Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136342e3231342e302f32332d3234203d3e203137393935.roa
File:                     3130332e3136342e3231342e302f32332d3234203d3e203137393935.roa (raw, json)
Hash identifier:          Z+HRdSJtZ4tsPh0RhvN91OF+Y1dT3lDcmoYVK3phFZc=
Subject key identifier:   6F:26:A3:4A:43:33:B2:FE:9E:1F:BE:DC:75:49:D9:49:05:BE:6B:CF
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       61CAA6EEB7DAA0A447A2460467E0DD7FE410E4CF
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136342e3231342e302f32332d3234203d3e203137393935.roa
Signing time:             Tue 02 Nov 2021 00:43:17 +0000
ROA not before:           Tue 02 Nov 2021 00:38:17 +0000
ROA not after:            Wed 02 Nov 2022 00:43:17 +0000
asID:                     17995
IP address blocks:        103.164.214.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:ca:a6:ee:b7:da:a0:a4:47:a2:46:04:67:e0:dd:7f:e4:10:e4:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov  2 00:38:17 2021 GMT
            Not After : Nov  2 00:43:17 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:9d:6d:cd:e8:06:7c:a7:d4:13:36:03:71:9b:
                    7c:5c:2c:7b:aa:3e:16:ed:76:9a:fd:12:99:71:d8:
                    3e:4a:26:99:c3:43:fd:dc:4b:8d:0c:0d:0c:74:00:
                    e8:13:05:c7:7f:65:3c:b4:5a:4c:b1:db:b4:9d:b4:
                    e8:c6:27:95:45:63:0b:97:7f:00:da:cc:bf:da:c2:
                    ae:0f:33:d7:3c:94:d5:38:ac:c0:da:64:fe:16:41:
                    c9:88:ac:ab:c1:2a:8c:b8:a4:12:0d:73:27:7f:7c:
                    63:56:60:5d:34:5b:2c:5b:65:5f:6c:d2:3b:15:36:
                    b9:71:5e:c7:04:ca:a5:39:28:91:36:25:1d:e2:93:
                    8f:98:12:73:fb:e2:c3:f8:22:32:2a:a5:cf:a0:14:
                    fd:8e:c2:2c:d5:96:a1:b4:cd:32:71:fe:d7:ab:6a:
                    38:3c:96:3c:0e:6c:34:ea:94:cd:d3:5e:bc:4b:1d:
                    46:92:0b:7f:12:b6:4b:38:86:fa:91:ff:2e:9c:44:
                    6f:f8:0b:72:40:10:5f:8d:ab:e6:a3:7f:62:d1:12:
                    c7:6b:0b:48:1f:40:9f:88:e0:e4:4d:03:f6:f8:1a:
                    59:64:13:01:0a:a0:3c:66:81:35:c7:2d:79:50:34:
                    51:1f:ab:92:af:2a:f1:0e:de:76:41:bf:5e:68:97:
                    90:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:26:A3:4A:43:33:B2:FE:9E:1F:BE:DC:75:49:D9:49:05:BE:6B:CF
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136342e3231342e302f32332d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.164.214.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7c:2b:93:3d:91:07:3f:14:4d:96:5c:13:b2:46:c9:4a:b9:9a:
         bf:bc:11:f8:f5:ab:c0:41:d1:64:33:e6:a2:c9:fd:54:05:43:
         ad:b2:6f:43:ad:be:51:3a:d8:84:f7:21:30:73:87:6b:43:49:
         4c:01:f2:47:47:67:7f:f9:d3:60:e3:e8:6c:75:ac:42:50:94:
         0c:da:18:fa:19:47:66:b8:f8:48:64:8e:7a:bf:fa:23:e3:df:
         5e:75:db:53:00:40:81:1c:e6:4a:3c:06:1c:4b:db:89:2d:f2:
         9a:53:4a:3d:0f:0f:61:13:52:b8:44:90:8c:3c:fb:ae:3f:0d:
         90:f1:4b:ed:5b:d6:22:1b:3e:47:01:00:c9:ff:9a:0a:39:b0:
         35:fe:72:7a:c1:7e:9d:81:ae:b1:cd:d8:8b:12:bd:60:09:5f:
         c0:d8:44:47:0e:7c:c8:94:d5:71:6d:11:53:cd:cb:c0:7f:82:
         eb:4a:c0:63:72:e8:8f:b7:16:75:d0:6e:37:76:9b:ed:8a:54:
         7c:d5:62:67:ac:c6:04:39:e6:52:f3:84:5b:99:b2:0b:b1:ea:
         05:8c:45:2b:bb:17:31:81:48:91:65:77:3f:25:4b:f4:05:17:
         54:81:d3:88:7a:a5:e0:da:af:db:23:62:8b:e5:fe:06:fd:65:
         2c:ab:79:e8
-----BEGIN CERTIFICATE-----
MIIHCjCCBfKgAwIBAgIUYcqm7rfaoKRHokYEZ+Ddf+QQ5M8wDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIxMTEwMjAwMzgxN1oX
DTIyMTEwMjAwNDMxN1owggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBFQzlENkRDREU4MDY3Q0E3RDQxMzM2MDM3MTlCN0M1QzJDN0JBQTNFMTZF
RDc2OUFGRDEyOTk3MUQ4M0U0QTI2OTlDMzQzRkREQzRCOEQwQzBEMEM3NDAwRTgx
MzA1Qzc3RjY1M0NCNDVBNENCMURCQjQ5REI0RThDNjI3OTU0NTYzMEI5NzdGMDBE
QUNDQkZEQUMyQUUwRjMzRDczQzk0RDUzOEFDQzBEQTY0RkUxNjQxQzk4OEFDQUJD
MTJBOENCOEE0MTIwRDczMjc3RjdDNjM1NjYwNUQzNDVCMkM1QjY1NUY2Q0QyM0Ix
NTM2Qjk3MTVFQzcwNENBQTUzOTI4OTEzNjI1MURFMjkzOEY5ODEyNzNGQkUyQzNG
ODIyMzIyQUE1Q0ZBMDE0RkQ4RUMyMkNENTk2QTFCNENEMzI3MUZFRDdBQjZBMzgz
Qzk2M0MwRTZDMzRFQTk0Q0REMzVFQkM0QjFENDY5MjBCN0YxMkI2NEIzODg2RkE5
MUZGMkU5QzQ0NkZGODBCNzI0MDEwNUY4REFCRTZBMzdGNjJEMTEyQzc2QjBCNDgx
RjQwOUY4OEUwRTQ0RDAzRjZGODFBNTk2NDEzMDEwQUEwM0M2NjgxMzVDNzJENzk1
MDM0NTExRkFCOTJBRjJBRjEwRURFNzY0MUJGNUU2ODk3OTBCRDAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsnW3N6AZ8p9QTNgNxm3xc
LHuqPhbtdpr9Eplx2D5KJpnDQ/3cS40MDQx0AOgTBcd/ZTy0Wkyx27SdtOjGJ5VF
YwuXfwDazL/awq4PM9c8lNU4rMDaZP4WQcmIrKvBKoy4pBINcyd/fGNWYF00Wyxb
ZV9s0jsVNrlxXscEyqU5KJE2JR3ik4+YEnP74sP4IjIqpc+gFP2OwizVlqG0zTJx
/terajg8ljwObDTqlM3TXrxLHUaSC38Stks4hvqR/y6cRG/4C3JAEF+Nq+ajf2LR
EsdrC0gfQJ+I4ORNA/b4GllkEwEKoDxmgTXHLXlQNFEfq5KvKvEO3nZBv15ol5C9
AgMBAAGjggIBMIIB/TAdBgNVHQ4EFgQUbyajSkMzsv6eH77cdUnZSQW+a88wHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjCBhAYIKwYB
BQUHAQsEeDB2MHQGCCsGAQUFBzALhmhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby9JRE5JQy1JRC8yLzMxMzAzMzJlMzEzNjM0MmUzMjMxMzQyZTMwMmYz
MjMzMmQzMjM0MjAzZDNlMjAzMTM3MzkzOTM1LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ6TWMA0GCSqG
SIb3DQEBCwUAA4IBAQB8K5M9kQc/FE2WXBOyRslKuZq/vBH49avAQdFkM+aiyf1U
BUOtsm9Drb5ROtiE9yEwc4drQ0lMAfJHR2d/+dNg4+hsdaxCUJQM2hj6GUdmuPhI
ZI56v/oj499eddtTAECBHOZKPAYcS9uJLfKaU0o9Dw9hE1K4RJCMPPuuPw2Q8Uvt
W9YiGz5HAQDJ/5oKObA1/nJ6wX6dga6xzdiLEr1gCV/A2ERHDnzIlNVxbRFTzcvA
f4LrSsBjcuiPtxZ10G43dpvtilR81WJnrMYEOeZS84RbmbILseoFjEUruxcxgUiR
ZXc/JUv0BRdUgdOIeqXg2q/bI2KL5f4G/WUsq3no
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:10 2024 by rpki-client on console-fra.rpki-client.org