Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136352e3135332e302f32342d3234203d3e20313431393139.roa
File:                     3130332e3136352e3135332e302f32342d3234203d3e20313431393139.roa (raw, json)
Hash identifier:          xJ8176XfrcImDPxoJoE1czULnvBYRxnoSkUIAwqrukI=
Subject key identifier:   E1:39:E4:FF:F6:77:92:EE:15:6D:7F:2F:39:52:34:3A:B3:F4:AD:9B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       7D32A25CE6FF760D963468B6754F0F0CB0C18ADF
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136352e3135332e302f32342d3234203d3e20313431393139.roa
Signing time:             Thu 06 May 2021 04:16:12 +0000
ROA not before:           Thu 06 May 2021 04:11:12 +0000
ROA not after:            Fri 06 May 2022 04:16:12 +0000
asID:                     141919
IP address blocks:        103.165.153.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:32:a2:5c:e6:ff:76:0d:96:34:68:b6:75:4f:0f:0c:b0:c1:8a:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: May  6 04:11:12 2021 GMT
            Not After : May  6 04:16:12 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:c6:66:aa:a4:52:f2:e9:33:62:22:dd:64:5a:
                    ff:49:52:bc:00:df:cf:fb:f5:93:4b:ec:fa:8c:37:
                    5d:d7:33:c7:77:6e:fd:5d:aa:9c:b2:88:6d:ae:9d:
                    8f:3a:68:07:61:11:4d:83:1d:8e:99:5a:8c:d0:c1:
                    fa:b0:3f:f7:6a:51:8a:8b:6b:f2:a8:b5:1c:f9:06:
                    68:7a:a5:40:de:05:b6:1f:73:34:a7:0a:8a:b8:92:
                    4e:bf:0d:d5:63:0d:64:40:85:0f:a0:d8:8a:80:6e:
                    30:e7:94:44:54:8a:e0:8f:f3:18:a8:9a:3f:17:25:
                    52:bb:6c:0a:05:9c:49:9e:3e:77:51:5d:68:04:43:
                    95:bb:9f:f5:d1:e3:69:37:f2:6d:a5:fc:20:38:9a:
                    e0:16:45:e7:db:06:08:a8:9b:8d:06:33:f0:ad:f0:
                    37:ff:52:d3:69:be:0f:85:01:c9:86:80:c2:99:a4:
                    ad:ee:a4:36:5f:6e:a4:e5:1c:89:21:31:ce:a2:35:
                    b6:c5:9c:21:5d:7b:ec:01:78:e1:a6:2a:c9:b6:d1:
                    d2:8e:18:d2:24:3e:b5:29:cf:c2:84:c4:07:89:25:
                    71:9f:39:9e:6c:3e:ea:f6:d5:0e:f5:79:51:3b:33:
                    24:3f:2b:d4:8f:20:c5:8e:a8:6e:0f:19:20:27:7f:
                    c4:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:39:E4:FF:F6:77:92:EE:15:6D:7F:2F:39:52:34:3A:B3:F4:AD:9B
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136352e3135332e302f32342d3234203d3e20313431393139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.165.153.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:45:f3:b0:fe:3a:62:b4:5c:72:95:73:47:b2:9e:20:bd:e6:
         d4:7a:0c:b8:22:0c:35:b0:25:74:5a:de:82:cf:bd:ec:f5:09:
         c8:57:3e:d0:ef:d1:41:52:02:df:9c:45:62:ac:cf:ae:9e:c6:
         63:08:3a:5d:26:16:c6:50:5e:f5:39:7a:59:25:1b:7e:de:8b:
         62:1c:06:a2:cc:b0:e9:41:00:f2:bd:9d:96:5e:a5:36:61:7a:
         dd:aa:87:10:1b:87:e1:c5:2e:fc:08:a6:54:09:e9:e9:68:c4:
         7e:48:40:f2:97:ef:7c:58:5a:d6:56:74:1c:fb:1e:ee:44:28:
         a9:e7:42:57:8e:37:34:5b:a0:6d:c6:78:25:56:80:69:33:33:
         a7:60:a5:69:e1:4c:0c:04:f4:8e:a7:51:63:30:2f:3c:38:7c:
         76:d4:54:3b:ac:b3:07:f9:7f:a4:83:20:30:f7:20:d8:90:04:
         3a:c6:6d:b1:f7:1e:57:ea:be:d2:77:35:fe:c1:c6:67:97:50:
         5f:21:ff:4d:30:1f:62:44:c9:94:2f:92:50:b3:93:0b:86:03:
         19:2c:81:fb:d5:11:36:45:b1:18:02:ae:b5:1a:96:b5:c9:be:
         ad:9f:43:b0:2b:d2:ad:35:68:4d:80:e6:88:e1:e4:d8:4c:66:
         5c:31:3c:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:10 2024 by rpki-client on console-fra.rpki-client.org