Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136342e3233352e302f32342d3234203d3e20313431393136.roa
File:                     3130332e3136342e3233352e302f32342d3234203d3e20313431393136.roa (raw, json)
Hash identifier:          od0R6Q2HFwYTQvdvNsT06Qffb8RzsEgDRozYY2YyP/Q=
Subject key identifier:   7A:3E:32:B1:F1:7B:14:A5:65:D5:68:C4:D0:8B:8B:7E:CE:72:2B:19
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       70DAF51787F1C944725F785C6651EF163C10A077
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136342e3233352e302f32342d3234203d3e20313431393136.roa
Signing time:             Mon 05 Apr 2021 08:13:50 +0000
ROA not before:           Mon 05 Apr 2021 08:08:50 +0000
ROA not after:            Tue 05 Apr 2022 08:13:50 +0000
asID:                     141916
IP address blocks:        103.164.235.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:da:f5:17:87:f1:c9:44:72:5f:78:5c:66:51:ef:16:3c:10:a0:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Apr  5 08:08:50 2021 GMT
            Not After : Apr  5 08:13:50 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:08:fe:6e:db:d4:d2:d5:08:76:e4:e2:95:02:
                    6b:92:73:75:57:f0:88:8e:c4:44:f2:c9:bc:d8:f5:
                    57:6b:dd:09:40:f9:cc:b5:61:45:29:9f:38:38:5b:
                    4f:99:03:0a:e0:f9:90:1a:af:89:38:e3:c9:c8:44:
                    7e:23:24:f1:50:27:4a:7f:38:2b:2b:37:f1:07:6e:
                    41:aa:39:ec:d5:b0:22:a8:d7:7b:2c:d9:f9:d9:0c:
                    56:a1:c7:cd:2f:77:7d:7a:bb:4c:5e:03:fd:c2:5e:
                    c4:4e:af:ce:24:c7:01:dd:9b:bb:60:70:30:e4:1a:
                    22:ad:4a:fc:8e:e8:4f:5f:a4:b7:e8:c3:da:20:b8:
                    4e:bb:c3:c6:dd:75:05:e8:34:ee:d4:ff:17:14:b1:
                    17:a2:02:88:b8:f1:cf:e5:e7:16:f9:b0:5b:60:f2:
                    2f:d1:28:94:b0:d6:8a:e7:9f:05:c6:c9:1d:bf:4f:
                    55:8f:d2:36:47:86:50:a6:48:9a:4a:50:64:4b:41:
                    c9:b2:76:52:f7:08:e4:88:dc:be:85:c0:54:a7:63:
                    d3:17:a0:a9:b3:00:01:9a:30:89:c6:4c:5d:db:2d:
                    a0:2e:96:e8:0f:00:f5:8b:eb:1e:fc:80:73:d9:58:
                    0f:f0:3a:9c:ea:de:e6:15:d3:f6:99:da:b2:87:79:
                    38:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:3E:32:B1:F1:7B:14:A5:65:D5:68:C4:D0:8B:8B:7E:CE:72:2B:19
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136342e3233352e302f32342d3234203d3e20313431393136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.164.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:6a:68:fe:35:7b:02:83:29:0f:3b:f0:5c:b1:f8:75:03:bc:
         5f:a7:08:58:bf:a6:47:f8:68:be:cf:66:1a:9a:8d:20:de:6a:
         03:f4:1d:c8:05:25:8e:80:ed:d9:60:b0:c9:45:0c:df:08:bb:
         eb:c2:81:7f:5e:3c:e3:1d:24:f3:2f:23:e8:69:bc:c9:7d:7e:
         cf:e5:f0:76:ac:50:d3:b4:e7:32:0b:80:99:1b:b6:a6:74:2e:
         c7:16:93:ab:33:88:e0:a2:2d:a3:ee:9d:85:d1:c7:97:b1:1b:
         49:16:5f:ed:59:30:6c:52:89:3c:b1:7f:cc:2f:e1:43:86:7f:
         a7:e1:2c:f6:4c:df:f9:16:07:d8:42:e3:df:00:a4:6e:77:26:
         56:ef:7c:0f:60:af:e3:b4:5b:d9:b3:26:33:58:26:8f:e5:a3:
         68:e6:ea:98:5f:a8:41:81:24:38:66:33:8f:26:5a:fe:cf:d1:
         6f:78:fa:bd:a4:b2:ab:34:3e:b2:75:92:13:c2:6e:ce:ea:d0:
         8f:fb:6c:9b:f0:bb:45:07:f5:54:79:e6:9e:2d:1a:5f:ad:89:
         12:3b:80:f3:3b:46:3f:9d:69:e6:3e:2a:4c:ee:dd:b2:ca:f2:
         69:c1:9a:48:81:93:70:80:31:38:7f:ee:9f:1f:b4:23:4d:a3:
         5a:2b:34:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:10 2024 by rpki-client on console-fra.rpki-client.org