Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132342e342e302f32322d3234203d3e2030.roa
File:                     3130332e3132342e342e302f32322d3234203d3e2030.roa (raw, json)
Hash identifier:          EBxKQB4Fk+RrOmdJLy2ySeEpIKtqy8hT/h9U9Dd/gNE=
Subject key identifier:   E0:68:17:A8:77:58:B1:91:AD:4A:B4:F1:C3:F6:98:5F:D7:47:58:C8
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       46A4FBBEFFE72BC797BC18DC123F42907F47F57A
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132342e342e302f32322d3234203d3e2030.roa
Signing time:             Wed 02 Feb 2022 06:28:22 +0000
ROA not before:           Wed 02 Feb 2022 06:23:22 +0000
ROA not after:            Thu 02 Feb 2023 06:28:22 +0000
asID:                     0
IP address blocks:        103.124.4.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:a4:fb:be:ff:e7:2b:c7:97:bc:18:dc:12:3f:42:90:7f:47:f5:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb  2 06:23:22 2022 GMT
            Not After : Feb  2 06:28:22 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:4f:57:59:f3:21:3e:c8:2c:e7:37:79:ea:3f:
                    dc:5f:60:3f:ce:d3:cc:a7:f8:f6:9b:6b:7c:09:4e:
                    92:b0:a6:77:93:b1:19:f7:72:2a:99:34:90:2c:d4:
                    a9:78:b0:0e:08:6c:d0:46:53:22:3d:1d:88:bc:09:
                    d1:e7:a8:a5:c1:24:9d:09:d6:55:30:13:de:b4:44:
                    8b:b1:42:75:b4:59:cd:c0:85:69:fd:d1:ab:fc:19:
                    78:18:c7:27:6e:d6:4e:b4:46:e7:e4:89:d9:3f:e2:
                    1a:b1:fc:8d:70:da:2e:d8:5c:0e:2a:61:6f:36:48:
                    39:67:1b:c4:27:eb:d6:3b:03:47:3a:45:ad:71:82:
                    b1:4c:3f:d8:3f:38:54:c0:cd:ab:e2:33:03:15:34:
                    fa:c7:a6:07:b0:ab:cf:a3:f8:18:f6:e6:c0:05:21:
                    ee:e2:d6:ac:40:f0:5e:ac:9f:af:b9:92:03:e6:03:
                    d1:47:63:fa:49:cc:a8:b4:f8:1c:9f:2c:30:d8:a2:
                    af:bd:e8:79:3a:59:19:a3:47:f0:23:a3:14:f9:cc:
                    85:19:67:90:87:02:68:60:05:fb:84:6d:8c:3d:45:
                    42:48:cb:7f:b1:54:26:86:c0:a6:63:9b:5c:c0:2a:
                    7b:53:5f:33:09:fa:85:5a:fa:64:8d:39:07:30:b7:
                    db:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:68:17:A8:77:58:B1:91:AD:4A:B4:F1:C3:F6:98:5F:D7:47:58:C8
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3132342e342e302f32322d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.124.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8d:5d:cb:6a:87:bc:19:ca:6a:29:ef:3f:65:fc:57:7d:af:9c:
         e6:c7:c4:40:84:5e:67:da:ac:38:4f:25:20:ea:15:c2:2a:28:
         2d:63:97:a7:54:db:b3:7e:5b:75:6d:2d:33:d6:de:02:8e:6e:
         7b:ae:c0:f6:00:fc:b0:04:a2:08:ee:96:6e:bf:a9:57:4e:ca:
         c8:d5:2f:22:b0:05:45:51:8c:64:19:d8:d6:19:dd:72:0a:b4:
         2b:34:9b:97:58:d0:41:ba:7f:17:84:37:83:0b:a4:59:94:1c:
         99:9d:95:6f:48:e0:a7:e2:d4:c6:ca:7e:23:90:a1:4d:68:31:
         f9:15:e0:42:7f:a3:38:d2:86:9a:0f:f8:37:0c:27:66:43:63:
         42:cb:af:74:34:8f:c2:2f:f9:9b:47:6e:38:9b:f3:e9:83:e3:
         e3:53:ef:35:af:ff:f7:d0:39:49:53:d8:6a:5d:14:3a:13:90:
         71:a2:37:e0:e3:24:9c:9e:d8:7d:a5:54:84:bf:c6:05:8d:4a:
         7f:5a:02:c6:4e:45:7c:43:a0:64:7f:e8:39:2f:6d:6c:c4:ef:
         b1:54:0c:3e:c4:f8:0f:f9:ca:0c:0a:45:27:14:45:5c:11:40:
         7a:ae:8a:91:b4:3e:96:11:12:7d:f5:b4:a0:79:d9:3b:4d:55:
         ab:03:9a:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:42 2024 by rpki-client on console-ams.rpki-client.org