Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136332e31302e302f32332d3234203d3e203137393935.roa
File:                     3130332e3136332e31302e302f32332d3234203d3e203137393935.roa (raw, json)
Hash identifier:          w7Y2wc1AsOZ8VUHtyb4ePLofTOP7HtPSsqE7SSUlrYY=
Subject key identifier:   AE:27:39:8B:92:A3:F2:02:A7:B7:6A:49:F5:C9:FF:47:33:64:BB:57
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       7B21B77A8AA13DCEE41C73E1850711FF3B4E05BB
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136332e31302e302f32332d3234203d3e203137393935.roa
Signing time:             Tue 03 Aug 2021 08:18:32 +0000
ROA not before:           Tue 03 Aug 2021 08:13:32 +0000
ROA not after:            Wed 03 Aug 2022 08:18:32 +0000
asID:                     17995
IP address blocks:        103.163.10.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:21:b7:7a:8a:a1:3d:ce:e4:1c:73:e1:85:07:11:ff:3b:4e:05:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Aug  3 08:13:32 2021 GMT
            Not After : Aug  3 08:18:32 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ba:16:61:00:3d:be:66:92:1f:d3:dc:d1:0c:
                    9b:80:a0:b8:46:a9:ef:c9:35:90:2d:7a:46:53:68:
                    79:0d:49:79:09:b1:90:0c:7a:d3:4f:62:20:8e:08:
                    68:42:cb:bf:24:a2:f4:a0:a5:14:ef:82:a2:97:d5:
                    86:1c:66:4f:93:8b:27:f5:e9:5e:fb:6d:78:9d:16:
                    7f:a4:ff:9a:33:74:42:89:13:50:9a:36:c5:9f:e7:
                    55:72:6b:d7:bd:dc:26:a4:a1:59:8f:e1:a3:71:72:
                    5d:c4:f7:a3:67:28:da:90:33:eb:24:21:b3:98:07:
                    f3:9c:8e:1d:90:bc:a9:bb:83:5b:05:c1:48:e8:01:
                    4e:89:69:ef:ea:41:4a:0d:42:30:54:49:e9:07:ff:
                    1a:b8:50:f1:51:bc:61:b0:9a:6b:3a:de:3e:d5:20:
                    4f:a8:96:5a:b7:de:07:39:4f:02:62:98:7c:46:22:
                    14:1d:b2:a8:ed:ed:02:95:b7:5b:17:61:53:5b:eb:
                    51:de:2e:ed:69:70:75:08:ea:2d:e4:6c:18:9f:9a:
                    cb:cc:ef:eb:35:d6:86:b1:ab:cf:06:9b:2e:d1:5c:
                    dd:18:23:a7:2f:f1:e7:ae:39:e2:fb:a3:0a:86:71:
                    0c:7d:77:47:e0:37:bd:e7:1d:b1:06:db:08:cd:b0:
                    6c:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:27:39:8B:92:A3:F2:02:A7:B7:6A:49:F5:C9:FF:47:33:64:BB:57
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136332e31302e302f32332d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.163.10.0/23

    Signature Algorithm: sha256WithRSAEncryption
         94:53:d4:3f:70:61:28:60:de:e5:5f:6f:f9:e9:a9:d2:e0:49:
         9b:f8:eb:21:a1:fe:ab:03:44:42:c7:75:47:2e:a7:2b:d6:47:
         1f:47:73:2d:ef:f8:c4:b7:31:18:20:a1:a8:70:ee:49:3a:e6:
         cc:4b:3e:ed:8c:3f:97:1e:1e:78:2d:1d:ef:71:af:61:71:dd:
         f2:bf:9a:74:b1:ef:6e:0d:80:bc:07:32:c0:a2:97:4d:af:84:
         4d:f9:79:07:cb:db:54:6b:6d:29:77:58:d6:19:9a:85:30:ac:
         dc:7b:4a:1e:b4:c8:d4:9b:89:84:ef:48:4d:82:0b:c7:81:54:
         1a:52:41:d5:b0:53:0a:3c:0d:5f:5a:20:1e:e5:51:6a:ec:9d:
         b1:b8:06:fe:39:6a:1a:f1:e4:45:30:8b:2d:88:43:a1:5f:e8:
         06:b8:f1:7d:7f:0f:d6:a3:db:25:f3:a5:bb:6f:1d:77:b5:e9:
         07:f4:b6:90:99:c0:20:75:cb:19:3c:5e:a3:99:d6:49:3d:1c:
         12:14:2c:d9:ed:95:b3:58:81:00:99:eb:13:52:bb:a9:ba:7c:
         d8:3e:06:8c:ea:02:03:28:07:c9:03:98:e6:56:7f:49:e1:60:
         d7:2f:a0:7f:51:0b:78:a1:a7:9a:ac:b2:b9:7a:4e:f2:f1:d9:
         a5:86:f0:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:10 2024 by rpki-client on console-fra.rpki-client.org