Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3137322e302f32332d3234203d3e20313431303534.roa
File:                     3130332e3135342e3137322e302f32332d3234203d3e20313431303534.roa (raw, json)
Hash identifier:          4QYch2iBXcEzwn4IZscpwK+3U0m+kNG/ic+QQw+V+wk=
Subject key identifier:   3E:D3:4C:30:8A:46:AE:59:A7:5F:C7:7B:D4:0A:BD:D5:00:1E:D7:E0
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       0C27D532A7B5C79167E11E20C8428FD30FBE2E29
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3137322e302f32332d3234203d3e20313431303534.roa
Signing time:             Mon 14 Jun 2021 06:29:38 +0000
ROA not before:           Mon 14 Jun 2021 06:24:38 +0000
ROA not after:            Tue 14 Jun 2022 06:29:38 +0000
asID:                     141054
IP address blocks:        103.154.172.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:27:d5:32:a7:b5:c7:91:67:e1:1e:20:c8:42:8f:d3:0f:be:2e:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jun 14 06:24:38 2021 GMT
            Not After : Jun 14 06:29:38 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:4e:3b:8c:22:76:5d:46:99:df:00:d8:52:7b:
                    cd:d1:50:e7:05:f1:6e:7f:ff:34:a9:e5:55:46:16:
                    aa:a9:dd:d8:3b:c4:a1:c6:93:0a:c5:52:6f:c3:20:
                    3f:80:cb:3b:eb:fb:07:f2:98:21:8c:8c:75:0f:8d:
                    ad:20:ec:9d:9e:de:56:46:9c:a5:83:29:f0:1b:46:
                    e4:25:61:e8:aa:0b:c7:4a:a2:35:ea:7d:cc:21:3e:
                    10:3c:72:63:2a:f2:af:1a:4b:2e:1c:38:df:da:4c:
                    b0:12:b8:77:46:0e:7b:07:f4:12:4a:34:ad:b9:f6:
                    d6:56:85:c3:d8:bf:ae:52:c3:81:19:73:41:3a:4a:
                    dc:a5:34:36:f2:e7:75:24:a8:97:ec:e2:b4:d6:e7:
                    b3:3c:da:97:34:00:11:48:15:0e:4a:6d:d1:91:25:
                    08:2c:03:d0:76:0c:0b:3d:74:75:fb:0c:a5:2f:7e:
                    cb:6c:7d:1d:9c:6a:43:10:e8:6f:12:e7:d8:88:4a:
                    22:8d:79:80:23:7a:49:c6:e1:85:f2:c2:82:40:06:
                    f6:99:32:2c:35:49:33:1d:bd:cb:9e:c7:e5:fe:c9:
                    b3:7d:71:1d:7b:55:45:64:7b:77:b9:ea:7b:70:3e:
                    69:d7:34:12:13:60:c1:d9:0f:a5:63:46:53:b5:c9:
                    7e:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:D3:4C:30:8A:46:AE:59:A7:5F:C7:7B:D4:0A:BD:D5:00:1E:D7:E0
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3137322e302f32332d3234203d3e20313431303534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.154.172.0/23

    Signature Algorithm: sha256WithRSAEncryption
         00:31:29:fe:7c:07:2b:43:e3:57:92:01:6c:e9:00:db:5f:13:
         d2:73:be:a8:d5:1f:5d:84:15:15:7f:39:37:17:f0:49:02:80:
         6d:2a:1f:6b:be:7d:7a:82:02:bd:5d:8d:e9:8c:0d:8f:a2:c2:
         75:7b:08:55:8c:cb:0d:92:d4:b0:a6:1e:ec:fb:c4:34:57:00:
         7a:c0:1b:64:dd:a9:48:bb:f8:a9:9f:91:01:a9:20:40:5a:ca:
         61:00:67:4f:9d:0d:19:33:d2:89:db:56:7f:c0:09:9e:8b:86:
         9f:0b:9b:5f:db:17:49:15:9a:ef:92:c7:75:f4:6a:31:88:63:
         eb:c3:a3:9b:ef:10:6a:c2:b6:99:f1:fe:4a:1b:97:4f:f3:3b:
         2a:24:eb:2b:74:0d:f4:ab:58:d2:c0:48:3e:55:e2:61:78:65:
         fe:a6:22:61:a9:9d:ad:ca:fa:35:47:09:e7:d2:dd:cb:ca:6a:
         9d:da:23:37:cd:86:a3:81:1a:f2:9a:2c:ec:e6:dd:1a:07:d1:
         fa:63:16:db:80:ee:d4:14:c4:05:89:de:d7:a3:c8:6f:17:0c:
         6a:6e:45:9a:dd:4e:43:53:88:04:d9:e8:cc:60:2b:7b:0e:37:
         cb:b1:3e:1e:79:e0:4e:72:98:46:dd:86:b3:44:51:9a:85:8b:
         c9:ef:e2:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:09 2024 by rpki-client on console-fra.rpki-client.org