Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134382e3139322e302f32332d3234203d3e20313339393935.roa
File:                     3130332e3134382e3139322e302f32332d3234203d3e20313339393935.roa (raw, json)
Hash identifier:          8jFyq6owDIp/oBBnFZ45E5p1zazqSnjPhi6HSOQvzEw=
Subject key identifier:   F3:CC:86:E1:56:89:81:62:7D:8B:E4:E9:8F:CA:BC:F0:D4:30:5F:75
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       2279FEF10644EE155FA138D1A285BBF9C365717E
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134382e3139322e302f32332d3234203d3e20313339393935.roa
Signing time:             Mon 06 Dec 2021 06:58:50 +0000
ROA not before:           Mon 06 Dec 2021 06:53:50 +0000
ROA not after:            Tue 06 Dec 2022 06:58:50 +0000
asID:                     139995
IP address blocks:        103.148.192.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:79:fe:f1:06:44:ee:15:5f:a1:38:d1:a2:85:bb:f9:c3:65:71:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Dec  6 06:53:50 2021 GMT
            Not After : Dec  6 06:58:50 2022 GMT
        Subject: CN=3082010A0282010100E314C84EE0DF3132C0B827A2CF0DEA59E91FBE7986271BA5F98CC86C73196AF2D6B578025E660ABC9C09CE06B33F9CEAFF542F8C61A26E501AF19B6339DD87791DEE2A016A92AEF75E0A778964F9ABDB5598E2FCC9DD832121F8C5EFC5996120B1749802716937885A56A2950AAE1EDCB17E2C48AEBB2BF22FDB74CA502EA306798369A84F5A5355DD16472228748281F811BC5FDDB7E2B198101D3EC7C47836D7CA01194C4273F83B16199DDB88384720A44DB581AE32C12F4E5049505C286EE4CF8991337623492D6710029E4FA69B3C27DB5385CCD7474E5D3EBFF466BD3360E2AD99D1AD71F7FF6928D17CE39F3D501B10EC1828160CDDCD158DFFC267530203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:14:c8:4e:e0:df:31:32:c0:b8:27:a2:cf:0d:
                    ea:59:e9:1f:be:79:86:27:1b:a5:f9:8c:c8:6c:73:
                    19:6a:f2:d6:b5:78:02:5e:66:0a:bc:9c:09:ce:06:
                    b3:3f:9c:ea:ff:54:2f:8c:61:a2:6e:50:1a:f1:9b:
                    63:39:dd:87:79:1d:ee:2a:01:6a:92:ae:f7:5e:0a:
                    77:89:64:f9:ab:db:55:98:e2:fc:c9:dd:83:21:21:
                    f8:c5:ef:c5:99:61:20:b1:74:98:02:71:69:37:88:
                    5a:56:a2:95:0a:ae:1e:dc:b1:7e:2c:48:ae:bb:2b:
                    f2:2f:db:74:ca:50:2e:a3:06:79:83:69:a8:4f:5a:
                    53:55:dd:16:47:22:28:74:82:81:f8:11:bc:5f:dd:
                    b7:e2:b1:98:10:1d:3e:c7:c4:78:36:d7:ca:01:19:
                    4c:42:73:f8:3b:16:19:9d:db:88:38:47:20:a4:4d:
                    b5:81:ae:32:c1:2f:4e:50:49:50:5c:28:6e:e4:cf:
                    89:91:33:76:23:49:2d:67:10:02:9e:4f:a6:9b:3c:
                    27:db:53:85:cc:d7:47:4e:5d:3e:bf:f4:66:bd:33:
                    60:e2:ad:99:d1:ad:71:f7:ff:69:28:d1:7c:e3:9f:
                    3d:50:1b:10:ec:18:28:16:0c:dd:cd:15:8d:ff:c2:
                    67:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:CC:86:E1:56:89:81:62:7D:8B:E4:E9:8F:CA:BC:F0:D4:30:5F:75
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134382e3139322e302f32332d3234203d3e20313339393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.148.192.0/23

    Signature Algorithm: sha256WithRSAEncryption
         72:eb:22:69:eb:9a:34:fc:f9:f9:55:79:cb:b7:43:dd:ff:38:
         dd:32:52:22:b9:db:93:32:a7:d1:4b:0b:f1:34:60:24:91:00:
         f6:35:25:58:df:f0:b7:6b:2b:99:84:6a:4f:74:87:cc:24:95:
         9c:be:6c:6b:98:c6:f1:4f:b1:3c:4c:ca:40:f5:fa:a6:15:33:
         ee:a3:fd:1f:e3:28:c3:3e:f7:4f:a2:25:d5:0c:e3:29:9d:f5:
         8e:ce:4a:9e:59:6a:ba:66:94:4b:54:6e:0f:49:71:33:15:b7:
         71:4d:08:30:37:1b:2a:77:de:fb:78:07:7d:61:ff:9d:08:19:
         ac:29:d9:76:48:42:a8:b8:7c:bf:82:11:6c:90:3c:18:1f:2d:
         c5:d0:b7:d6:de:50:57:bd:f6:22:83:45:ea:6e:a5:5d:9a:12:
         0f:b2:5c:fc:17:9b:2a:2e:3e:8a:c2:75:36:36:df:f3:74:b7:
         b3:52:48:d6:81:ff:f6:ec:37:56:43:7e:91:ad:71:5b:9a:18:
         f1:98:31:0e:3d:95:ab:2d:56:b9:3b:1e:92:b9:06:30:1b:e2:
         0a:4e:f4:8a:95:49:85:6e:33:07:12:a5:c7:3f:f3:4a:a7:b3:
         47:44:b4:45:5a:95:3a:29:9e:f9:73:45:a3:ed:8e:ff:ad:c1:
         44:dd:51:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:43 2024 by rpki-client on console-ams.rpki-client.org