Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3133372e302f3234203d3e20313331313131.roa
File:                     3130332e3135342e3133372e302f3234203d3e20313331313131.roa (raw, json)
Hash identifier:          EGEx9R0N2Rw1A2HtIgrh7H3mRfW62DxbTuv5toJQpYQ=
Subject key identifier:   20:D9:32:B9:4A:17:52:43:16:82:5F:FE:7F:42:5D:15:51:8B:EE:7A
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       65E792B22E7701CA7D8BCBC1A18A0ADC6605320F
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3133372e302f3234203d3e20313331313131.roa
Signing time:             Thu 01 Jul 2021 08:00:03 +0000
ROA not before:           Thu 01 Jul 2021 07:55:03 +0000
ROA not after:            Fri 01 Jul 2022 08:00:03 +0000
asID:                     131111
IP address blocks:        103.154.137.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:e7:92:b2:2e:77:01:ca:7d:8b:cb:c1:a1:8a:0a:dc:66:05:32:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jul  1 07:55:03 2021 GMT
            Not After : Jul  1 08:00:03 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:e1:50:ef:4a:8c:f5:2d:38:fe:fd:f6:9e:b5:
                    ae:31:f7:74:5a:78:80:ea:c0:35:3e:47:ea:cb:45:
                    e8:0e:39:dc:aa:e2:6d:45:4d:bb:af:d7:9b:81:6c:
                    d5:47:a2:63:39:ac:eb:68:a3:1e:b8:6d:2d:08:d8:
                    38:80:31:4a:92:28:3e:f5:f8:37:5a:ce:32:99:31:
                    04:b1:a1:5f:0b:74:1e:ef:f4:05:24:04:3b:c4:57:
                    94:6d:05:8a:31:5c:17:f5:8f:43:f1:b8:7b:e1:04:
                    5b:e9:75:aa:4c:80:76:9d:25:77:de:66:85:6b:72:
                    eb:4e:70:a7:07:6a:8f:ae:e3:47:cf:ff:fd:92:3c:
                    6d:35:dc:b0:d5:76:33:51:74:e5:55:5b:86:ed:fd:
                    4b:84:56:a0:61:6f:bb:51:8d:bd:8b:e9:ea:c3:6c:
                    ed:72:fe:b0:33:ad:83:79:20:57:87:a7:08:0e:39:
                    70:1d:0a:f1:ad:a5:56:a4:65:11:73:c1:a7:28:11:
                    c2:c0:0b:f4:3c:9a:2f:18:df:a0:a3:7b:5b:1a:05:
                    c3:2a:02:06:51:0e:5b:22:1d:6b:b7:e3:57:2e:2a:
                    65:52:c7:ef:82:91:20:8a:49:55:a1:51:63:ce:6d:
                    75:d6:1d:d9:de:dd:d7:4d:f5:18:94:3a:ee:29:60:
                    c3:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:D9:32:B9:4A:17:52:43:16:82:5F:FE:7F:42:5D:15:51:8B:EE:7A
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3133372e302f3234203d3e20313331313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.154.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6e:a6:bc:54:2e:3d:c8:3f:1f:59:b2:5e:dd:21:47:36:96:0f:
         62:e6:98:40:37:e1:d5:68:85:15:e4:cc:c1:e0:ec:fd:cb:ae:
         61:3c:3e:df:c7:71:4b:d1:82:66:78:f2:3e:23:2f:2a:33:a6:
         bb:62:19:0d:20:7a:b5:d6:19:98:3d:a3:04:9d:d8:22:e0:76:
         6f:5a:15:e9:c8:5b:78:03:cc:4e:55:8e:c6:53:1f:8d:2e:36:
         45:2d:04:5b:4e:0e:ed:26:ce:26:4b:e6:ff:1a:12:9c:1d:b3:
         ed:66:89:d4:1e:6f:81:57:09:99:75:8c:a9:4e:46:68:4a:6a:
         b5:4f:1d:93:66:6e:9e:86:f5:e1:fa:6d:f3:66:ba:f3:04:5e:
         0d:5d:18:82:0a:d5:e8:91:9a:01:63:ff:af:66:c0:46:fe:37:
         83:c0:6e:18:17:40:ad:2c:69:39:f5:75:ca:c9:fd:26:69:9d:
         cd:e5:fe:24:63:fe:21:30:4b:2d:66:26:f9:3c:f4:af:e8:4f:
         0c:b0:9d:2b:fd:72:dc:c9:bd:3f:71:d6:50:14:34:b7:b1:78:
         41:59:07:91:5e:5d:dd:89:46:a3:e0:8c:ef:9e:8e:55:3c:25:
         58:f1:eb:28:28:b2:45:c3:e4:fb:f8:b4:e4:ac:cb:59:ef:27:
         73:01:67:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:09 2024 by rpki-client on console-fra.rpki-client.org