Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136352e3232342e302f32332d3234203d3e203137393935.roa
File:                     3130332e3136352e3232342e302f32332d3234203d3e203137393935.roa (raw, json)
Hash identifier:          Cb9ZIslTil1BV0UjNqIhVbYyi5HbMZLMqBRR8fkekFc=
Subject key identifier:   93:03:38:CE:2A:DC:6B:1D:34:05:96:79:6B:B3:51:D5:64:6D:79:1E
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       3793C7770A2A0E25EE4D28647CE18A47BD1DB4E1
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136352e3232342e302f32332d3234203d3e203137393935.roa
Signing time:             Tue 02 Nov 2021 00:43:15 +0000
ROA not before:           Tue 02 Nov 2021 00:38:15 +0000
ROA not after:            Wed 02 Nov 2022 00:43:15 +0000
asID:                     17995
IP address blocks:        103.165.224.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:93:c7:77:0a:2a:0e:25:ee:4d:28:64:7c:e1:8a:47:bd:1d:b4:e1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov  2 00:38:15 2021 GMT
            Not After : Nov  2 00:43:15 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:38:29:8c:d7:50:e8:5d:e8:6b:70:53:8b:69:
                    31:3b:9c:43:9b:44:ed:56:2c:3e:9e:37:92:46:4b:
                    53:0f:31:a6:94:4c:49:c0:56:2d:2c:d8:04:70:8d:
                    e7:8d:f2:56:22:5d:4c:27:8e:3b:f5:eb:12:ea:43:
                    57:f4:e0:21:26:04:d2:22:69:3a:9f:ef:b3:ea:c7:
                    9c:c7:1d:b7:17:77:03:7a:90:38:20:9b:23:3e:08:
                    cb:f9:71:c9:9d:96:d0:bf:98:d5:b1:a9:0e:fb:4b:
                    a5:d8:3a:61:e0:b2:45:46:28:03:33:64:7e:7f:56:
                    48:a4:f9:e9:8a:13:0b:ea:14:e6:da:c1:25:eb:c5:
                    26:d4:16:22:86:b4:0b:64:a6:33:b3:af:eb:48:02:
                    3b:57:f7:18:8a:70:73:27:f1:0b:57:0a:90:7d:b9:
                    8a:15:8d:7a:e5:4d:67:ac:82:db:59:f1:3b:73:5d:
                    79:b1:cc:ea:a8:48:fd:a7:da:ab:8a:08:72:ac:6e:
                    b6:b9:b1:11:5f:e0:57:eb:cb:8d:8d:a1:ce:22:b8:
                    1f:73:95:52:be:ce:41:99:87:7b:e5:46:80:7f:30:
                    d8:b4:03:75:f0:04:9b:b6:d4:10:cb:43:db:40:50:
                    48:e6:cf:72:14:a7:9f:2f:ea:05:a7:50:14:37:b2:
                    37:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:03:38:CE:2A:DC:6B:1D:34:05:96:79:6B:B3:51:D5:64:6D:79:1E
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136352e3232342e302f32332d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.165.224.0/23

    Signature Algorithm: sha256WithRSAEncryption
         03:4e:19:4c:26:10:f2:b9:5c:4a:c7:d6:f7:3c:ef:3f:23:2e:
         ac:28:00:25:1b:2a:0b:00:70:1a:19:ed:0c:eb:c9:dc:6f:6b:
         a5:e1:61:9e:14:12:1a:db:86:52:b5:2e:52:25:f1:94:bf:48:
         3b:f1:65:bb:93:be:1b:15:8b:00:1b:a7:72:ae:81:a3:5f:9b:
         70:93:ae:45:dc:8b:25:ba:bb:9a:18:e4:27:df:19:99:83:54:
         26:0b:32:7c:0b:52:06:4e:d8:5e:a3:12:0d:ae:e7:10:f2:d4:
         7b:56:a2:4b:f3:fd:12:e3:bc:01:6f:49:74:91:c1:ac:55:c9:
         8b:97:29:db:36:f2:f0:36:1d:1d:29:04:6c:09:ec:b5:06:8a:
         64:c7:c2:de:e6:7c:de:e4:05:54:46:37:c6:f8:ba:46:73:46:
         82:e9:06:55:5a:09:69:cb:2c:ae:12:96:c2:9b:fb:18:76:a3:
         cb:f2:79:3c:f0:72:0a:1a:b3:12:a0:95:a1:9f:62:5a:f0:c6:
         c4:0e:07:be:04:77:21:75:43:48:74:34:43:0c:9a:ea:9a:9e:
         7c:04:8c:74:6a:e3:21:a8:7e:ce:2c:15:37:09:33:a5:74:31:
         73:19:21:4c:26:db:65:e9:6f:76:76:97:47:b7:3d:7f:70:db:
         07:69:5d:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:10 2024 by rpki-client on console-fra.rpki-client.org