Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136342e31322e302f32332d3234203d3e20313431383938.roa
File:                     3130332e3136342e31322e302f32332d3234203d3e20313431383938.roa (raw, json)
Hash identifier:          UiGFKrp/hcZ0s/WwcRATA79JxyzTU8RbAQOFC6etw4s=
Subject key identifier:   A7:47:0A:94:22:0F:F2:17:A4:01:8D:1B:EA:E7:35:A5:5B:DA:79:6D
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       4EA99FCA138CDC68A12D87883DEEF925722B0D5B
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136342e31322e302f32332d3234203d3e20313431383938.roa
Signing time:             Tue 01 Mar 2022 10:00:00 +0000
ROA not before:           Tue 01 Mar 2022 09:55:00 +0000
ROA not after:            Wed 01 Mar 2023 10:00:00 +0000
asID:                     141898
IP address blocks:        103.164.12.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:a9:9f:ca:13:8c:dc:68:a1:2d:87:88:3d:ee:f9:25:72:2b:0d:5b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Mar  1 09:55:00 2022 GMT
            Not After : Mar  1 10:00:00 2023 GMT
        Subject: CN=3082010A0282010100BA6ED37146A49A2620317E60ABCA0046DA6D2A9CE3236FB2069AF64A6BC29489B3794C845324371CE5577CAC75FB5E200AFA28C34503ABE8A96761220F5B46DB7EFF2D3AD774CD859A01D925F85B46994280EE968D4DD0C12F3F377E91D99E9A8D232A5060BAC9D175A36FED0E01695F10CB4EC085FF107EFA395BA1DFAB4F4B86B07AC8D911CE4507DBCC13B86D6EB593FE308BC864FA94BE19C6F0FF11321EC8DA62B8F1702D96755B207641991E1AEB89C65C2288E21EA5B467E28276D9AEAB1D9D945B05BA8D1CA8B8B457EFF32843D2B35664CF7D504FB25E32841032E881AEAB5B79F96AF1C03D9CDB0C3B64A716153FF8ACC379B7BE70EA6EFCD850090203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:6e:d3:71:46:a4:9a:26:20:31:7e:60:ab:ca:
                    00:46:da:6d:2a:9c:e3:23:6f:b2:06:9a:f6:4a:6b:
                    c2:94:89:b3:79:4c:84:53:24:37:1c:e5:57:7c:ac:
                    75:fb:5e:20:0a:fa:28:c3:45:03:ab:e8:a9:67:61:
                    22:0f:5b:46:db:7e:ff:2d:3a:d7:74:cd:85:9a:01:
                    d9:25:f8:5b:46:99:42:80:ee:96:8d:4d:d0:c1:2f:
                    3f:37:7e:91:d9:9e:9a:8d:23:2a:50:60:ba:c9:d1:
                    75:a3:6f:ed:0e:01:69:5f:10:cb:4e:c0:85:ff:10:
                    7e:fa:39:5b:a1:df:ab:4f:4b:86:b0:7a:c8:d9:11:
                    ce:45:07:db:cc:13:b8:6d:6e:b5:93:fe:30:8b:c8:
                    64:fa:94:be:19:c6:f0:ff:11:32:1e:c8:da:62:b8:
                    f1:70:2d:96:75:5b:20:76:41:99:1e:1a:eb:89:c6:
                    5c:22:88:e2:1e:a5:b4:67:e2:82:76:d9:ae:ab:1d:
                    9d:94:5b:05:ba:8d:1c:a8:b8:b4:57:ef:f3:28:43:
                    d2:b3:56:64:cf:7d:50:4f:b2:5e:32:84:10:32:e8:
                    81:ae:ab:5b:79:f9:6a:f1:c0:3d:9c:db:0c:3b:64:
                    a7:16:15:3f:f8:ac:c3:79:b7:be:70:ea:6e:fc:d8:
                    50:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:47:0A:94:22:0F:F2:17:A4:01:8D:1B:EA:E7:35:A5:5B:DA:79:6D
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136342e31322e302f32332d3234203d3e20313431383938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.164.12.0/23

    Signature Algorithm: sha256WithRSAEncryption
         78:ad:61:0a:6e:51:13:8a:c2:bc:be:62:5b:ad:b5:a3:34:c7:
         16:1a:69:90:d3:a6:0d:5f:d9:22:4a:ff:d5:8c:5c:e5:18:25:
         86:a1:07:e3:fb:3b:06:e4:a4:58:78:4b:49:b2:2b:b6:c4:51:
         8b:05:24:65:8b:c1:8f:c5:bc:0a:4b:19:81:f6:f7:ed:5a:86:
         1d:db:d2:4b:92:40:05:0a:fd:81:77:6b:19:6e:ef:79:7b:5a:
         f3:f9:b0:f1:d9:8a:25:a7:7a:65:d7:ff:8d:61:49:27:ea:19:
         1c:24:be:c5:68:db:68:ac:3d:b2:3c:e2:3b:8d:d4:21:8e:aa:
         4e:be:77:82:1b:2a:1c:ff:24:7b:b6:f7:00:a6:17:c6:ef:de:
         b0:a9:bd:b0:78:0b:2f:ae:51:93:af:cd:3f:b7:69:bb:f5:ca:
         44:66:54:e0:7a:6c:08:e1:f1:29:b9:a6:13:0c:8a:95:f8:2a:
         65:22:70:ea:cc:18:dd:ec:fa:65:f1:c3:aa:a0:b2:df:0d:b0:
         eb:4e:52:f4:e8:5f:ef:1e:e6:34:2b:4a:67:4f:67:50:cb:92:
         52:74:c1:20:71:cf:1b:34:b3:a7:19:e9:1d:78:97:d2:e6:e1:
         ed:53:8f:4e:b4:9c:2f:67:12:5d:d9:a0:6a:d3:dd:61:bd:08:
         9c:08:f2:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:10 2024 by rpki-client on console-fra.rpki-client.org