Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136352e3133342e302f32332d3234203d3e203137393935.roa
File:                     3130332e3136352e3133342e302f32332d3234203d3e203137393935.roa (raw, json)
Hash identifier:          6fjctrW6qf6uA9epSmSXNPM2CTXHlyoT18aQ4JldV+s=
Subject key identifier:   A1:1A:FC:0E:26:D4:F9:99:71:3A:08:F1:42:1B:3C:6A:4A:FC:69:EC
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       70083F9D6EB87C7EA6D5925173CACAEA349DBBE3
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136352e3133342e302f32332d3234203d3e203137393935.roa
Signing time:             Tue 02 Nov 2021 00:43:17 +0000
ROA not before:           Tue 02 Nov 2021 00:38:17 +0000
ROA not after:            Wed 02 Nov 2022 00:43:17 +0000
asID:                     17995
IP address blocks:        103.165.134.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:08:3f:9d:6e:b8:7c:7e:a6:d5:92:51:73:ca:ca:ea:34:9d:bb:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov  2 00:38:17 2021 GMT
            Not After : Nov  2 00:43:17 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:25:8b:91:41:1d:0c:7c:2d:c1:cf:6a:0d:07:
                    cb:20:fe:82:4f:b3:90:69:78:ad:dd:b5:bd:92:18:
                    c9:24:1b:fe:94:14:84:eb:f4:74:ea:1c:bf:d2:dd:
                    83:00:31:a0:c8:b2:62:21:db:6b:bb:a5:ff:f6:0c:
                    0a:75:91:4e:1d:26:c4:a3:f3:4e:75:b0:ca:8e:2c:
                    24:31:99:b2:6e:da:04:ad:1f:8b:b2:f9:c3:eb:e8:
                    c0:0b:4c:82:02:45:34:88:e4:07:13:8d:a6:39:21:
                    56:ca:5d:2f:ac:d4:fd:74:fc:2f:5e:b1:55:0e:67:
                    2c:56:bf:b0:00:af:3b:e6:d4:e2:2f:c4:ba:fd:c4:
                    0e:ae:32:f1:3e:17:c0:13:1b:45:19:fc:b5:fb:95:
                    4b:9a:10:e6:d6:be:74:ae:e0:f9:f7:69:3f:ad:f6:
                    0f:e4:37:5c:ac:e1:2f:c3:76:17:41:2e:8d:4e:a7:
                    9b:45:e5:c0:b1:74:97:cb:8b:fc:17:e3:02:4f:7d:
                    d5:e3:4d:a3:ee:8c:18:74:39:bb:dd:74:4c:99:64:
                    e4:b5:e5:be:38:51:32:2e:66:a9:6c:c3:cf:ec:10:
                    1c:bf:9f:5b:80:4f:9b:6b:4b:ef:5c:de:da:27:46:
                    6b:97:ab:89:9f:ba:5c:1a:00:56:56:41:92:7c:19:
                    3e:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:1A:FC:0E:26:D4:F9:99:71:3A:08:F1:42:1B:3C:6A:4A:FC:69:EC
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136352e3133342e302f32332d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.165.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         42:be:1c:d7:85:67:0b:64:b3:b8:af:6b:42:13:02:1a:35:17:
         5b:43:d1:de:26:0e:58:d1:c0:63:f6:da:44:95:34:c4:14:02:
         0a:c7:94:93:3d:cd:71:93:cc:f7:23:cd:1e:d1:7e:13:5c:90:
         8e:f9:7e:64:bc:73:9e:be:5e:8c:4c:db:47:72:6f:60:23:e1:
         d0:c2:55:49:a5:a4:51:c3:85:0e:20:f6:84:ff:ef:da:23:e9:
         20:d7:9a:e4:e0:1d:07:79:b5:d8:f3:8e:3f:1b:0f:fe:d9:25:
         11:56:03:37:cc:9d:2a:31:0d:f1:46:80:cc:a9:70:eb:98:d3:
         fb:c8:94:03:87:2b:fd:36:40:54:a4:f2:07:97:5c:50:f2:1e:
         6d:77:aa:f6:d6:51:fc:be:c6:b7:e6:a4:e0:00:9b:94:aa:d0:
         f3:d6:81:5c:33:bd:98:05:66:ff:81:02:56:12:bf:f9:ac:3b:
         24:db:3f:6e:15:82:86:ca:0c:96:19:df:4e:3e:99:c6:9a:cc:
         23:2f:7b:1a:97:f2:7d:4e:24:5b:91:c3:4b:6a:bd:7d:2f:3f:
         b6:0f:3d:6a:d8:3f:c3:55:35:b6:ab:65:d5:67:76:6f:1b:2b:
         47:fc:ae:d1:84:69:61:51:cc:69:0e:47:0d:08:56:9c:8e:d3:
         e1:f1:89:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:10 2024 by rpki-client on console-fra.rpki-client.org