Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3232322e302f3234203d3e20313331313131.roa
File:                     3130332e3135342e3232322e302f3234203d3e20313331313131.roa (raw, json)
Hash identifier:          6Mh+laX8IdJYbe7siqRpb9VmM5iictnXTNfc/0ze/dg=
Subject key identifier:   C1:BF:91:1F:3D:F8:07:D1:CD:8B:BA:04:76:51:52:C5:47:A3:4D:A0
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       42731B2AEDAC48953BA9F28DC8777CA258890DE3
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3232322e302f3234203d3e20313331313131.roa
Signing time:             Thu 01 Jul 2021 08:00:06 +0000
ROA not before:           Thu 01 Jul 2021 07:55:06 +0000
ROA not after:            Fri 01 Jul 2022 08:00:06 +0000
asID:                     131111
IP address blocks:        103.154.222.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:73:1b:2a:ed:ac:48:95:3b:a9:f2:8d:c8:77:7c:a2:58:89:0d:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jul  1 07:55:06 2021 GMT
            Not After : Jul  1 08:00:06 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:b3:57:4e:28:eb:c1:c9:53:00:3f:18:f0:72:
                    96:52:ea:2c:0e:b7:2b:66:9d:c2:3a:04:54:ff:f6:
                    5d:34:70:d9:c5:0f:5d:dc:fc:d4:ea:9f:9f:73:25:
                    6b:22:5b:8a:66:22:6a:73:74:3e:bd:b0:e4:3b:f5:
                    86:d9:5d:86:a8:88:d6:a6:fe:05:e2:99:74:04:ad:
                    e3:08:46:82:7f:42:46:c4:ac:ad:68:70:6c:4e:54:
                    8d:8c:c1:a5:46:fd:9b:e5:f7:42:ab:86:d2:42:d1:
                    4c:e5:c5:74:f5:fc:b1:56:e2:27:c2:9e:a6:70:aa:
                    12:03:54:c7:89:75:b4:c7:14:dc:bb:bc:46:1b:98:
                    35:e0:d4:ea:39:10:f4:ca:f1:d3:55:98:35:da:93:
                    22:a8:b3:7c:ae:94:89:42:9c:4e:10:05:aa:ed:1f:
                    43:1b:e0:45:96:27:35:f8:eb:03:24:08:ba:b2:73:
                    59:c6:90:db:a9:61:0e:2b:69:ef:82:dd:62:3f:40:
                    32:9d:6f:8d:06:c0:a1:48:f1:b3:93:20:d4:28:42:
                    95:a4:6f:30:17:40:88:f3:e2:e2:8f:bf:fc:b5:0e:
                    99:65:65:45:ae:43:08:ef:ca:46:9c:45:dd:e1:c2:
                    b6:fc:e5:20:ac:5b:6d:54:90:be:63:41:e8:a2:82:
                    99:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:BF:91:1F:3D:F8:07:D1:CD:8B:BA:04:76:51:52:C5:47:A3:4D:A0
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e3232322e302f3234203d3e20313331313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.154.222.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:3e:c1:71:56:55:b5:7a:dc:5f:8f:94:76:d4:c6:3a:65:5e:
         11:b7:58:4c:6d:42:30:fd:8f:4b:9e:76:fa:f8:ff:05:18:d8:
         20:1c:23:2c:9f:35:77:4f:60:63:90:e5:78:b2:54:00:24:25:
         90:1d:90:f7:41:8d:9d:2d:a1:98:14:f0:0f:e7:42:24:32:b2:
         e8:9b:9f:b3:1a:5d:ff:b8:2c:29:6f:40:d5:52:81:cc:aa:97:
         f8:e2:60:bf:3d:74:f1:ab:10:e2:1b:6e:7a:fb:6b:65:92:3a:
         b6:01:cf:dd:36:a0:34:be:84:3e:2a:e5:74:bd:83:bb:c6:3f:
         e1:0c:e8:33:10:d1:e9:ea:12:ac:fd:3c:40:0e:a9:83:79:6e:
         c0:c5:58:cd:80:81:13:cc:cd:59:b0:81:1b:ca:d8:97:37:2c:
         91:f0:31:bd:0a:8c:98:69:57:1f:2d:f7:f8:80:d8:3e:6e:df:
         c5:a2:a5:8d:e1:b2:e2:52:ff:66:95:e2:d7:bf:09:4f:61:64:
         d3:8c:6c:17:e3:58:b4:6a:c1:31:5d:06:a8:00:d2:c0:0b:a9:
         d8:2b:74:5f:9c:9c:5e:8d:80:b6:76:3f:7c:b0:bd:3e:d5:1d:
         a5:0b:c6:8d:d7:2e:d5:d7:12:8c:59:4f:73:27:2b:95:39:d6:
         7f:b4:55:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:09 2024 by rpki-client on console-fra.rpki-client.org