Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136352e3230362e302f32332d3234203d3e203137393935.roa
File:                     3130332e3136352e3230362e302f32332d3234203d3e203137393935.roa (raw, json)
Hash identifier:          TTOPZz7IqbS3wnNFnYzws8SkgpyUQktAv/rfS31PPuo=
Subject key identifier:   EA:4C:CC:DE:51:34:41:33:60:06:43:0F:91:1B:7A:A5:26:A6:72:86
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       73F3B0A093FA5EF92555ECCB0C38C275002BC993
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136352e3230362e302f32332d3234203d3e203137393935.roa
Signing time:             Tue 02 Nov 2021 00:43:14 +0000
ROA not before:           Tue 02 Nov 2021 00:38:14 +0000
ROA not after:            Wed 02 Nov 2022 00:43:14 +0000
asID:                     17995
IP address blocks:        103.165.206.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:f3:b0:a0:93:fa:5e:f9:25:55:ec:cb:0c:38:c2:75:00:2b:c9:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov  2 00:38:14 2021 GMT
            Not After : Nov  2 00:43:14 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:f9:31:53:0c:f5:29:28:2b:95:8f:c5:1f:8a:
                    62:3f:c6:43:ef:ee:c5:11:bf:7b:82:b5:c2:c0:cd:
                    1a:89:74:74:78:a4:89:fc:ca:b5:76:58:67:53:8e:
                    54:02:86:d6:17:53:06:91:4b:ba:78:2d:ef:a9:d2:
                    98:f5:5b:c5:a2:a7:1d:ec:d9:86:34:4a:98:f2:f9:
                    0f:f1:10:dc:03:5f:57:85:a9:42:bc:2a:71:5b:67:
                    8e:4f:4a:ca:d2:97:41:4a:24:e3:be:01:74:de:82:
                    88:8c:cc:20:a3:22:cc:2c:de:14:de:8e:17:b4:ca:
                    28:31:b6:ca:fc:49:5a:eb:88:f7:e7:f3:dc:68:c0:
                    cc:e0:ee:a4:05:30:b3:01:a5:79:51:30:29:a9:a4:
                    4e:3f:49:35:b8:78:dc:b0:6b:61:17:05:e7:6c:9f:
                    21:4d:8a:fe:79:b1:72:68:ed:cb:25:b8:dc:98:64:
                    ed:ac:4e:04:69:8b:5d:60:01:66:f9:fd:15:31:0a:
                    35:ba:47:f8:73:4a:ac:68:cf:1f:34:b8:01:45:d7:
                    ee:af:17:42:a1:5c:4b:ea:0f:03:30:01:20:fc:7f:
                    c1:20:e3:7f:93:0e:be:76:eb:5e:3f:1a:87:68:f8:
                    ae:69:98:2d:65:8c:d8:b0:aa:8a:02:93:98:65:96:
                    da:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:4C:CC:DE:51:34:41:33:60:06:43:0F:91:1B:7A:A5:26:A6:72:86
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136352e3230362e302f32332d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.165.206.0/23

    Signature Algorithm: sha256WithRSAEncryption
         25:6a:29:ad:f1:42:aa:5c:d2:57:2f:5c:d5:4c:9e:7d:29:9b:
         1d:ab:11:a5:f1:9b:0f:52:ab:ae:48:3e:a5:44:bb:c7:17:6e:
         41:68:de:bf:3c:2d:42:24:ab:94:0b:1e:34:f9:77:cf:88:38:
         fb:d0:53:78:d9:57:22:1e:9a:23:b0:34:27:e6:05:c9:fc:2c:
         10:83:e5:5d:72:66:bf:59:8b:7b:3b:31:eb:a4:d0:0d:85:d2:
         fa:e0:d5:7c:d0:13:24:ca:2d:bb:2a:a2:95:03:0a:02:52:96:
         49:d0:78:a5:41:15:56:7f:29:38:5c:1a:d4:1e:fc:2b:21:ef:
         15:c6:eb:f5:a9:c4:64:92:ab:41:4d:17:e0:07:fa:50:d4:cf:
         2a:17:db:a3:73:af:42:75:0a:49:4a:64:7b:62:9c:c2:5e:7f:
         cc:73:dc:a9:5e:42:b3:2c:a1:0a:84:dd:43:b0:7b:76:6f:5d:
         f8:80:03:ba:a8:6d:f2:1e:82:d5:0b:4b:18:12:6d:53:f3:2c:
         9c:01:d4:f7:4f:c5:ad:2c:f3:d1:4a:05:fc:61:05:aa:9c:0a:
         2c:b4:27:6d:75:b7:be:a6:32:f6:b7:85:10:63:15:02:1e:f4:
         14:11:d5:54:5e:d6:95:b6:f4:1c:12:a1:d0:bc:70:fa:3e:f7:
         10:a4:b7:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:45 2024 by rpki-client on console-ams.rpki-client.org