65:
         e8:b6:21:ea:78:01:3f:f9:6d:4b:73:9d:ed:fa:a2:28:16:5a:
         57:ec:17:6f
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIURCN/EQuf0o8rUc5QbpcQreNZi+AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoM0FEN0RBNjFFQkE1ODAwM0QzRUYyOUY3OUFBRkJDQUQ4
NkNFRDYxNDAeFw0yMzA1MzEyMTMyMTNaFw0yNDA1MjkyMTM3MTNaMDMxMTAvBgNV
BAMTKDZFRTUwQ0ZCREY0MDZDOEE1MjA0QTI5QTZFMzRFNzM5Nzc0QzJDMDYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDo7qDMJseSluEdi1wjH3LGpwhv
JhOeXLv5Ep1lgQ2cjlXvQweLMOiIArYzgTcoY2EmXecoaUIjsjTur0Q41Bo1Tpiw
u48q8PCuTMz09mO3t+hpbVFYPyA+GCnaQ8Oy6xwbknBG7/PeQAY3bVNuim12zxmi
ZhNgHont/UL5qWZYs9d2aIvaugQDthHHgn/xlX3YdHC+KYqvQy+Z/JRDptt32DSP
oc63dn1mVmF5RJPkQYK6WTqtfm18DQuzkwX2nG9yOQ8udyO1abfkbp0BJvSgPrka
ZTQPn02vsm29oBs/XZ+CfehNQYCBf5uJ2sbW0f7G1NRgCWYn+WhSVDgyQDj3AgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUbuUM+99AbIpSBKKabjTnOXdMLAYwHwYDVR0j
BBgwFoAUOtfaYeulgAPT7yn3mq+8rYbO1hQwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m
Y2E1NDc4MS05Njc4LTQ3NWMtYWMxYi1jZDRiZmNmNWQwZWEvMC8zQUQ3REE2MUVC
QTU4MDAzRDNFRjI5Rjc5QUFGQkNBRDg2Q0VENjE0LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvM0FEN0RBNjFFQkE1ODAwM0QzRUYyOUY3OUFBRkJDQUQ4NkNF
RDYxNC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2ZjYTU0NzgxLTk2NzgtNDc1Yy1h
YzFiLWNkNGJmY2Y1ZDBlYS8wLzMxMzAzMzJlMzEzNzM1MmUzODMyMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzMzM4MzAzNjM0LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ69SMA0GCSqG
SIb3DQEBCwUAA4IBAQAeIv7HC3zYnguKPMHEk4df7HLELXFetGdHUg7Mu5U0REBM
7J2SmRdEn/BbEc5oPdFR22iWXf5Y2r2F4a5Lz9l3kNojU40WjxdnkFHdr3VlPGwu
Uxr5uYtcAP/0z3Qk/aqyiEQ9Rmgb60oxyCntLgF/1vxOgR2StYxrwHiPxNPA8HtP
232RmIS5GK8lLK/deY+fD3cNRbvlNFKbSqTj7XuN9Th6H1lQZL20gNK5jyoGb3VC
3Cfg1z5acQj1ohyyslco2W0sK+BoLdY4x2F0PF3enOI71BxIgmqx0Mt34eiXNQ7D
BoHT48AhAWXotiHqeAE/+W1Lc53t+qIoFlpX7Bdv
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:16 2024 by rpki-client on console-fra.rpki-client.org