Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134332e32342e302f32332d3234203d3e203536323432.roa
File:                     3130332e3134332e32342e302f32332d3234203d3e203536323432.roa (raw, json)
Hash identifier:          5sI1+k7dFxNFuBAZKx6EsGSO3k3EBRmkPAgpDqYCO0Y=
Subject key identifier:   B6:8A:02:93:1B:F8:AB:F0:D8:1E:6F:1B:DF:E4:A4:F1:E3:1F:33:9F
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       67DABF6ACAA86AC89AB25B81814686C26619B839
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134332e32342e302f32332d3234203d3e203536323432.roa
Signing time:             Wed 05 May 2021 03:59:01 +0000
ROA not before:           Wed 05 May 2021 03:54:01 +0000
ROA not after:            Thu 05 May 2022 03:59:01 +0000
asID:                     56242
IP address blocks:        103.143.24.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:da:bf:6a:ca:a8:6a:c8:9a:b2:5b:81:81:46:86:c2:66:19:b8:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: May  5 03:54:01 2021 GMT
            Not After : May  5 03:59:01 2022 GMT
        Subject: CN=3082010A0282010100C3DF47B0ACEA5D5007D9F723EEF223AD8F6FC60D9AD75F1798C0FBAA6F58373F1396375657544BEFD8B0E4CE1F3D3A29E3D2F110B3D2F7C2BE3313E3276600C49B138AFD02A44A67B6E394A3A5D401043EC30CEBC11F850CE556C8389F1D13D6EAE1A2E4A6318B3FE748725E2C388ABB9FA560E57F6345112150A39A5A6FF40F6C15ECEF537D4C00D04CB3087C33A9237708ECC5DA01A32C163BFCF2FBC251000ABAEF9BAD01E9E6406FF3B379C701403ABE3EDB2645FF49A797385947D2F37E05F63B8479FD87E21E98E5250C867AAAFAA98F39754702DAF2CA33F06634339555FB8D420B92AF4497E432D902EB1A021E4BFDC7B7FC233A0B7D67DEF6A8B30B0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:df:47:b0:ac:ea:5d:50:07:d9:f7:23:ee:f2:
                    23:ad:8f:6f:c6:0d:9a:d7:5f:17:98:c0:fb:aa:6f:
                    58:37:3f:13:96:37:56:57:54:4b:ef:d8:b0:e4:ce:
                    1f:3d:3a:29:e3:d2:f1:10:b3:d2:f7:c2:be:33:13:
                    e3:27:66:00:c4:9b:13:8a:fd:02:a4:4a:67:b6:e3:
                    94:a3:a5:d4:01:04:3e:c3:0c:eb:c1:1f:85:0c:e5:
                    56:c8:38:9f:1d:13:d6:ea:e1:a2:e4:a6:31:8b:3f:
                    e7:48:72:5e:2c:38:8a:bb:9f:a5:60:e5:7f:63:45:
                    11:21:50:a3:9a:5a:6f:f4:0f:6c:15:ec:ef:53:7d:
                    4c:00:d0:4c:b3:08:7c:33:a9:23:77:08:ec:c5:da:
                    01:a3:2c:16:3b:fc:f2:fb:c2:51:00:0a:ba:ef:9b:
                    ad:01:e9:e6:40:6f:f3:b3:79:c7:01:40:3a:be:3e:
                    db:26:45:ff:49:a7:97:38:59:47:d2:f3:7e:05:f6:
                    3b:84:79:fd:87:e2:1e:98:e5:25:0c:86:7a:aa:fa:
                    a9:8f:39:75:47:02:da:f2:ca:33:f0:66:34:33:95:
                    55:fb:8d:42:0b:92:af:44:97:e4:32:d9:02:eb:1a:
                    02:1e:4b:fd:c7:b7:fc:23:3a:0b:7d:67:de:f6:a8:
                    b3:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:8A:02:93:1B:F8:AB:F0:D8:1E:6F:1B:DF:E4:A4:F1:E3:1F:33:9F
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134332e32342e302f32332d3234203d3e203536323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.143.24.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6e:65:26:c7:8e:09:43:0b:a4:a1:34:2e:45:f3:b7:b6:40:a6:
         68:6c:0c:ce:51:49:5e:b7:43:4a:d8:ae:31:e5:dc:4d:f6:48:
         2b:61:fc:c9:72:1a:ca:dd:99:ee:a1:ea:e8:0a:86:0c:7d:f9:
         e7:ac:7c:57:3e:2c:8f:c5:18:d4:eb:35:0a:b2:7a:ac:e6:4c:
         a1:86:37:46:f0:9b:49:96:b5:de:2a:32:2a:88:62:6a:83:2b:
         d0:3b:3d:e9:15:bd:9f:05:c9:da:c9:ef:75:b6:b8:74:95:a1:
         15:15:4e:0e:16:a0:ea:6f:8d:9a:f0:83:0e:4d:52:de:d2:f3:
         4d:65:bc:78:82:8f:7b:8a:96:68:cf:e8:47:da:46:8f:84:f7:
         14:b9:af:71:f4:6c:bf:bb:fc:1e:50:69:62:ec:ea:05:dd:6b:
         1e:c0:85:1b:14:99:fb:86:0b:0d:05:e2:9d:e7:08:c1:a5:ae:
         57:38:1c:7f:8f:80:96:f5:23:5e:06:a7:96:11:02:fe:92:cc:
         d1:f5:60:48:d3:52:da:36:7c:36:fe:46:6d:90:e5:ba:02:fd:
         d2:b3:28:32:6f:6f:f4:f5:bf:cc:07:7d:58:4f:f9:d4:03:af:
         ac:8d:17:5c:a4:34:88:5e:17:c5:c9:c1:6e:b4:8f:04:5f:c6:
         de:88:e9:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:43 2024 by rpki-client on console-ams.rpki-client.org