Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136342e3231382e302f32332d3234203d3e203137393935.roa
File:                     3130332e3136342e3231382e302f32332d3234203d3e203137393935.roa (raw, json)
Hash identifier:          PD5Ab5HxNetWeNtatGF0PAfVbaUKx8kl4UrPwu1snnI=
Subject key identifier:   C0:BA:DF:97:66:3E:E4:46:12:AC:B9:2E:75:AF:A3:E7:0D:88:D7:F0
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       60CA492BB1440366AFA84AEDB1763DFBF85A2F3A
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136342e3231382e302f32332d3234203d3e203137393935.roa
Signing time:             Tue 02 Nov 2021 00:43:16 +0000
ROA not before:           Tue 02 Nov 2021 00:38:16 +0000
ROA not after:            Wed 02 Nov 2022 00:43:16 +0000
asID:                     17995
IP address blocks:        103.164.218.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:ca:49:2b:b1:44:03:66:af:a8:4a:ed:b1:76:3d:fb:f8:5a:2f:3a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov  2 00:38:16 2021 GMT
            Not After : Nov  2 00:43:16 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:f9:e2:f9:47:d9:ef:93:d5:43:61:74:74:ad:
                    4c:64:2c:88:84:15:4e:aa:9f:47:a5:ef:3f:35:c8:
                    e5:71:d7:06:30:4e:74:a8:e3:e2:a1:34:53:d3:2c:
                    63:7f:c3:40:38:bd:b4:2b:64:c4:3c:7a:87:c6:2c:
                    86:10:06:c0:13:63:5e:b6:2a:a9:98:fc:38:d8:2e:
                    9d:e5:a5:85:63:98:65:4d:ef:e1:75:6c:8f:b3:a7:
                    71:b9:ba:07:8a:de:32:bb:fa:8b:c1:76:06:3c:e6:
                    ff:a7:3c:55:f1:fb:7a:d7:a2:15:62:e7:48:2c:15:
                    db:d0:5e:30:1b:d8:d3:d3:b7:33:8a:91:93:9e:a3:
                    04:93:aa:c2:75:50:38:ef:2a:cd:9e:b7:86:77:a0:
                    09:7a:d9:d1:ad:97:72:d9:eb:5f:a2:51:0b:ed:6e:
                    bc:78:6f:ff:ac:48:10:37:6c:46:d4:64:6a:69:77:
                    1e:71:d3:1b:52:1b:54:1b:71:71:e5:34:2c:8f:ec:
                    0b:40:4e:89:c4:28:f0:1a:7b:b2:ca:a7:42:f1:df:
                    17:f5:0f:b1:1f:1f:19:bf:02:14:7d:4a:2b:44:e7:
                    f2:f4:4a:72:58:1c:80:19:99:65:37:7f:d1:94:cf:
                    e1:d9:bf:36:a2:73:fc:2e:37:61:67:9b:45:5f:7a:
                    9b:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:BA:DF:97:66:3E:E4:46:12:AC:B9:2E:75:AF:A3:E7:0D:88:D7:F0
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136342e3231382e302f32332d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.164.218.0/23

    Signature Algorithm: sha256WithRSAEncryption
         14:95:47:0a:10:8d:9c:95:17:09:53:0c:41:23:36:0e:e9:6f:
         32:07:e4:3e:94:8c:a1:f5:9a:86:1f:1e:c4:44:96:09:62:74:
         a4:e7:be:55:a1:ad:5a:ce:75:9f:f8:94:fc:ed:1b:00:1a:ab:
         ac:dc:40:9b:d1:06:39:ab:98:72:31:17:1d:63:3c:d8:8a:04:
         4d:bb:88:46:b0:00:74:e3:eb:07:b9:96:79:d2:fb:3d:12:d0:
         2d:e1:f6:b2:b0:8e:8a:c8:25:dd:17:5d:87:48:f4:48:6a:99:
         14:fb:40:b9:30:ff:56:27:79:d2:06:00:96:6d:04:99:91:87:
         40:07:b3:75:ae:dc:b3:64:86:e6:f9:01:45:bf:c9:b5:b2:bc:
         a6:6a:a2:ed:84:84:2f:a1:b3:3b:74:c9:c1:60:fd:cf:9e:96:
         3c:91:6e:25:1c:f5:db:03:f5:2c:84:ca:8d:27:38:fa:5e:e1:
         f3:ab:98:16:16:8e:36:d5:d7:7c:9e:1e:d4:de:71:4a:69:85:
         4c:0e:9e:0f:33:49:54:14:10:db:fd:8a:23:cd:1a:93:59:4b:
         80:e2:b0:1f:f5:76:1b:39:41:58:a5:37:74:28:64:c0:5f:02:
         9b:59:3c:20:c2:16:69:01:f9:7a:c0:36:e2:45:53:c7:ee:fb:
         8b:4d:5b:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:10 2024 by rpki-client on console-fra.rpki-client.org