Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136352e3230302e302f32332d3234203d3e203137393935.roa
File:                     3130332e3136352e3230302e302f32332d3234203d3e203137393935.roa (raw, json)
Hash identifier:          yJV+uFrUSMIqhIAoU+ZA1Dq2Xz/NFobbgbRjRtMgycA=
Subject key identifier:   97:EB:1B:AB:3E:EA:F4:46:04:8E:2B:FC:ED:71:8F:91:3B:F0:6F:8C
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       38A2B7900B82BC972FD86DEE413A189B8FAEEF2F
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136352e3230302e302f32332d3234203d3e203137393935.roa
Signing time:             Tue 02 Nov 2021 00:43:13 +0000
ROA not before:           Tue 02 Nov 2021 00:38:13 +0000
ROA not after:            Wed 02 Nov 2022 00:43:13 +0000
asID:                     17995
IP address blocks:        103.165.200.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:a2:b7:90:0b:82:bc:97:2f:d8:6d:ee:41:3a:18:9b:8f:ae:ef:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov  2 00:38:13 2021 GMT
            Not After : Nov  2 00:43:13 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:3c:ea:62:2d:11:1f:18:23:79:28:8f:ef:f2:
                    72:53:95:7b:4f:d2:28:44:32:f3:58:be:0c:c0:7b:
                    54:7b:25:31:ee:35:6f:0b:8a:52:8c:80:73:12:4a:
                    be:21:0b:d0:7c:e0:d3:84:f7:3f:4f:04:70:7e:2d:
                    e7:74:72:10:74:d7:24:fd:68:1e:80:58:8d:10:97:
                    ee:1a:7f:b3:2e:de:79:c9:c5:6c:ef:9e:42:ad:75:
                    14:d4:3b:fd:dc:a5:bc:4e:f4:a4:6e:0b:0b:20:9a:
                    64:12:c6:44:64:cd:8a:70:e0:91:af:6c:a8:e8:3b:
                    7f:de:98:70:e1:61:f9:b2:c6:39:ef:7e:75:e6:b0:
                    4a:19:6b:6c:f9:69:44:9f:fc:15:2b:3e:89:6b:2b:
                    89:68:ec:8e:08:08:98:ab:31:af:95:89:c0:dc:24:
                    b3:5b:6c:6f:03:55:32:16:49:3d:86:1b:f7:04:1d:
                    23:f8:93:f5:1d:35:cb:13:a8:8d:90:46:25:c8:40:
                    69:bc:c0:dd:f5:96:22:07:b8:18:a7:90:53:57:04:
                    f6:67:bf:f7:05:e8:19:76:ca:f6:bc:6a:88:46:a0:
                    12:c1:67:f5:1c:c3:c2:dc:c3:60:03:f0:ad:98:f6:
                    ed:9c:b0:e4:d9:ab:57:8b:46:dc:a1:68:39:09:53:
                    bb:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:EB:1B:AB:3E:EA:F4:46:04:8E:2B:FC:ED:71:8F:91:3B:F0:6F:8C
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136352e3230302e302f32332d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.165.200.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3b:8f:74:8f:6d:8f:e7:d0:83:d5:d6:62:a4:46:d8:68:99:00:
         f7:b6:26:51:5b:28:79:14:d1:80:be:17:04:25:61:f6:c5:2c:
         d3:ad:00:c5:9a:5c:ee:22:a6:95:6c:1c:e8:16:46:3e:e7:41:
         de:de:75:fc:ee:46:06:43:32:13:80:33:f6:c5:b3:5e:d3:24:
         b5:1b:fc:67:ab:c8:c8:e0:53:30:5e:b9:a8:f8:2c:cc:a6:0a:
         e5:e9:57:e5:ba:e4:59:a7:67:ba:b2:e0:8e:c9:e0:46:09:cf:
         dc:69:f1:92:a9:0d:86:9c:29:b1:97:44:28:7e:aa:26:53:d0:
         6e:1a:74:73:21:56:6c:30:7a:77:a4:17:ce:dd:07:15:8f:28:
         aa:e8:c0:d3:f5:cd:53:3e:f4:5a:2e:0b:f9:47:e9:73:5c:79:
         0b:e8:6e:12:f9:15:cc:9a:5d:18:f2:e8:2b:fb:74:fb:39:2a:
         1e:9f:82:34:7a:0c:15:53:39:e7:1e:f0:3c:0c:c5:54:7f:50:
         6b:ca:40:39:a0:a3:c8:a4:4e:41:a7:c2:a4:95:9f:7b:cd:7c:
         41:38:83:66:5e:79:a8:75:72:cb:44:2f:7e:c0:01:c1:5a:ac:
         30:c5:79:46:16:2f:61:14:66:23:10:cb:30:ef:a7:2c:a5:7c:
         79:4d:56:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:45 2024 by rpki-client on console-ams.rpki-client.org