Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3133322e3230302e302f32332d3234203d3e203538333639.roa
File:                     3130332e3133322e3230302e302f32332d3234203d3e203538333639.roa (raw, json)
Hash identifier:          i+bu4pJ+IoILNAGhXUtiO8b+cpLsJOBsi4DdmkC8hrQ=
Subject key identifier:   FA:30:EA:63:34:D4:12:95:9E:F0:D8:A5:F4:A7:FD:E2:3A:7E:E1:10
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       59AB931C4568FCBB009EE054EF38A0AD96C0F523
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3133322e3230302e302f32332d3234203d3e203538333639.roa
Signing time:             Mon 03 Jan 2022 08:13:21 +0000
ROA not before:           Mon 03 Jan 2022 08:08:21 +0000
ROA not after:            Tue 03 Jan 2023 08:13:21 +0000
asID:                     58369
IP address blocks:        103.132.200.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:ab:93:1c:45:68:fc:bb:00:9e:e0:54:ef:38:a0:ad:96:c0:f5:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jan  3 08:08:21 2022 GMT
            Not After : Jan  3 08:13:21 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:de:07:54:2f:c6:0c:d8:40:7d:2d:9a:1d:d4:
                    6a:a2:2d:11:72:b6:44:bf:f3:41:63:30:05:3f:dd:
                    4d:47:87:f4:41:22:d8:52:dd:c7:58:e5:8a:14:60:
                    b5:44:fb:99:94:f0:f0:ff:c6:be:d9:bc:71:81:7b:
                    a4:01:62:e9:4e:92:a6:c0:03:9e:8c:33:50:82:09:
                    7b:c3:78:c3:a3:41:42:84:c3:13:aa:e6:36:84:75:
                    34:30:a1:97:d1:60:8e:f6:b6:a4:c1:1c:cf:5f:a7:
                    01:7f:d5:57:36:33:68:29:96:a6:49:8b:62:34:79:
                    1f:50:8d:3a:28:15:c7:dc:bf:38:40:8f:39:fa:ef:
                    95:fa:25:f3:18:1e:cb:c1:11:f7:46:86:b9:fc:2d:
                    b0:5f:8c:fe:bb:6a:c8:02:dd:00:03:3b:f0:d0:9b:
                    62:a2:37:5a:ec:82:c1:b0:09:dd:51:7e:5d:54:ef:
                    10:50:21:61:24:95:d8:fd:47:eb:06:72:e7:eb:1b:
                    b3:eb:b4:56:66:a9:81:66:6e:91:83:58:9c:37:b9:
                    9d:ed:c4:18:87:58:bc:74:43:72:41:09:b2:f1:47:
                    ac:24:2f:6f:54:d0:bd:9a:96:91:ee:20:e9:37:f5:
                    c6:ed:91:a4:92:b1:27:76:b3:16:72:21:8e:26:2d:
                    2a:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:30:EA:63:34:D4:12:95:9E:F0:D8:A5:F4:A7:FD:E2:3A:7E:E1:10
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3133322e3230302e302f32332d3234203d3e203538333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.132.200.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7c:3c:f2:1d:e9:e7:fa:dc:53:69:36:b0:3f:02:b1:e5:84:46:
         df:6b:8b:03:2d:c8:1d:cf:47:15:7c:d0:27:72:cf:8c:43:ba:
         f0:7f:e7:99:3a:8f:14:96:3a:c2:6c:ec:e4:ad:d0:bf:7d:cd:
         23:cf:51:e7:c9:2f:72:67:cb:28:57:59:e0:66:5b:fb:ad:ff:
         90:6a:2f:87:fb:9e:b9:40:58:d5:bb:3a:ac:91:71:41:bf:eb:
         b1:61:b0:30:b2:3a:12:d7:15:0e:52:9f:ff:2b:05:1f:74:14:
         f3:4a:1a:87:9d:c0:74:b7:da:2d:72:5d:71:18:06:e2:b3:35:
         0f:3c:34:de:d4:c0:9c:fb:fa:c0:09:7d:d1:44:eb:12:18:72:
         53:d4:4e:72:b5:51:4c:0b:99:d9:f0:1a:56:a2:26:2b:a5:31:
         d1:f4:6b:fb:76:9e:9a:34:a2:d0:76:52:3a:8a:3b:8f:31:ce:
         61:b5:85:01:ef:1a:56:a3:94:4c:3c:91:ce:ec:24:9f:35:43:
         8f:41:b5:cf:01:db:43:ef:30:30:86:e8:58:ed:36:31:76:18:
         5e:3d:78:6e:07:f7:2d:37:4d:7f:0f:9e:4e:4e:fb:e4:bf:ad:
         d3:9a:3c:ed:35:d4:7a:75:b7:0c:c8:22:50:b3:6a:f6:3f:87:
         d2:10:fe:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:42 2024 by rpki-client on console-ams.rpki-client.org