Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136352e3231322e302f32332d3234203d3e203137393935.roa
File:                     3130332e3136352e3231322e302f32332d3234203d3e203137393935.roa (raw, json)
Hash identifier:          ruOJr03A3a2vCJWndzZB3uAOgip/fGGN1ncytztYdf8=
Subject key identifier:   1C:E6:2A:91:B6:6A:1D:6E:5E:0C:0D:4C:E8:DC:82:40:B8:F3:44:7E
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       424440938AA3664AFCBE154F55561272CA46EA7C
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136352e3231322e302f32332d3234203d3e203137393935.roa
Signing time:             Tue 02 Nov 2021 00:43:18 +0000
ROA not before:           Tue 02 Nov 2021 00:38:18 +0000
ROA not after:            Wed 02 Nov 2022 00:43:18 +0000
asID:                     17995
IP address blocks:        103.165.212.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:44:40:93:8a:a3:66:4a:fc:be:15:4f:55:56:12:72:ca:46:ea:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov  2 00:38:18 2021 GMT
            Not After : Nov  2 00:43:18 2022 GMT
        Subject: CN=3082010A0282010100E6D6E94954784C7C4C2D6364B1B2996734F62BB719B2508B6DCF9B7935F48D055F501FE86F1361C7DFBD80D9D1FE0AE3CE83F92F1AA42E6E92822E120A0AFD90B0CB3D7A1F4715E772C604CA622C58E9F620CEB8B621E74A1914DE3C79D8B0F1D9727BE0B9A4B2DDDBED89A1FD60527329A6061765669E8695FA567153EA7F97F959D57477D15E8613C2335778A27B645EE89D89DE2FC272203D7339BF3DEAEAD3DF92FF1480CD62CB1DE32611BD7E19F93F63804B544BDDDD1B6A179408D80EE0634FDC22425547599200A8BA80059BEB2C8D3660C41AE11424CDEE8E82E3FD12356B69FD985A6AEA7CED2D1DF45A4115CEE4CEB8353260085CBAEBD6E47B690203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:d6:e9:49:54:78:4c:7c:4c:2d:63:64:b1:b2:
                    99:67:34:f6:2b:b7:19:b2:50:8b:6d:cf:9b:79:35:
                    f4:8d:05:5f:50:1f:e8:6f:13:61:c7:df:bd:80:d9:
                    d1:fe:0a:e3:ce:83:f9:2f:1a:a4:2e:6e:92:82:2e:
                    12:0a:0a:fd:90:b0:cb:3d:7a:1f:47:15:e7:72:c6:
                    04:ca:62:2c:58:e9:f6:20:ce:b8:b6:21:e7:4a:19:
                    14:de:3c:79:d8:b0:f1:d9:72:7b:e0:b9:a4:b2:dd:
                    db:ed:89:a1:fd:60:52:73:29:a6:06:17:65:66:9e:
                    86:95:fa:56:71:53:ea:7f:97:f9:59:d5:74:77:d1:
                    5e:86:13:c2:33:57:78:a2:7b:64:5e:e8:9d:89:de:
                    2f:c2:72:20:3d:73:39:bf:3d:ea:ea:d3:df:92:ff:
                    14:80:cd:62:cb:1d:e3:26:11:bd:7e:19:f9:3f:63:
                    80:4b:54:4b:dd:dd:1b:6a:17:94:08:d8:0e:e0:63:
                    4f:dc:22:42:55:47:59:92:00:a8:ba:80:05:9b:eb:
                    2c:8d:36:60:c4:1a:e1:14:24:cd:ee:8e:82:e3:fd:
                    12:35:6b:69:fd:98:5a:6a:ea:7c:ed:2d:1d:f4:5a:
                    41:15:ce:e4:ce:b8:35:32:60:08:5c:ba:eb:d6:e4:
                    7b:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:E6:2A:91:B6:6A:1D:6E:5E:0C:0D:4C:E8:DC:82:40:B8:F3:44:7E
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136352e3231322e302f32332d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.165.212.0/23

    Signature Algorithm: sha256WithRSAEncryption
         71:d9:4b:cd:63:c5:7d:25:ac:5c:c2:d2:6b:06:7b:07:98:a3:
         97:ca:86:bd:dc:40:9f:bd:90:68:b9:ea:85:f6:0d:95:ba:c1:
         ad:d4:34:26:90:44:f6:55:ad:9d:3d:2e:51:8e:07:a1:8d:de:
         a2:5d:69:34:60:37:c9:33:9b:f3:42:b0:20:33:6c:66:25:34:
         b0:32:66:f8:1b:4d:2f:61:98:6f:37:75:a7:24:ff:ea:88:2d:
         61:f7:d8:30:13:4b:6a:9f:99:e9:13:dd:2e:a4:4a:39:07:ce:
         9f:08:fb:46:d5:10:fe:82:b6:38:f2:78:27:d4:21:59:3b:64:
         51:39:f2:4a:f4:03:58:31:62:24:cf:f1:97:f9:ba:75:b4:7c:
         87:af:d8:7c:0b:9e:b4:5c:c1:23:db:15:f2:3b:d5:a9:e5:01:
         ed:e0:f3:a9:7f:8d:6b:7b:d5:0c:25:68:44:83:98:2d:76:ef:
         f0:c6:2e:b2:2b:e9:43:c7:e6:8f:1a:76:b9:1b:e4:ef:ab:3b:
         fe:79:e0:c4:3f:bb:c3:da:a3:14:92:28:a0:64:b8:76:e6:ae:
         37:da:a8:c2:88:d8:fb:27:9d:c4:54:d7:e3:47:81:a1:22:0b:
         5d:c8:a7:c0:47:93:9e:95:d0:d7:b4:99:79:99:b6:f0:63:e2:
         24:db:11:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:45 2024 by rpki-client on console-ams.rpki-client.org