Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136352e3133362e302f32332d3234203d3e203137393935.roa
File:                     3130332e3136352e3133362e302f32332d3234203d3e203137393935.roa (raw, json)
Hash identifier:          2J2EOXjWDYrl5moWGSdsf9L7kYUJjkBP0zCdWnt/P/M=
Subject key identifier:   2B:62:BD:51:D7:1F:34:FC:3E:17:AA:B7:04:83:A0:7F:62:20:ED:36
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       5E7B13D44E439ED85C4C9F5B9E62F05265668A08
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136352e3133362e302f32332d3234203d3e203137393935.roa
Signing time:             Tue 02 Nov 2021 00:43:14 +0000
ROA not before:           Tue 02 Nov 2021 00:38:14 +0000
ROA not after:            Wed 02 Nov 2022 00:43:14 +0000
asID:                     17995
IP address blocks:        103.165.136.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:7b:13:d4:4e:43:9e:d8:5c:4c:9f:5b:9e:62:f0:52:65:66:8a:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov  2 00:38:14 2021 GMT
            Not After : Nov  2 00:43:14 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:c0:4a:0b:6d:76:30:e1:2f:5b:ba:e4:6c:2e:
                    bb:41:5c:c6:d2:70:d6:9b:48:15:29:d1:80:b2:30:
                    af:39:af:45:b4:10:f1:ca:01:44:4e:38:33:8d:65:
                    5b:00:0a:02:a6:4e:78:a6:7e:05:a9:ae:ff:72:a1:
                    2c:52:96:39:65:f6:5f:38:97:20:ac:70:29:61:7e:
                    82:b3:fd:99:03:1d:dd:7b:20:32:a7:8b:f6:44:61:
                    fe:74:21:28:ca:c0:c9:ff:5e:92:4d:53:27:9e:d9:
                    49:a8:b6:80:8f:74:c0:2e:da:d3:b6:fc:d3:5f:47:
                    41:df:37:af:ca:3c:a3:5c:0c:a4:31:b9:bb:a0:3a:
                    c3:45:ff:2c:db:a1:d7:cc:76:61:c8:bb:52:65:eb:
                    6b:34:bb:a4:cc:fc:94:ae:fb:36:71:19:f5:2f:f2:
                    61:9f:b9:77:51:b2:05:18:e6:2b:4b:45:77:70:31:
                    af:c4:76:0e:c5:b2:08:62:75:82:40:63:85:73:42:
                    e0:29:c8:77:32:da:1f:21:23:61:55:66:c6:a5:cb:
                    ab:95:45:79:5a:c8:01:09:38:c5:da:06:5a:c1:48:
                    66:db:92:be:78:6c:39:82:d4:bc:75:e5:a3:d5:28:
                    9c:a6:88:c9:50:74:97:46:e1:29:9d:29:97:29:c2:
                    fa:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:62:BD:51:D7:1F:34:FC:3E:17:AA:B7:04:83:A0:7F:62:20:ED:36
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136352e3133362e302f32332d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.165.136.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1f:58:fd:2f:dd:94:ef:76:76:f1:66:90:ad:66:11:07:86:ca:
         2e:c1:ca:b3:b2:c1:e7:af:10:1e:c6:e0:3e:23:c3:c6:28:e3:
         8b:8f:70:cc:d2:0e:54:15:80:4c:ca:89:b9:f5:43:e5:5c:f8:
         5e:30:2b:b4:d9:37:59:0a:0d:42:66:2d:86:9c:06:8e:e0:bf:
         d4:db:46:1b:e5:58:a0:9e:20:f4:fe:5b:78:c3:3d:15:ad:62:
         a2:84:7f:c6:7d:d1:47:0c:85:41:0b:76:f0:5f:c7:c2:a9:4c:
         ed:48:85:10:6a:d8:2e:52:3a:db:2f:4d:f0:60:9d:3d:12:1b:
         98:a9:1e:7a:3e:9f:b9:1f:8c:4b:9f:37:1b:6b:ae:85:41:70:
         25:91:63:89:93:f2:0b:fb:4b:46:62:ba:9d:65:b0:16:a6:d1:
         c5:72:2d:a8:79:75:0f:a7:ea:cb:f9:7b:75:43:d6:e4:4d:16:
         61:61:09:a8:24:17:e4:b3:dd:d6:a7:30:e6:d8:7e:e7:8b:63:
         f3:fc:6b:20:9b:7c:68:c6:a8:dc:4e:b0:6a:dc:1f:ba:5b:82:
         dd:8a:e3:a5:de:da:3d:ec:f5:d2:b8:96:eb:a0:8b:79:33:1c:
         b5:2e:72:72:71:6f:76:b0:95:10:24:33:43:84:35:23:cc:3b:
         8d:f0:a0:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:10 2024 by rpki-client on console-fra.rpki-client.org