Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3131392e3131342e302f32342d3234203d3e2030.roa
File:                     3130332e3131392e3131342e302f32342d3234203d3e2030.roa (raw, json)
Hash identifier:          Q2fZ9Ij5qKkthE8J8ogU3fwQFyW5wBKzJXjrVDbbbBM=
Subject key identifier:   6D:36:0B:F9:08:DB:1A:DB:60:1F:2B:4A:B1:FE:90:21:EF:75:91:19
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       3BFE962FE8DC233F9B95FC7C2AECBE79E325807D
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3131392e3131342e302f32342d3234203d3e2030.roa
Signing time:             Wed 02 Feb 2022 06:33:05 +0000
ROA not before:           Wed 02 Feb 2022 06:28:05 +0000
ROA not after:            Thu 02 Feb 2023 06:33:05 +0000
asID:                     0
IP address blocks:        103.119.114.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:fe:96:2f:e8:dc:23:3f:9b:95:fc:7c:2a:ec:be:79:e3:25:80:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb  2 06:28:05 2022 GMT
            Not After : Feb  2 06:33:05 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:01:d2:44:dc:ae:b0:58:52:bf:70:7b:11:7f:
                    70:96:16:69:a6:47:77:c6:d1:1d:36:00:6b:98:e9:
                    80:c3:46:5e:ce:da:63:2e:82:ba:8f:9c:89:f9:c8:
                    d1:c2:7f:c5:d4:a3:3e:8c:bf:08:63:50:d8:18:09:
                    8d:24:e5:64:fc:f1:b5:74:d9:6a:5a:b1:3a:2d:15:
                    fa:cb:dc:20:80:28:af:4e:af:8f:59:fb:e6:1b:21:
                    32:df:31:9a:14:c6:99:f7:54:01:93:bd:c0:98:eb:
                    a1:5e:a2:64:78:e2:59:ba:20:9e:61:69:f3:90:d2:
                    fe:af:d1:9a:a7:ff:84:da:da:02:3c:41:55:44:d3:
                    f4:67:6d:17:04:2d:70:32:a5:fb:42:39:53:98:84:
                    8d:af:9f:92:a1:be:c3:e5:ab:1c:c2:ef:b8:d4:d6:
                    2a:59:d3:e4:64:b3:69:30:72:cf:72:6f:f7:75:38:
                    dd:62:4e:2c:9b:4f:30:d6:82:a1:92:5b:bc:1f:e9:
                    2c:24:7c:7c:73:8f:28:28:79:5d:e3:fd:14:e1:80:
                    72:f5:14:0c:6f:67:5c:0c:a9:2d:04:ae:3f:f7:96:
                    9a:09:7d:9c:09:02:73:c5:03:ad:27:31:9b:0d:61:
                    39:d3:a0:b0:95:01:6b:3d:8b:91:48:4d:db:a6:8e:
                    d8:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:36:0B:F9:08:DB:1A:DB:60:1F:2B:4A:B1:FE:90:21:EF:75:91:19
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3131392e3131342e302f32342d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.119.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:37:60:d9:bb:ce:2d:e8:0b:5c:19:7d:1c:62:bb:51:4d:fe:
         38:76:04:82:d8:52:c5:ee:70:99:ef:13:e5:3c:49:23:a6:08:
         a8:2e:6e:5d:84:e0:90:5e:3b:2d:27:c7:ba:b5:9f:e3:ed:81:
         57:01:45:a9:67:48:bb:c9:84:d8:88:9a:0b:9a:0a:23:08:9d:
         99:53:64:3e:a8:5c:d5:70:01:95:32:cb:b5:d2:e8:14:75:a5:
         38:c5:34:e6:26:86:c7:f7:97:c0:fc:74:b0:6c:82:bc:66:c9:
         4f:be:59:1c:22:c5:51:4b:a5:23:e3:d6:4d:2e:93:6a:c3:18:
         79:eb:b2:9a:20:db:1f:2f:20:2a:b3:f8:7e:a5:69:49:13:37:
         2f:31:50:15:8a:20:53:48:92:a7:c6:1b:f9:54:85:a6:39:9c:
         67:08:3c:d6:e3:4a:e9:d1:fb:c7:11:7f:de:5a:9c:3c:bc:f9:
         fc:cb:f7:50:6a:f0:bd:37:3f:93:36:a8:5a:dc:bb:6c:06:09:
         44:69:07:cb:26:58:52:66:53:52:ed:3a:c8:7f:9b:63:e2:2c:
         d8:e7:63:ed:01:1d:6c:22:42:24:b7:65:2d:9f:1e:e6:93:61:
         27:0e:af:09:78:a2:44:8b:d2:74:87:55:a7:98:16:00:e9:90:
         1c:e3:a8:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:08 2024 by rpki-client on console-fra.rpki-client.org