Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3133342e302f3234203d3e20313331313131.roa
File:                     3130332e3135342e3133342e302f3234203d3e20313331313131.roa (raw, json)
Hash identifier:          mW3aPpZqpOZcPWdq1r2+shbL9i/lHdzewZcwP/EoWNI=
Subject key identifier:   07:EC:4F:BF:28:DE:69:05:46:1D:5F:61:D8:E8:13:D1:20:10:DC:A4
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       0A9EEF0064D40DF8F0CA4651A59A9C13C0F37914
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3133342e302f3234203d3e20313331313131.roa
Signing time:             Thu 01 Jul 2021 08:00:12 +0000
ROA not before:           Thu 01 Jul 2021 07:55:12 +0000
ROA not after:            Fri 01 Jul 2022 08:00:12 +0000
asID:                     131111
IP address blocks:        103.154.134.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:9e:ef:00:64:d4:0d:f8:f0:ca:46:51:a5:9a:9c:13:c0:f3:79:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jul  1 07:55:12 2021 GMT
            Not After : Jul  1 08:00:12 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:6b:90:83:c2:c0:e7:4b:ac:57:ae:1c:c4:6e:
                    75:3f:e4:fa:8e:bc:c8:1f:fb:50:6d:84:da:e0:26:
                    73:99:70:9b:fd:39:10:a3:3c:02:83:d2:8f:22:54:
                    88:d7:a1:02:30:78:1b:be:98:c5:3c:71:a6:de:c8:
                    8f:b6:d1:ce:00:b5:d4:d8:8a:3d:c8:a0:2d:b3:a0:
                    5e:8b:8e:13:e8:39:0a:3b:99:f1:93:68:85:cb:e3:
                    9a:40:38:0f:d9:d8:f5:aa:d7:e1:ce:72:65:ee:05:
                    39:d7:69:13:24:06:c0:5f:5e:5a:00:c4:4e:2c:c4:
                    b4:bc:6b:fe:3d:85:0b:66:95:b6:95:cf:73:43:c0:
                    9e:a5:b0:bf:2f:c1:72:0e:75:a0:f4:dd:23:be:b0:
                    ae:b4:d8:4f:c1:8c:92:7c:99:76:b3:08:c9:20:cb:
                    83:e5:95:e1:83:f0:c0:e5:30:8e:41:8a:5a:68:23:
                    93:2b:47:40:16:29:48:e2:f7:60:d8:16:a8:36:2e:
                    25:64:57:0e:d7:ac:9d:3c:05:47:99:28:b2:ab:96:
                    16:e4:1f:94:8b:0d:59:d5:b5:8b:c8:4c:08:aa:da:
                    51:58:9c:7f:dd:21:dd:92:b8:94:55:93:64:31:0e:
                    a8:01:3d:7c:15:3c:42:a7:4c:5c:52:27:54:df:50:
                    84:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:EC:4F:BF:28:DE:69:05:46:1D:5F:61:D8:E8:13:D1:20:10:DC:A4
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3133342e302f3234203d3e20313331313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.154.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         71:c2:60:21:7e:61:66:1e:e6:4b:3f:cc:10:54:e9:d3:8f:72:
         33:bf:f6:aa:bf:7c:c1:e6:89:ba:a7:0d:21:c9:ea:15:a8:8f:
         0c:02:aa:c8:e8:2e:2e:c6:1e:61:16:a1:c9:d5:3a:2e:fe:f8:
         5e:08:cc:e0:b7:14:4a:b5:dc:e0:bc:6a:5a:a1:0a:92:e9:f4:
         3d:55:59:17:98:61:e9:8b:80:a9:33:f6:54:c7:6d:0f:17:c2:
         78:0e:c7:0c:6b:8a:b9:a7:fa:3d:5e:6d:5c:9e:ae:4d:99:74:
         a9:c1:8f:78:37:be:5b:7b:b3:bc:83:a1:cb:49:72:b4:23:47:
         fa:ce:e5:5d:02:76:35:0f:29:f1:07:2a:93:af:a9:7a:1c:1e:
         87:cf:21:5c:64:6d:f2:15:8b:6e:84:0b:43:d2:0a:ca:2a:59:
         91:57:ce:66:3f:d2:45:34:8c:88:12:ec:04:ff:76:39:2d:b9:
         04:23:6d:da:e8:66:7f:86:b0:6c:c3:4b:cd:30:87:69:99:4a:
         67:d3:87:df:4a:b0:4e:eb:ef:24:23:4d:75:d5:64:fa:cb:ba:
         43:7b:ef:c2:28:71:12:29:87:43:15:0b:f2:d1:ca:6b:d3:46:
         eb:c4:5a:78:30:25:66:19:54:1a:a9:9d:5b:f0:1f:10:f4:58:
         9c:77:32:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:09 2024 by rpki-client on console-fra.rpki-client.org