Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136352e3133322e302f32332d3234203d3e203137393935.roa
File:                     3130332e3136352e3133322e302f32332d3234203d3e203137393935.roa (raw, json)
Hash identifier:          gl2lpnYLqAl6dPLnTBZ/fT4g2hXHKG0vH47P8hA3U3s=
Subject key identifier:   E2:10:C6:16:DD:94:A2:0F:9B:FA:7B:F6:53:7C:FC:83:7F:ED:6E:AF
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       0C8C2E35A92B5D69C7FD27E0DAE9003D549B4C06
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136352e3133322e302f32332d3234203d3e203137393935.roa
Signing time:             Tue 02 Nov 2021 00:43:16 +0000
ROA not before:           Tue 02 Nov 2021 00:38:16 +0000
ROA not after:            Wed 02 Nov 2022 00:43:16 +0000
asID:                     17995
IP address blocks:        103.165.132.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:8c:2e:35:a9:2b:5d:69:c7:fd:27:e0:da:e9:00:3d:54:9b:4c:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov  2 00:38:16 2021 GMT
            Not After : Nov  2 00:43:16 2022 GMT
        Subject: CN=3082010A0282010100E0BF4F011E01699CA5BE5FECCAE71E30147B6C63A8D046434540097ABAEBDEEC56889D08AD14AE820F2DE3A1514DBB29553911D7151EC6A1B38AE2B4EB373BC4885EEC1443562F78CEA22162FF9DF80DF7E909F5707143C2E0FA8828A0A37D41249DAEB90548E656E41A1D455AD5C514BD4699FAF2AA45CEC56C0A0C73DE9EB54BC09C80CF05101AB9E118268A87B18575C52345382D61C68548C0BD3EA20BA6AC6522D9485A6D13291138767C72952BE3E22067E60E9C97B67B2BF8CB18846D97788AB25DD9CAC5D6C6B1C422765264A33561A9302F652F78B2A784D76AFF3488CD34C0B5A7170F90A30DEC9FAB5A187554E018727997F0452F5A418A3410B50203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:bf:4f:01:1e:01:69:9c:a5:be:5f:ec:ca:e7:
                    1e:30:14:7b:6c:63:a8:d0:46:43:45:40:09:7a:ba:
                    eb:de:ec:56:88:9d:08:ad:14:ae:82:0f:2d:e3:a1:
                    51:4d:bb:29:55:39:11:d7:15:1e:c6:a1:b3:8a:e2:
                    b4:eb:37:3b:c4:88:5e:ec:14:43:56:2f:78:ce:a2:
                    21:62:ff:9d:f8:0d:f7:e9:09:f5:70:71:43:c2:e0:
                    fa:88:28:a0:a3:7d:41:24:9d:ae:b9:05:48:e6:56:
                    e4:1a:1d:45:5a:d5:c5:14:bd:46:99:fa:f2:aa:45:
                    ce:c5:6c:0a:0c:73:de:9e:b5:4b:c0:9c:80:cf:05:
                    10:1a:b9:e1:18:26:8a:87:b1:85:75:c5:23:45:38:
                    2d:61:c6:85:48:c0:bd:3e:a2:0b:a6:ac:65:22:d9:
                    48:5a:6d:13:29:11:38:76:7c:72:95:2b:e3:e2:20:
                    67:e6:0e:9c:97:b6:7b:2b:f8:cb:18:84:6d:97:78:
                    8a:b2:5d:d9:ca:c5:d6:c6:b1:c4:22:76:52:64:a3:
                    35:61:a9:30:2f:65:2f:78:b2:a7:84:d7:6a:ff:34:
                    88:cd:34:c0:b5:a7:17:0f:90:a3:0d:ec:9f:ab:5a:
                    18:75:54:e0:18:72:79:97:f0:45:2f:5a:41:8a:34:
                    10:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:10:C6:16:DD:94:A2:0F:9B:FA:7B:F6:53:7C:FC:83:7F:ED:6E:AF
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136352e3133322e302f32332d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.165.132.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5c:00:22:a8:61:41:75:e8:2b:8a:ce:ed:e9:8e:45:9d:2d:4d:
         cb:41:bb:6e:7b:00:45:c4:a3:ed:56:02:bb:90:33:da:37:4a:
         03:68:66:26:7d:bf:56:29:67:b0:b6:e1:3f:e6:77:ca:37:f8:
         56:04:0d:80:03:1a:27:80:66:69:bb:65:94:9d:a6:b1:a8:91:
         e9:26:9f:86:a0:8a:60:ad:6b:ff:c2:d3:a6:25:42:fa:cb:4c:
         f2:f8:7f:4f:1f:c5:b4:f6:ee:5b:03:aa:3f:4b:ce:0d:c9:32:
         33:b3:f7:94:cb:09:54:de:1f:2e:e1:c8:83:62:23:15:1a:ce:
         87:ce:9c:f2:b8:49:71:25:6c:5b:0c:7c:f4:9e:d3:63:0b:5a:
         47:e8:5b:dd:6c:cf:76:30:cd:38:e8:47:a9:96:3e:48:45:13:
         c8:2d:11:46:ee:ec:ed:74:8a:ca:e3:c4:ac:ce:65:48:f7:71:
         46:f1:c3:f2:3f:83:7f:38:3d:5b:4d:3a:06:17:6a:e6:eb:da:
         7a:c0:f1:5e:91:ca:38:46:db:9d:6d:bf:d7:a3:0b:34:ec:fb:
         df:05:c7:3e:f6:c6:4c:ca:d9:34:fd:a5:da:73:c0:c1:3c:d6:
         3c:03:9d:d2:36:36:8c:96:37:45:81:6c:10:e1:b5:4f:96:d7:
         11:9b:83:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:10 2024 by rpki-client on console-fra.rpki-client.org