Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136352e3132342e302f32332d3234203d3e203137393935.roa
File:                     3130332e3136352e3132342e302f32332d3234203d3e203137393935.roa (raw, json)
Hash identifier:          b0jEzt+k1TB0S8cdBmC+ltGfF9jtmO4Jve98T8H2NpI=
Subject key identifier:   D4:CE:C1:89:0D:59:56:E5:3A:F6:51:36:E5:D7:49:4C:18:2A:05:D6
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       22B2792F465F3D0A4FB83331D3C9888D391FA92C
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136352e3132342e302f32332d3234203d3e203137393935.roa
Signing time:             Tue 02 Nov 2021 00:43:13 +0000
ROA not before:           Tue 02 Nov 2021 00:38:13 +0000
ROA not after:            Wed 02 Nov 2022 00:43:13 +0000
asID:                     17995
IP address blocks:        103.165.124.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:b2:79:2f:46:5f:3d:0a:4f:b8:33:31:d3:c9:88:8d:39:1f:a9:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov  2 00:38:13 2021 GMT
            Not After : Nov  2 00:43:13 2022 GMT
        Subject: CN=3082010A0282010100C32DD71FE4E3A22D39490852273883BC674C886422AA34ABA073F5C3889EB4A1A7DD07390B013F087B2904F9F57A3C003197E184D404D5BE698AB8291027B68721D94470883284B37217427A9AB025AA21DCB417D9AF9EB41F29833361F21477844BBAEA9BC529399D32061E64A7A469FF471DC4883DD5DB2C8B0B56DB27939CFED02317432FB338261A725B430E13A5DCDC676C3B1E4DCD076863465B59CAE77FCBBECE04F35223F2182340D3CCA35995962547AC6EDA05B7DB68468072909B8B185DF36527642F882A4FE5510E61170FE865B19ED1B5EFC34CF9A193E0DA99705B3A3CE14E2CF47829463D516A22187C5DC5E8CC6B163E498564C17C8E7B870203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:2d:d7:1f:e4:e3:a2:2d:39:49:08:52:27:38:
                    83:bc:67:4c:88:64:22:aa:34:ab:a0:73:f5:c3:88:
                    9e:b4:a1:a7:dd:07:39:0b:01:3f:08:7b:29:04:f9:
                    f5:7a:3c:00:31:97:e1:84:d4:04:d5:be:69:8a:b8:
                    29:10:27:b6:87:21:d9:44:70:88:32:84:b3:72:17:
                    42:7a:9a:b0:25:aa:21:dc:b4:17:d9:af:9e:b4:1f:
                    29:83:33:61:f2:14:77:84:4b:ba:ea:9b:c5:29:39:
                    9d:32:06:1e:64:a7:a4:69:ff:47:1d:c4:88:3d:d5:
                    db:2c:8b:0b:56:db:27:93:9c:fe:d0:23:17:43:2f:
                    b3:38:26:1a:72:5b:43:0e:13:a5:dc:dc:67:6c:3b:
                    1e:4d:cd:07:68:63:46:5b:59:ca:e7:7f:cb:be:ce:
                    04:f3:52:23:f2:18:23:40:d3:cc:a3:59:95:96:25:
                    47:ac:6e:da:05:b7:db:68:46:80:72:90:9b:8b:18:
                    5d:f3:65:27:64:2f:88:2a:4f:e5:51:0e:61:17:0f:
                    e8:65:b1:9e:d1:b5:ef:c3:4c:f9:a1:93:e0:da:99:
                    70:5b:3a:3c:e1:4e:2c:f4:78:29:46:3d:51:6a:22:
                    18:7c:5d:c5:e8:cc:6b:16:3e:49:85:64:c1:7c:8e:
                    7b:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:CE:C1:89:0D:59:56:E5:3A:F6:51:36:E5:D7:49:4C:18:2A:05:D6
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136352e3132342e302f32332d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.165.124.0/23

    Signature Algorithm: sha256WithRSAEncryption
         25:85:c0:5c:e8:ae:d3:8b:d8:61:31:92:11:d2:f4:98:c9:21:
         f5:cb:aa:3b:eb:0d:5e:a8:d5:2b:c1:f0:b5:bd:72:77:27:ce:
         30:c5:97:a1:50:15:7c:65:0c:88:28:c1:f3:98:be:00:20:fa:
         71:f8:af:f3:b8:ba:46:b2:c4:63:bd:5b:56:0f:ba:93:d6:76:
         9a:b9:05:4e:d9:cf:30:05:76:43:e3:7a:ae:49:b8:3a:e2:e3:
         da:b7:55:63:da:6e:f5:5a:58:be:f8:86:7f:d1:03:5b:62:53:
         a3:20:01:67:f5:42:05:30:99:7a:36:4e:90:44:e4:2c:e2:ef:
         b2:aa:c6:80:2f:fd:cf:f7:e2:b5:19:14:df:5e:62:29:90:10:
         16:64:24:aa:48:ba:7a:c7:65:ec:a2:49:80:87:86:50:50:58:
         ee:ac:fe:9d:21:d4:7a:b9:4f:8b:36:e5:e0:16:40:7e:52:7b:
         27:ac:72:3b:57:6c:5f:bd:08:a1:01:8d:07:aa:00:a0:06:87:
         c9:09:e9:f1:f6:29:8a:22:da:4b:a0:29:18:bb:e0:ca:9c:d7:
         14:b7:05:04:22:50:00:b7:6f:e1:c5:7c:3a:72:4f:d1:2b:07:
         93:1b:8b:00:d1:31:d9:36:f4:9c:ed:5c:b7:b5:3a:94:78:ca:
         94:4b:07:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:45 2024 by rpki-client on console-ams.rpki-client.org