Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3131372e302f3234203d3e20313331313131.roa
File:                     3130332e3135342e3131372e302f3234203d3e20313331313131.roa (raw, json)
Hash identifier:          P4NxcR8mKyzgg/YNZmOmHHg4LIv5WWXKNDLCB0in5XY=
Subject key identifier:   3C:B9:42:40:0E:07:BC:6D:55:A8:CC:A5:F6:19:00:29:A6:0B:39:ED
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       0626D93C595A078A5AA7DDDD2E685D5165821597
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3131372e302f3234203d3e20313331313131.roa
Signing time:             Thu 01 Jul 2021 08:00:11 +0000
ROA not before:           Thu 01 Jul 2021 07:55:11 +0000
ROA not after:            Fri 01 Jul 2022 08:00:11 +0000
asID:                     131111
IP address blocks:        103.154.117.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:26:d9:3c:59:5a:07:8a:5a:a7:dd:dd:2e:68:5d:51:65:82:15:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jul  1 07:55:11 2021 GMT
            Not After : Jul  1 08:00:11 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:45:ba:7b:d8:86:b0:b4:96:44:be:d0:1a:a6:
                    74:c1:0a:45:6a:87:40:67:f7:66:df:44:e7:4f:f5:
                    68:35:26:4b:cb:75:82:21:89:4b:4e:1c:42:0d:58:
                    14:7a:13:a0:b6:dd:0c:93:c5:7c:0c:fa:4d:b1:00:
                    64:12:40:c2:eb:45:85:4b:e1:b9:c9:98:d9:e7:7c:
                    41:b5:04:d9:b5:bc:84:dc:a3:36:25:60:0d:d6:aa:
                    16:fd:d5:28:23:3e:8b:2d:06:71:98:59:61:4d:6c:
                    6c:53:e2:97:bb:ff:1b:c0:c6:04:22:f8:77:86:9d:
                    a1:e1:f2:ad:35:a9:06:35:e9:68:db:ac:1b:57:76:
                    50:b3:51:90:74:e6:46:71:40:07:2d:8a:24:90:90:
                    cc:de:01:29:e8:37:23:23:1b:cc:ea:fb:fd:5e:a0:
                    49:db:cc:b8:e3:78:fb:9a:57:d7:7b:88:d2:dc:a7:
                    01:cd:c4:55:c9:50:61:60:2f:e0:40:a4:1f:19:87:
                    4f:7b:33:80:f1:1f:78:c8:f7:57:57:03:3a:7f:2d:
                    dc:a6:4e:9a:61:6a:b8:24:c9:3c:36:d4:ef:86:aa:
                    e3:c7:8b:75:ea:a2:fd:45:f7:bb:d1:a3:91:01:05:
                    42:fb:28:79:f7:37:c2:59:bb:74:05:4c:99:e6:c1:
                    0a:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:B9:42:40:0E:07:BC:6D:55:A8:CC:A5:F6:19:00:29:A6:0B:39:ED
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3131372e302f3234203d3e20313331313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.154.117.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:9f:f5:0d:f4:5a:09:8b:30:73:17:87:bd:3b:f8:7d:74:34:
         f3:c7:db:c6:25:4a:3a:ab:db:55:9c:67:c2:a5:14:db:3a:99:
         d2:96:5e:74:29:ae:a9:5c:23:d9:3c:3b:e6:c6:0c:a6:66:26:
         96:4b:62:35:89:8e:18:3f:3f:01:81:76:aa:a7:f0:88:85:2b:
         d3:c6:eb:ec:e0:e3:e9:83:56:1a:09:a0:e1:ae:01:59:21:88:
         37:65:d8:1d:5b:15:29:5e:20:f6:04:7a:e3:32:1a:27:11:a0:
         9b:31:c9:3d:30:1a:49:f0:0b:76:8a:54:02:19:34:27:46:e8:
         42:af:3f:5e:62:ec:26:e5:dc:d8:9d:dd:96:88:df:14:f4:cc:
         36:9d:f1:36:17:ef:cf:70:5c:eb:73:c2:a2:a1:d6:87:12:60:
         fa:1a:a1:93:10:e8:da:47:d9:1e:e8:3e:c4:3f:1a:74:01:c8:
         0c:7a:a2:60:1b:59:a0:f2:6d:9d:f2:b3:6e:c8:45:cc:d9:71:
         f0:4f:d4:91:2a:c5:c5:36:8a:40:3f:b2:44:a6:ca:96:87:00:
         f6:d7:9b:44:b3:be:eb:12:f1:a9:a0:a4:58:9d:68:0b:b5:0c:
         ba:d2:93:ea:98:dc:01:f8:77:58:c9:9d:c0:09:18:28:89:a0:
         6f:51:96:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:44 2024 by rpki-client on console-ams.rpki-client.org