Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136322e3133302e302f32342d3234203d3e20313333383233.roa
File:                     3130332e3136322e3133302e302f32342d3234203d3e20313333383233.roa (raw, json)
Hash identifier:          9c7heDBrOwVBsyDhgv32OZly1UHfYZahDn0XPddqiaI=
Subject key identifier:   EC:AC:39:16:5B:09:AF:DF:69:09:C4:B5:0E:FB:AD:5E:EA:22:24:63
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       6BE95D79E2DCAB6EFC0E761E7F4CD96FD6898C37
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136322e3133302e302f32342d3234203d3e20313333383233.roa
Signing time:             Thu 05 Aug 2021 09:46:55 +0000
ROA not before:           Thu 05 Aug 2021 09:41:55 +0000
ROA not after:            Fri 05 Aug 2022 09:46:55 +0000
asID:                     133823
IP address blocks:        103.162.130.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:e9:5d:79:e2:dc:ab:6e:fc:0e:76:1e:7f:4c:d9:6f:d6:89:8c:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Aug  5 09:41:55 2021 GMT
            Not After : Aug  5 09:46:55 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:ba:a5:f1:be:6e:e2:81:67:21:bd:14:d3:71:
                    61:23:c6:ea:4c:ba:04:ed:c2:4a:bb:7b:14:8a:fa:
                    1b:34:29:02:9c:31:2b:b7:7c:85:fa:fa:e8:2a:ff:
                    d8:c5:5d:08:7c:a2:ad:92:ae:4e:b5:31:49:62:0b:
                    e4:d4:57:25:8f:9b:e7:f5:d7:16:cf:d7:35:b9:a7:
                    82:0a:82:b1:42:39:d5:f4:11:2b:bb:31:95:0c:04:
                    9b:12:88:c3:45:50:10:a6:44:fb:9c:6b:43:91:00:
                    32:5a:52:49:66:9a:42:35:2a:58:0f:57:fc:80:97:
                    c9:ad:f0:b1:48:fb:8f:c1:22:0d:b8:9d:e5:58:40:
                    84:b7:07:0d:1e:3e:4e:ce:12:a7:95:e7:44:53:92:
                    d0:45:06:7e:81:a6:62:69:0b:c8:c1:4a:ee:db:6a:
                    61:a5:fa:86:f7:46:d6:60:a3:f9:94:7c:c3:13:95:
                    e4:ba:39:31:59:36:99:46:1e:f3:5b:53:cf:69:53:
                    c3:fc:c6:2c:96:75:eb:c2:78:29:dc:f2:1c:f1:39:
                    df:4a:71:c6:47:db:9f:35:b7:15:da:8f:ab:07:a6:
                    c7:cf:ad:c5:72:b9:77:59:a8:87:76:f8:ea:71:f0:
                    c4:51:ab:4e:70:0f:dd:d3:07:ed:f6:b1:7f:d5:cb:
                    50:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:AC:39:16:5B:09:AF:DF:69:09:C4:B5:0E:FB:AD:5E:EA:22:24:63
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136322e3133302e302f32342d3234203d3e20313333383233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.162.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:b7:26:f9:02:ca:34:9c:cc:ae:de:c2:0e:21:b9:8d:16:c1:
         c7:84:f0:4f:ec:56:22:42:18:e0:db:3e:ef:a5:0d:1a:ad:93:
         5c:64:d1:0c:67:77:bc:b2:57:85:06:b6:ef:f9:cc:8e:94:f4:
         b7:86:0e:55:24:fa:d3:a5:d8:80:a7:26:2d:c4:9f:41:92:5e:
         10:f6:2a:35:5c:b7:2f:8c:26:e8:99:49:50:4d:ab:77:a6:93:
         aa:92:db:e4:9c:6a:0d:1f:e7:34:01:b3:0b:bf:c7:99:6c:03:
         56:1a:0f:81:8f:20:92:8b:af:97:88:d8:0a:56:7e:58:a2:44:
         23:d2:42:6d:69:c7:0b:95:b8:c0:af:fe:17:46:aa:d2:8d:90:
         e5:07:e1:6a:41:33:fb:e6:e7:7d:65:ad:f3:48:56:6c:bf:27:
         0c:0d:53:4d:e9:9c:4f:9c:29:a9:9b:71:70:e6:2e:59:fb:db:
         da:2c:84:51:99:61:92:89:9d:51:20:d5:f2:0a:66:50:53:90:
         5b:95:2a:20:83:c9:8a:5c:46:b2:dd:99:15:54:9b:aa:b6:ea:
         6e:53:20:65:23:7c:3e:db:3c:8b:48:64:67:57:f6:b4:27:39:
         a1:5f:cb:e6:f4:87:01:c0:32:a9:a2:58:11:51:c5:2d:c0:d1:
         36:ed:74:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:10 2024 by rpki-client on console-fra.rpki-client.org