Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134382e322e302f32332d3234203d3e20313339393737.roa
File:                     3130332e3134382e322e302f32332d3234203d3e20313339393737.roa (raw, json)
Hash identifier:          ta8CBhKm5rJxNGzO2rzSzQ8BsgGdrceq2YWMwJH9Wz8=
Subject key identifier:   8A:D7:11:85:7C:8D:FB:24:16:90:DA:3A:5F:2F:BA:85:1A:39:92:78
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       2F70DA3C3D3F8875DC19DE9078801980562A4710
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134382e322e302f32332d3234203d3e20313339393737.roa
Signing time:             Tue 27 Jul 2021 05:42:20 +0000
ROA not before:           Tue 27 Jul 2021 05:37:20 +0000
ROA not after:            Wed 27 Jul 2022 05:42:20 +0000
asID:                     139977
IP address blocks:        103.148.2.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:70:da:3c:3d:3f:88:75:dc:19:de:90:78:80:19:80:56:2a:47:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jul 27 05:37:20 2021 GMT
            Not After : Jul 27 05:42:20 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:3e:fd:c2:4c:43:e0:ac:28:24:0d:a8:1e:1d:
                    b8:8f:72:0c:18:98:22:1d:8e:f6:b4:2d:f7:65:27:
                    f2:8e:b1:80:51:78:8f:f5:5d:63:cb:98:ad:e1:6e:
                    40:c7:fe:a2:40:36:41:48:c3:ad:15:7e:35:6a:8f:
                    77:16:a4:61:f8:d6:ab:85:d4:47:42:cc:9e:b0:8c:
                    e2:87:bf:aa:0b:5c:4f:eb:4c:8a:d4:6c:33:9a:5c:
                    d3:97:30:2a:6e:ff:5a:be:82:5c:54:ba:85:67:37:
                    c4:03:00:6d:0a:5d:d5:01:f1:a4:ee:42:8a:a8:3b:
                    d6:07:7d:f6:14:c6:ea:5b:0c:e7:41:70:e0:4f:70:
                    52:41:63:f9:b1:bb:84:e1:37:6e:a2:ca:6f:2d:56:
                    ef:c6:63:d5:7a:e4:aa:cd:2c:75:f5:fd:6a:ba:55:
                    d1:c9:34:51:38:e8:a0:93:07:ed:7f:f6:05:95:c9:
                    e3:a1:85:85:91:fc:44:7c:48:45:a2:bf:d2:40:8f:
                    2a:2f:69:47:09:06:9a:54:d0:91:e4:9d:e8:c0:c6:
                    79:4a:6a:9b:98:61:84:80:94:c4:8c:6d:69:3c:fc:
                    e3:04:97:1a:35:77:11:84:1d:5a:0c:5e:55:a0:3a:
                    b5:d6:99:f5:21:01:c6:a7:1d:e9:6f:cd:be:8a:bd:
                    c7:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:D7:11:85:7C:8D:FB:24:16:90:DA:3A:5F:2F:BA:85:1A:39:92:78
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134382e322e302f32332d3234203d3e20313339393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.148.2.0/23

    Signature Algorithm: sha256WithRSAEncryption
         63:1c:65:20:81:be:da:9c:ec:44:08:18:a3:82:86:ee:41:b2:
         1b:80:59:88:98:ef:51:09:3d:01:fc:09:42:3d:a3:32:19:31:
         3c:8d:4d:28:52:a7:3f:3d:06:77:14:41:07:29:de:df:42:6f:
         62:47:b6:4c:45:79:2d:42:cf:da:da:16:4c:34:64:13:1e:d2:
         5e:09:31:c9:72:24:ec:7c:12:d8:2c:72:65:c6:18:fc:99:85:
         93:c0:5a:03:1a:fc:f6:6f:27:07:a3:52:d6:06:ac:2d:d7:86:
         cc:c7:06:a5:7e:09:0e:f1:a3:5f:81:41:b7:8f:aa:4a:66:6f:
         21:04:6e:fe:4c:2e:69:2d:f8:eb:1b:9a:04:e6:cb:58:8f:b2:
         83:da:b6:f8:ed:ea:1c:6f:32:47:42:60:cc:48:04:d3:49:fd:
         74:4e:b9:e8:6b:d0:34:91:88:4e:48:33:c2:e6:35:da:be:37:
         6e:47:be:22:fb:15:10:5b:2a:ed:82:83:e4:15:09:58:07:34:
         0a:70:92:a1:80:7f:81:c3:a2:dd:c2:20:e8:ab:ce:e3:97:7e:
         ed:89:f3:45:92:e1:f7:86:f2:2d:b3:5f:16:ce:fb:04:13:1b:
         7d:e0:6d:51:07:45:2b:5c:5c:b6:e0:d7:55:47:cc:3b:5a:36:
         97:71:00:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:43 2024 by rpki-client on console-ams.rpki-client.org