Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3232312e302f3234203d3e20313331313131.roa
File:                     3130332e3135342e3232312e302f3234203d3e20313331313131.roa (raw, json)
Hash identifier:          FJIqbBTl2YtZOUr6RpbtnTFOCpAbVF0dry/IQXDnqVs=
Subject key identifier:   F7:70:0A:E4:9F:6D:14:F4:E5:E2:3F:6D:E4:45:62:F1:1D:56:C5:4D
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       232ABD64BA1192F663049159A3F89F7796E647BB
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3232312e302f3234203d3e20313331313131.roa
Signing time:             Thu 01 Jul 2021 08:00:10 +0000
ROA not before:           Thu 01 Jul 2021 07:55:10 +0000
ROA not after:            Fri 01 Jul 2022 08:00:10 +0000
asID:                     131111
IP address blocks:        103.154.221.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:2a:bd:64:ba:11:92:f6:63:04:91:59:a3:f8:9f:77:96:e6:47:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jul  1 07:55:10 2021 GMT
            Not After : Jul  1 08:00:10 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:9a:fa:7f:3e:e3:50:2b:9e:67:aa:c5:df:6b:
                    75:2f:b2:24:0b:98:e5:7b:1e:aa:5b:a2:06:4c:11:
                    b6:04:25:3d:58:f3:21:58:08:19:04:7e:c7:31:c6:
                    57:61:90:da:28:95:ca:45:61:6e:37:bb:ec:2f:50:
                    01:4d:a1:83:46:c0:1b:c5:8c:24:b3:71:07:6f:81:
                    c0:5f:61:cb:11:dd:0c:4e:e5:99:49:f5:3c:fd:64:
                    6c:2f:b0:cf:f9:32:3f:a7:4d:c1:42:6b:cc:a7:6a:
                    fe:09:c1:e6:17:00:80:fc:67:3f:70:c9:c1:a3:8e:
                    8e:2d:ce:ac:bb:f3:3b:e7:60:7f:01:9e:7e:e7:c9:
                    17:c2:7e:20:1e:3a:bb:3e:c2:11:42:04:2b:5a:56:
                    10:9d:de:43:47:c0:91:22:86:4a:e3:63:49:b2:da:
                    21:bb:40:a1:b5:3a:80:a2:83:52:72:34:42:06:bb:
                    75:8c:ba:8c:46:2b:7c:4d:e5:72:f7:c0:2d:5e:c5:
                    82:14:86:8e:c9:10:2a:cc:f6:12:82:fc:e6:74:a3:
                    09:0d:dc:5a:eb:64:d1:c5:02:50:c5:57:33:3d:f4:
                    7a:9b:58:4b:bd:05:1a:82:2b:d8:96:a3:fe:8b:75:
                    39:0b:f8:a5:b3:11:a9:11:59:2a:ec:f9:32:7c:e3:
                    9a:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:70:0A:E4:9F:6D:14:F4:E5:E2:3F:6D:E4:45:62:F1:1D:56:C5:4D
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3232312e302f3234203d3e20313331313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.154.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0c:b4:01:ca:51:b4:0c:6a:43:6e:6e:76:ad:52:96:ec:47:91:
         b5:82:19:a1:f7:b0:ce:30:52:6c:83:b7:ff:15:c8:b6:b8:cc:
         f9:68:24:05:5d:78:43:35:31:dd:b8:d8:51:a5:6f:40:a1:aa:
         0c:81:da:41:97:c4:f4:23:9d:eb:31:4b:97:1a:47:13:37:5d:
         57:bc:1f:80:46:ff:e1:71:05:50:98:8d:d5:17:10:de:28:19:
         76:9c:77:3a:74:b3:d7:d9:cf:15:56:32:fa:d6:80:e8:17:b2:
         50:3f:99:fa:5a:fa:b8:99:3c:15:20:ac:06:f2:a4:a7:e7:a5:
         57:79:a3:44:53:e6:24:55:eb:fb:fc:09:aa:b6:1f:04:e7:5d:
         67:87:38:e4:75:80:a6:18:1d:04:ef:b3:06:42:fa:0f:d1:3f:
         4d:71:29:7b:2a:15:45:8d:14:6e:3f:26:d7:2a:c6:47:00:d1:
         dc:47:2d:b8:59:b8:00:8c:d3:0b:71:a7:fa:c4:d9:f0:26:71:
         8f:95:79:b7:16:35:5b:4a:1a:fc:ee:05:b9:4e:50:d2:69:48:
         7f:39:5f:5f:ed:ad:4f:a9:a3:88:72:bf:a7:b9:c9:39:4d:2a:
         6d:5f:ca:40:bd:7d:bd:f3:c3:6e:24:71:33:a3:96:20:a5:18:
         5b:cd:fc:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:44 2024 by rpki-client on console-ams.rpki-client.org