Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135312e3232302e302f32332d3234203d3e203538343935.roa
File:                     3130332e3135312e3232302e302f32332d3234203d3e203538343935.roa (raw, json)
Hash identifier:          uFcD5loJz7mhmSaaCmHuyht5dDf7M5Ys0ngO9wxicFU=
Subject key identifier:   4B:6C:A3:86:97:39:5D:DC:3E:1F:64:3B:CC:D2:B4:F4:7C:BE:E7:A8
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       204461E60115D8C9172F9B0D12739E7365CAB6F6
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135312e3232302e302f32332d3234203d3e203538343935.roa
Signing time:             Thu 07 Oct 2021 03:54:56 +0000
ROA not before:           Thu 07 Oct 2021 03:49:56 +0000
ROA not after:            Fri 07 Oct 2022 03:54:56 +0000
asID:                     58495
IP address blocks:        103.151.220.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:44:61:e6:01:15:d8:c9:17:2f:9b:0d:12:73:9e:73:65:ca:b6:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Oct  7 03:49:56 2021 GMT
            Not After : Oct  7 03:54:56 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:8d:0a:6a:c1:ce:cd:74:d9:12:55:b5:c4:9f:
                    1e:f3:dc:88:74:61:c4:fd:a0:5c:55:fc:c2:2f:d3:
                    0c:2c:ab:53:e6:17:71:fe:dd:c6:36:dc:c8:7e:bf:
                    b0:6a:0f:cc:6b:54:14:6f:a7:24:6c:61:0d:44:44:
                    14:7f:a0:36:26:75:8f:88:6f:2c:26:ed:db:91:95:
                    df:13:37:7c:94:8f:fd:81:c6:0c:f2:c2:cc:46:bb:
                    ce:f6:ca:be:ed:0f:1c:61:20:96:f2:b7:9f:a3:f0:
                    98:6c:f0:f4:2e:bb:c6:16:0a:94:11:09:2f:a4:8b:
                    89:6f:e7:84:8b:89:9d:0f:f1:8d:52:1b:dd:b9:8d:
                    0f:7f:86:27:8c:d9:aa:af:c6:14:49:63:b9:4d:bc:
                    88:e1:2b:9f:ab:0d:bf:1d:f8:f1:1a:d2:7c:d0:14:
                    8a:f7:80:8b:d5:82:ab:12:fe:89:c6:08:e8:bb:d9:
                    e9:28:27:a4:fa:e8:74:75:e6:64:a6:67:6f:47:57:
                    92:51:14:f1:ca:18:7a:9d:af:c6:6d:01:ea:2d:b4:
                    68:1b:5b:6f:d4:63:fa:c8:97:81:dd:e8:a4:a6:85:
                    5d:86:09:c6:99:88:4d:ee:2a:5f:7f:ee:c2:26:d3:
                    fe:9e:47:29:72:30:5e:d0:dd:19:f8:53:13:a8:20:
                    fd:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:6C:A3:86:97:39:5D:DC:3E:1F:64:3B:CC:D2:B4:F4:7C:BE:E7:A8
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135312e3232302e302f32332d3234203d3e203538343935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.151.220.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2a:1e:e4:bf:94:15:66:82:18:e3:62:94:8d:4b:3e:be:39:80:
         e2:e0:09:ca:c4:bf:fc:ad:0b:5f:54:80:08:82:e0:eb:3b:51:
         aa:d5:d7:d7:35:68:4e:22:64:1c:17:f4:6d:7b:4c:8a:18:a1:
         f2:b0:cb:bc:18:e5:62:d0:b2:26:91:d0:a7:6f:be:2a:cf:a2:
         ed:5a:24:a6:9d:43:ed:86:cd:04:a6:c7:56:b8:5b:30:3d:00:
         1d:82:c8:8c:14:3d:90:d7:43:ee:ba:e3:df:d7:5f:a7:f9:9d:
         13:27:1b:ff:53:7d:90:58:1c:ac:b5:7b:f6:88:1d:af:97:5b:
         24:6c:9e:c8:7b:d0:41:dc:72:48:1d:09:95:87:b8:83:ac:e9:
         26:a1:46:4b:01:6c:a9:c0:84:88:3b:41:d0:57:13:f7:3a:10:
         8f:08:70:13:2a:da:7a:cf:1a:6a:aa:de:af:c3:e2:c4:6a:ff:
         23:90:42:7a:ac:4f:57:f3:f8:31:93:f7:2b:37:a1:19:78:8d:
         5a:3f:35:1c:74:84:3f:23:fe:6f:ce:ec:95:50:aa:ce:4b:56:
         f7:20:cb:55:7f:fc:90:3d:52:7a:07:78:fd:de:41:5c:0a:f2:
         a9:3a:c0:22:56:02:6a:de:6e:d4:e6:b7:4b:fc:bd:63:b2:d9:
         0f:5a:03:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:09 2024 by rpki-client on console-fra.rpki-client.org