Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136352e3230322e302f32332d3234203d3e203137393935.roa
File:                     3130332e3136352e3230322e302f32332d3234203d3e203137393935.roa (raw, json)
Hash identifier:          IUL6r9ch1TaJqeDAhypjqOkQgZVdWH9B5PvoDqM71A0=
Subject key identifier:   A3:3F:CB:FC:9A:33:3F:EF:80:58:8A:5B:DF:6A:B7:86:5A:4F:87:AD
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       257DDC8BAB3CAFFC4BC874732E9B19C24CE2ECFF
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136352e3230322e302f32332d3234203d3e203137393935.roa
Signing time:             Tue 02 Nov 2021 00:43:19 +0000
ROA not before:           Tue 02 Nov 2021 00:38:19 +0000
ROA not after:            Wed 02 Nov 2022 00:43:19 +0000
asID:                     17995
IP address blocks:        103.165.202.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:7d:dc:8b:ab:3c:af:fc:4b:c8:74:73:2e:9b:19:c2:4c:e2:ec:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov  2 00:38:19 2021 GMT
            Not After : Nov  2 00:43:19 2022 GMT
        Subject: CN=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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:99:b1:3e:f2:54:05:5a:70:af:56:d7:ad:40:
                    c5:b8:15:15:3f:d7:64:c5:ae:44:38:fe:37:5b:de:
                    39:7d:d5:c2:92:59:59:0d:d0:4f:cf:5d:cd:2c:34:
                    34:0c:b8:79:ef:5b:01:d2:e5:e4:8d:d8:c3:4c:20:
                    fd:0f:11:75:88:72:76:57:5e:d5:cc:22:33:6b:fa:
                    0e:0a:e1:06:c6:8c:c6:47:d1:6a:bc:a0:44:b7:f6:
                    2d:fb:01:4f:49:1c:3b:ec:a4:cf:ef:90:5f:8b:d7:
                    2d:f5:ea:72:bc:04:4b:59:75:01:a1:af:5b:95:c2:
                    ef:85:ef:7b:38:bd:91:41:67:0c:bf:d3:86:fb:8d:
                    13:df:06:27:05:54:16:48:d9:04:eb:4c:d5:56:10:
                    5c:6c:bb:c1:0a:69:cb:70:0e:9f:a1:ed:c4:d6:6e:
                    b4:05:6c:5e:d1:93:07:1e:c2:b0:1b:51:d9:8f:a2:
                    f6:1f:96:50:b0:5a:f5:2e:7c:b8:78:f0:15:ae:0f:
                    de:6b:41:5c:df:e3:79:82:3e:e3:0b:b0:df:4c:fa:
                    ec:e3:ec:46:93:6d:df:6f:e6:f2:fe:73:57:98:69:
                    c5:5b:20:a6:9a:46:1e:5f:e4:03:87:ee:a1:81:ba:
                    1e:c5:e6:08:29:54:78:94:4e:5c:f5:54:ae:41:30:
                    69:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:3F:CB:FC:9A:33:3F:EF:80:58:8A:5B:DF:6A:B7:86:5A:4F:87:AD
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136352e3230322e302f32332d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.165.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         23:d4:2a:2c:65:a5:71:97:84:be:87:3a:6f:d3:c4:50:32:c3:
         b7:ef:62:11:8a:51:88:4f:32:7b:ef:0d:4f:ec:a4:c8:72:83:
         39:66:f1:d3:95:e2:47:85:29:d7:91:46:b8:03:d9:7b:70:37:
         51:62:87:e9:32:b5:0c:c1:f7:c9:10:09:ae:e8:95:e4:50:8f:
         be:3e:af:9e:57:47:00:16:41:c4:86:dd:34:f4:3a:55:6e:a7:
         41:91:18:09:37:52:66:72:88:6a:23:62:9c:61:03:db:5e:f2:
         1e:1b:f9:75:aa:b7:d3:54:77:24:99:b2:73:91:3a:3c:8a:39:
         c7:25:bd:58:72:a6:e0:bb:13:6b:ac:58:ae:d4:be:56:75:6c:
         3a:cf:69:db:55:18:fc:ab:31:9c:75:95:b6:d6:8d:d0:d5:8b:
         b4:8c:8d:66:49:ab:71:df:87:eb:aa:f6:d8:f1:eb:c2:31:1c:
         cc:98:f7:71:f1:05:67:ee:03:59:1a:8c:88:3e:cb:d5:8e:d9:
         77:ba:e9:99:87:e9:d0:0c:47:12:76:e9:61:31:93:16:eb:07:
         47:a5:98:12:01:61:b5:cb:b6:5d:d6:df:3e:d5:1d:2a:27:13:
         8e:0f:08:17:36:95:6e:74:bb:0d:ef:e0:42:19:21:b0:b4:89:
         48:e6:9e:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:45 2024 by rpki-client on console-ams.rpki-client.org