Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e38332e302f3234203d3e20313331313131.roa
File:                     3130332e3135342e38332e302f3234203d3e20313331313131.roa (raw, json)
Hash identifier:          EN4qc5nHi5jNy1yemj8ClZPVnOX6TVbmmvdn/73raJQ=
Subject key identifier:   6E:53:9E:9A:41:94:BC:4B:72:A6:3F:E0:C8:B4:76:1E:BA:CC:02:02
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       339E1A170D1E33FE2ACCE64CDC983DCAF452663C
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e38332e302f3234203d3e20313331313131.roa
Signing time:             Thu 01 Jul 2021 08:00:08 +0000
ROA not before:           Thu 01 Jul 2021 07:55:08 +0000
ROA not after:            Fri 01 Jul 2022 08:00:08 +0000
asID:                     131111
IP address blocks:        103.154.83.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:9e:1a:17:0d:1e:33:fe:2a:cc:e6:4c:dc:98:3d:ca:f4:52:66:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jul  1 07:55:08 2021 GMT
            Not After : Jul  1 08:00:08 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:1c:93:83:00:82:95:00:55:71:6f:3e:08:ad:
                    ad:f0:9f:7c:d5:e3:2a:2e:d3:f8:32:30:09:ca:02:
                    25:1e:33:fc:78:d3:c4:0a:23:17:d5:d0:7f:60:96:
                    92:70:c0:8c:12:39:c1:91:fe:f1:63:13:a2:7e:b0:
                    49:ad:68:21:c2:8c:a2:1f:89:89:f2:40:0b:ae:91:
                    12:9a:51:5c:b8:7a:b0:36:da:ac:09:0a:a6:39:e9:
                    5e:0f:a8:7c:04:e7:bd:63:0f:3f:78:d7:c4:e5:fb:
                    7c:33:99:ac:11:d0:95:de:85:f0:1a:e9:92:b8:c4:
                    c2:68:bf:8c:f7:de:28:ba:83:25:56:24:25:67:0b:
                    1d:21:24:96:34:cf:5e:e3:24:2a:22:1c:de:84:8a:
                    e2:b5:44:3b:11:83:50:49:69:4a:5c:80:ae:73:bc:
                    55:fb:22:cd:6b:0b:b8:85:07:09:cc:b1:e4:af:db:
                    2f:e5:47:3c:11:d5:e8:99:9f:1c:14:22:ef:7a:1a:
                    d8:1c:60:3a:39:17:3a:1c:98:bd:61:de:66:be:94:
                    bc:40:a5:44:1e:85:25:d8:39:d4:d3:79:8b:9d:36:
                    35:be:bd:8a:e4:b4:46:bd:fa:83:8c:5e:8b:39:f5:
                    1a:09:ad:c4:4e:51:7a:95:4a:81:9a:89:5e:11:86:
                    56:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:53:9E:9A:41:94:BC:4B:72:A6:3F:E0:C8:B4:76:1E:BA:CC:02:02
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3135342e38332e302f3234203d3e20313331313131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.154.83.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:b4:73:32:3f:54:10:d8:06:24:fd:f0:bf:c3:6e:7c:e9:61:
         56:b3:82:2d:7e:c0:f0:e7:d4:53:d7:a5:94:eb:cc:74:b5:d3:
         df:d3:32:27:e3:99:57:10:2c:2b:b9:ad:4d:f5:f4:08:20:97:
         6b:46:1b:c9:1a:53:91:11:78:a5:b4:86:b4:1c:43:58:41:07:
         56:f7:97:f6:f7:1a:3c:8c:cb:1c:69:d0:de:3a:56:75:90:5a:
         7d:45:cd:22:27:cb:df:8d:95:62:62:97:69:3e:56:79:ec:f7:
         68:07:72:48:5a:0a:3a:61:17:2d:5b:9a:29:2a:2b:a2:cb:90:
         13:8c:08:66:05:2a:b0:df:03:61:ba:3e:6b:69:c9:7c:50:0f:
         6a:b2:71:29:34:cf:ec:f5:55:3a:db:36:9f:28:96:92:6e:db:
         59:41:73:77:0a:49:b6:7e:b6:43:4a:88:c9:ce:ab:4b:f2:1b:
         0e:e5:05:7f:3b:b1:09:72:d4:5f:61:8f:92:1f:42:c1:3a:e2:
         93:01:1b:ec:20:ce:5d:88:28:3c:21:db:26:db:a4:e6:8f:cc:
         9d:84:0c:ce:6e:cd:23:ad:11:62:23:33:a2:75:86:09:32:23:
         1a:25:f9:d8:87:75:ba:76:39:28:4a:a3:81:2c:9e:b0:c5:07:
         04:a5:b7:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:44 2024 by rpki-client on console-ams.rpki-client.org