Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3132342e302f3234203d3e20313331313131.roa
File:                     3130332e3135342e3132342e302f3234203d3e20313331313131.roa (raw, json)
Hash identifier:          k+/nu/NUpdoay+Jl8XSRNPXkTfaGtCclvDBUlFJQZ6s=
Subject key identifier:   73:F5:C4:25:F2:9D:14:DE:D4:BC:AB:EC:21:0A:0F:41:EA:52:C9:7D
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       49C80C7DEA425C2A5BDE45ABCFA49CA2C485C3D0
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3132342e302f3234203d3e20313331313131.roa
Signing time:             Thu 01 Jul 2021 08:00:10 +0000
ROA not before:           Thu 01 Jul 2021 07:55:10 +0000
ROA not after:            Fri 01 Jul 2022 08:00:10 +0000
asID:                     131111
IP address blocks:        103.154.124.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:c8:0c:7d:ea:42:5c:2a:5b:de:45:ab:cf:a4:9c:a2:c4:85:c3:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jul  1 07:55:10 2021 GMT
            Not After : Jul  1 08:00:10 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ff:ad:e4:2d:54:b2:d6:9b:e7:ff:93:fc:14:
                    c1:0e:90:bf:f3:5f:7e:df:0c:6c:17:08:38:cd:a9:
                    b9:95:70:fa:53:3c:93:b1:14:28:dc:6f:63:85:7c:
                    4a:25:77:5e:d9:ec:7d:44:ea:24:25:c7:f8:f8:d7:
                    e6:03:42:b9:a5:9a:7c:b4:70:13:38:ff:60:bf:55:
                    00:b9:bd:e0:e9:1e:fa:5a:0d:66:b7:7d:20:6d:9f:
                    78:57:4b:b9:13:64:ed:1f:c8:b9:7f:f9:b4:d3:59:
                    61:b5:54:0e:5f:00:c6:7c:94:95:c3:0a:1d:52:74:
                    7c:32:6f:6c:aa:92:b7:16:d8:fb:7e:49:3b:aa:f9:
                    04:98:72:e8:d9:25:31:33:09:1b:86:a5:c1:ab:4c:
                    0f:e9:e9:9b:ca:a0:77:3e:8e:e5:0e:9c:c7:fa:7d:
                    17:8c:2c:ed:3a:27:ec:ce:1f:b3:39:15:ec:b2:b7:
                    17:c8:1a:c4:96:c8:73:7c:b6:bb:12:11:b4:7c:0d:
                    3f:3e:dc:2b:d2:fc:ca:0d:1f:c5:20:3d:86:61:2b:
                    27:5e:81:0b:23:b6:be:ae:b2:41:fe:bc:2c:1d:40:
                    b2:41:f4:5c:da:52:cd:f8:cd:c4:a6:61:a0:26:37:
                    44:70:55:09:d4:bc:86:96:a7:04:88:03:7d:4e:56:
                    a1:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:F5:C4:25:F2:9D:14:DE:D4:BC:AB:EC:21:0A:0F:41:EA:52:C9:7D
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3132342e302f3234203d3e20313331313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.154.124.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:64:ff:0d:c6:4b:4a:4d:e2:21:b1:ad:36:d3:f0:8a:83:2a:
         bb:c6:6c:e5:ed:d0:1f:10:6e:bc:10:4c:b7:04:60:24:fc:36:
         c3:81:0a:c2:4e:0f:3f:92:fb:dd:70:6b:82:12:dc:a0:de:f6:
         66:9d:b6:c0:16:e2:05:a8:4a:6b:3a:41:cb:60:7b:8a:15:d6:
         93:4b:90:61:3c:37:ce:0e:4d:14:fb:af:de:5c:b8:a3:aa:36:
         79:c8:0e:93:3a:e8:67:c7:f6:cb:38:89:2c:a9:8f:7c:23:0e:
         e6:bf:6e:b6:cf:e3:91:b8:b8:35:d4:1b:e7:97:f6:27:7b:a0:
         47:f5:2b:0b:82:c0:31:d3:47:08:d9:71:81:64:2a:78:b9:ae:
         fa:cd:01:2b:5b:cf:a4:2e:f0:aa:98:72:83:62:83:ce:2c:84:
         97:38:58:ab:64:b4:87:d7:61:bb:30:f4:7c:ed:b2:26:7c:b2:
         ac:f3:0d:e8:2f:63:9d:4b:a4:47:00:bb:4f:3e:b1:d4:6e:9b:
         13:b1:87:00:fa:be:e3:97:f6:01:6e:ab:55:4b:2e:48:52:f3:
         0a:9f:d2:94:15:c1:f5:33:3c:40:65:37:87:6b:46:a9:00:37:
         b7:65:ac:5f:9d:20:57:f0:8a:1f:de:7a:3a:59:97:57:46:89:
         1f:5b:ac:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:44 2024 by rpki-client on console-ams.rpki-client.org