Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134322e39342e302f32332d3234203d3e20313339333730.roa
File:                     3130332e3134322e39342e302f32332d3234203d3e20313339333730.roa (raw, json)
Hash identifier:          AXAw57eP1XPt0h07izKsdIb3t11P8P0wA95xkGECDnU=
Subject key identifier:   25:AE:F1:2A:CA:B6:A3:9F:82:C8:C8:26:03:8D:17:6C:DA:D1:1F:D7
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       7C2F3E1F18093C04CEFAEC42C62EA1AB7DFE1A
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134322e39342e302f32332d3234203d3e20313339333730.roa
Signing time:             Thu 09 Sep 2021 08:21:51 +0000
ROA not before:           Thu 09 Sep 2021 08:16:51 +0000
ROA not after:            Fri 09 Sep 2022 08:21:51 +0000
asID:                     139370
IP address blocks:        103.142.94.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:2f:3e:1f:18:09:3c:04:ce:fa:ec:42:c6:2e:a1:ab:7d:fe:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Sep  9 08:16:51 2021 GMT
            Not After : Sep  9 08:21:51 2022 GMT
        Subject: CN=3082010A0282010100A95D8D553364F5A51A4A4558EE708DAD0BF780811556D5C60128898B49C3DBF4C8C468F00DCA069A9587BF22E899FDF3C40BE3A7FCCDAD0DE11F6AA69A889A0D94586174DBC89C9AFD76AB13D1F85C02413A5DAA9D60EEC5E3CDA8B7B50BC912F4250049482EDAAFB9EB5ADC28A5C326DE8FCD757A145A9D98D967CDA56D9A681FF06076CB02E9A664F359250D819132B64A4BB288E146C154B52DFC778B90F64C5C5E3505C04D83535FDEE74DD90576D1021A322424CB7385A0B644E48CCF8B039445BE21C9005BAB8C10EC200CE1B0F04A4C44385D9E2404CB0546548EA0AB583363D2F7870768B8A4AA1545B9CB11CF88FE04F8D19FF81C74964CF9D3B2070203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:5d:8d:55:33:64:f5:a5:1a:4a:45:58:ee:70:
                    8d:ad:0b:f7:80:81:15:56:d5:c6:01:28:89:8b:49:
                    c3:db:f4:c8:c4:68:f0:0d:ca:06:9a:95:87:bf:22:
                    e8:99:fd:f3:c4:0b:e3:a7:fc:cd:ad:0d:e1:1f:6a:
                    a6:9a:88:9a:0d:94:58:61:74:db:c8:9c:9a:fd:76:
                    ab:13:d1:f8:5c:02:41:3a:5d:aa:9d:60:ee:c5:e3:
                    cd:a8:b7:b5:0b:c9:12:f4:25:00:49:48:2e:da:af:
                    b9:eb:5a:dc:28:a5:c3:26:de:8f:cd:75:7a:14:5a:
                    9d:98:d9:67:cd:a5:6d:9a:68:1f:f0:60:76:cb:02:
                    e9:a6:64:f3:59:25:0d:81:91:32:b6:4a:4b:b2:88:
                    e1:46:c1:54:b5:2d:fc:77:8b:90:f6:4c:5c:5e:35:
                    05:c0:4d:83:53:5f:de:e7:4d:d9:05:76:d1:02:1a:
                    32:24:24:cb:73:85:a0:b6:44:e4:8c:cf:8b:03:94:
                    45:be:21:c9:00:5b:ab:8c:10:ec:20:0c:e1:b0:f0:
                    4a:4c:44:38:5d:9e:24:04:cb:05:46:54:8e:a0:ab:
                    58:33:63:d2:f7:87:07:68:b8:a4:aa:15:45:b9:cb:
                    11:cf:88:fe:04:f8:d1:9f:f8:1c:74:96:4c:f9:d3:
                    b2:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:AE:F1:2A:CA:B6:A3:9F:82:C8:C8:26:03:8D:17:6C:DA:D1:1F:D7
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134322e39342e302f32332d3234203d3e20313339333730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.142.94.0/23

    Signature Algorithm: sha256WithRSAEncryption
         89:84:87:9e:4c:8f:62:0b:a9:e2:92:c4:7b:56:d0:8d:48:b6:
         02:7e:77:80:34:98:c4:d4:16:0b:fc:59:7c:71:3b:c4:08:15:
         75:17:7c:7e:06:73:4b:a4:6d:23:0c:2d:98:48:b0:89:14:57:
         f5:d7:7f:eb:b5:1e:00:ac:d2:83:ff:fe:06:12:bb:3b:8c:f8:
         d6:85:18:7c:bc:3a:da:84:05:1c:b0:10:f3:46:f1:f3:49:17:
         04:18:25:5a:90:60:c7:24:b0:9f:8b:6f:c3:3e:bd:eb:32:56:
         dd:b9:45:e9:1b:cf:f0:57:ee:e3:c3:d2:4e:43:31:05:4c:f2:
         3a:e3:a5:f9:90:98:64:98:ab:63:a0:03:60:27:83:bd:2c:cd:
         40:9f:cb:dd:e7:e4:2c:df:55:fb:49:c5:24:f6:80:39:1b:92:
         d9:00:16:2f:b4:35:75:0d:42:00:eb:04:5d:cf:ef:09:e4:67:
         8c:5b:e3:6a:2b:cc:fa:95:a1:87:d6:ca:43:b5:c6:22:47:44:
         14:32:0c:e7:fd:80:1c:24:12:fe:c7:d6:07:5d:74:c4:95:b6:
         b5:20:79:7a:23:f2:af:88:6d:4e:f7:02:ed:b1:fe:2d:dc:be:
         d0:97:88:ab:77:9f:d8:9e:f1:54:ce:13:09:d4:e9:03:a2:37:
         a1:d1:be:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:09 2024 by rpki-client on console-fra.rpki-client.org