Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136352e3139382e302f32332d3234203d3e203137393935.roa
File:                     3130332e3136352e3139382e302f32332d3234203d3e203137393935.roa (raw, json)
Hash identifier:          5YaqCV10GmMpJP9nlR611AztOrnhaYh+UGSW4Ikx6bg=
Subject key identifier:   44:7C:AF:61:6B:B9:59:80:98:76:76:9B:F4:32:23:02:68:19:9D:96
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       2EDCE4542D02D70B0AA1863B100648DF35E42B6E
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136352e3139382e302f32332d3234203d3e203137393935.roa
Signing time:             Tue 02 Nov 2021 00:43:19 +0000
ROA not before:           Tue 02 Nov 2021 00:38:19 +0000
ROA not after:            Wed 02 Nov 2022 00:43:19 +0000
asID:                     17995
IP address blocks:        103.165.198.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:dc:e4:54:2d:02:d7:0b:0a:a1:86:3b:10:06:48:df:35:e4:2b:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov  2 00:38:19 2021 GMT
            Not After : Nov  2 00:43:19 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:16:b5:08:16:5d:7b:d7:df:e3:62:a8:50:90:
                    23:93:e0:15:c9:41:6e:75:68:91:00:1e:26:70:59:
                    da:21:39:ff:e7:14:a9:10:8c:94:3d:6c:b6:c9:ad:
                    3d:8c:81:bb:4c:16:59:5e:1d:af:bc:66:0d:68:2c:
                    65:e3:70:04:64:cd:06:4a:ca:75:4f:25:ef:4c:a8:
                    c1:05:e1:f8:9c:a8:cc:1a:de:0f:12:7c:82:47:d9:
                    2f:4c:3e:2e:6e:6d:b4:9c:3a:4b:39:21:f3:dd:51:
                    7d:87:1f:c6:5a:bb:84:9b:c6:ae:c8:84:ed:9d:ee:
                    ae:32:21:9e:97:9e:4b:28:90:fc:ad:23:33:e0:a0:
                    44:01:5d:95:14:4d:4c:15:7d:60:9a:4a:9e:ce:ce:
                    c3:5c:b7:e9:fb:26:fb:9a:59:9c:3d:0a:96:96:20:
                    d9:7f:16:3d:91:db:a0:5e:f3:de:ec:f2:23:17:32:
                    6d:c8:b9:f9:8b:92:95:53:f3:f8:c6:32:c8:65:f3:
                    b0:c7:d9:27:a3:ef:90:c8:c4:e6:09:71:6b:38:bf:
                    fa:6f:95:e4:b3:b3:1d:82:93:86:18:4d:0a:19:83:
                    3f:ad:43:53:d1:56:c3:33:a8:56:83:b5:ce:1b:27:
                    47:d2:c7:9f:97:7a:ac:c0:9b:c3:52:07:db:37:a1:
                    1e:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:7C:AF:61:6B:B9:59:80:98:76:76:9B:F4:32:23:02:68:19:9D:96
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136352e3139382e302f32332d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.165.198.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0b:9a:f1:09:55:a2:89:68:9e:c9:00:4b:58:73:25:37:f5:2e:
         ce:a5:f2:5b:49:c3:25:16:2a:7d:f5:2f:57:b2:a1:02:89:ee:
         c3:0f:1c:fd:6c:bf:18:8d:53:b8:dd:45:73:23:92:e0:27:0a:
         59:bb:cf:ab:91:89:e1:4f:e4:f2:68:79:e2:19:bb:ab:79:84:
         d2:dd:12:1e:4d:35:b1:ba:9b:b2:a4:64:e3:af:80:18:ed:97:
         bc:aa:60:92:1d:7d:a9:83:c0:62:5a:c1:df:1f:b3:7f:ff:bd:
         5f:5a:f8:e1:23:7f:22:f1:2c:b4:50:04:73:76:54:1a:75:7b:
         d1:dc:9c:b4:63:f9:10:e1:10:7a:fb:b6:2b:3a:2b:e5:af:7f:
         e6:46:f7:06:c0:a0:fc:e8:13:b9:6d:8e:fc:2d:55:d7:8a:94:
         4a:b0:86:7f:47:33:f3:d9:9e:ff:82:25:9b:b4:07:56:5b:ab:
         50:24:f4:39:57:f2:7f:fd:22:2d:71:1b:8e:4f:99:2c:1c:5a:
         24:92:c2:b5:6c:b3:95:0e:64:08:71:d3:9f:b0:e0:db:33:15:
         3c:05:39:50:f3:67:1d:f7:9e:28:4b:ec:a2:e6:ac:7b:2c:eb:
         a9:dd:8c:cd:e5:81:77:4f:16:af:7f:0e:0f:eb:f0:f8:da:ee:
         79:85:d3:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:45 2024 by rpki-client on console-ams.rpki-client.org