Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136342e3232302e302f32332d3234203d3e203137393935.roa
File:                     3130332e3136342e3232302e302f32332d3234203d3e203137393935.roa (raw, json)
Hash identifier:          bqDC4TsqKLfG5ic+dNoO3d4+X5T8hzeQ3VJxfqGpOic=
Subject key identifier:   0C:91:11:0C:BF:4C:78:94:99:0F:0C:A5:70:AC:1A:40:61:5B:56:DF
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       1B7E15D6334CB0B5BF451C39FD126F96BB95BBFA
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136342e3232302e302f32332d3234203d3e203137393935.roa
Signing time:             Tue 02 Nov 2021 00:43:13 +0000
ROA not before:           Tue 02 Nov 2021 00:38:13 +0000
ROA not after:            Wed 02 Nov 2022 00:43:13 +0000
asID:                     17995
IP address blocks:        103.164.220.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:7e:15:d6:33:4c:b0:b5:bf:45:1c:39:fd:12:6f:96:bb:95:bb:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov  2 00:38:13 2021 GMT
            Not After : Nov  2 00:43:13 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a8:2c:d9:6a:58:f9:c2:b9:49:38:cb:93:34:
                    ca:92:2f:a0:90:66:ab:d7:cc:d7:3d:bf:4e:79:80:
                    01:69:b5:fe:53:24:7c:29:a4:64:d6:1a:5c:89:e9:
                    c9:5b:99:77:2b:d1:89:ef:55:42:1f:6e:35:4f:7b:
                    3a:af:6b:fe:40:43:99:a8:f1:fd:a2:6e:a1:53:b4:
                    6d:08:d3:92:6f:d9:62:3e:00:cb:4e:0c:af:0a:82:
                    54:99:e4:e4:64:b9:3a:62:4c:58:6d:c9:1b:7e:85:
                    ca:39:5d:85:e7:fa:04:14:da:da:7a:8c:0a:b4:34:
                    4b:59:0b:8f:74:e9:f0:48:c5:c9:5e:67:8e:65:31:
                    87:55:25:52:0f:d2:37:58:1e:f5:08:c6:a4:43:0d:
                    cd:5e:66:2d:c9:73:d2:c9:03:98:8f:15:98:0a:93:
                    54:c1:1e:cf:39:9d:43:90:ed:fb:44:04:72:ac:90:
                    77:58:63:4f:06:30:7f:9a:ff:7c:26:57:bc:6b:2e:
                    bc:bf:0a:c4:bd:93:1a:9c:69:e2:ea:e1:34:1b:0b:
                    7f:f0:93:29:d4:d6:f8:94:ea:98:54:81:2b:ad:90:
                    a1:2f:bd:f8:61:f9:84:f9:53:df:98:96:f3:65:ed:
                    8c:1c:5e:8d:e3:db:02:32:c9:1e:71:a3:65:3a:9f:
                    ef:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:91:11:0C:BF:4C:78:94:99:0F:0C:A5:70:AC:1A:40:61:5B:56:DF
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136342e3232302e302f32332d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.164.220.0/23

    Signature Algorithm: sha256WithRSAEncryption
         52:e4:4b:b8:3d:50:12:e8:78:2a:65:4d:8f:6f:13:48:9c:e6:
         a5:e1:c9:ad:3e:fe:a4:34:ac:31:fa:f9:f2:bf:70:28:50:6c:
         bb:2a:06:b7:36:c2:99:cd:59:c5:7c:5b:1d:cc:dd:e5:31:25:
         2d:9b:49:5a:00:67:e4:02:5b:a0:d0:26:24:1d:11:e8:e6:58:
         bc:b3:fc:6b:b4:a5:d0:f7:ad:d5:27:41:58:ed:bd:2b:4e:fd:
         12:95:ba:9b:81:08:9e:9b:3e:da:2a:5c:54:e9:5b:c3:89:4d:
         ef:23:a1:82:a0:60:48:b6:9b:3e:8b:d5:38:01:d5:c8:3f:91:
         fa:da:4f:b2:00:74:80:dc:10:3b:b5:17:53:e5:cb:7c:b2:db:
         b6:99:14:be:67:17:87:b7:9d:69:37:80:2a:e9:75:2d:39:0d:
         d6:74:be:c8:35:e5:67:a0:70:a7:18:77:f9:86:a5:f3:df:5f:
         4c:8b:8b:9b:92:d9:6f:35:9f:a1:5d:cf:40:0a:00:a4:57:e5:
         f6:e4:9e:59:d1:50:0c:24:69:0e:88:0f:0f:07:e6:8c:cc:39:
         21:d4:b5:1f:26:e5:bc:c4:c7:34:dd:3d:11:1e:67:93:d5:36:
         28:a9:83:13:d7:11:4d:95:e4:fd:e4:98:1c:c6:9d:71:ba:99:
         78:bf:07:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:10 2024 by rpki-client on console-fra.rpki-client.org