Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136352e3232382e302f32332d3234203d3e203137393935.roa
File:                     3130332e3136352e3232382e302f32332d3234203d3e203137393935.roa (raw, json)
Hash identifier:          +gFZe2oxLsfbS9M+di4rAwl3eV2LZ9PNSmlICxqrrRs=
Subject key identifier:   A3:99:DD:4E:17:8B:5E:D4:E8:85:91:2B:CB:E7:2F:F4:5E:10:FD:9F
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       4F73434BA300C15A95F7136AA4EAEAD9027839F2
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136352e3232382e302f32332d3234203d3e203137393935.roa
Signing time:             Tue 02 Nov 2021 00:43:17 +0000
ROA not before:           Tue 02 Nov 2021 00:38:17 +0000
ROA not after:            Wed 02 Nov 2022 00:43:17 +0000
asID:                     17995
IP address blocks:        103.165.228.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:73:43:4b:a3:00:c1:5a:95:f7:13:6a:a4:ea:ea:d9:02:78:39:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov  2 00:38:17 2021 GMT
            Not After : Nov  2 00:43:17 2022 GMT
        Subject: CN=3082010A0282010100CE982BC16DBDD2EEA139DACF4833C516187436ED28DFC2E522ED044271700626A6C85B69DA1CEF4BAD3A89DACB8DCB534B8179B2D32DF03FBDAC7146816589342A7E7E56CF16852B2705A8A2885771711C08904FEB4727F216CE62E2050998C5E90EFE15D3ABF19BCB999D6767FA652167F715C0BA5915425051388C55BCDCD3C3291BAADA319F61462909531A3D3F97028E8BA36C04E002CD740E93BFBF5B04EA1A301837CF6124F58E1CC08D87A3FDAAA523A984340FDD0CBF85389B2C3B968046838BFCD2BAB1B245225D0ED1F2C5DCAA6A832C4D296F74CD077A9D15CEEC3089BD32273F9E2562E72E30E506ED0E1D1C6A11C700D30031F988B3F3F9F4070203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:98:2b:c1:6d:bd:d2:ee:a1:39:da:cf:48:33:
                    c5:16:18:74:36:ed:28:df:c2:e5:22:ed:04:42:71:
                    70:06:26:a6:c8:5b:69:da:1c:ef:4b:ad:3a:89:da:
                    cb:8d:cb:53:4b:81:79:b2:d3:2d:f0:3f:bd:ac:71:
                    46:81:65:89:34:2a:7e:7e:56:cf:16:85:2b:27:05:
                    a8:a2:88:57:71:71:1c:08:90:4f:eb:47:27:f2:16:
                    ce:62:e2:05:09:98:c5:e9:0e:fe:15:d3:ab:f1:9b:
                    cb:99:9d:67:67:fa:65:21:67:f7:15:c0:ba:59:15:
                    42:50:51:38:8c:55:bc:dc:d3:c3:29:1b:aa:da:31:
                    9f:61:46:29:09:53:1a:3d:3f:97:02:8e:8b:a3:6c:
                    04:e0:02:cd:74:0e:93:bf:bf:5b:04:ea:1a:30:18:
                    37:cf:61:24:f5:8e:1c:c0:8d:87:a3:fd:aa:a5:23:
                    a9:84:34:0f:dd:0c:bf:85:38:9b:2c:3b:96:80:46:
                    83:8b:fc:d2:ba:b1:b2:45:22:5d:0e:d1:f2:c5:dc:
                    aa:6a:83:2c:4d:29:6f:74:cd:07:7a:9d:15:ce:ec:
                    30:89:bd:32:27:3f:9e:25:62:e7:2e:30:e5:06:ed:
                    0e:1d:1c:6a:11:c7:00:d3:00:31:f9:88:b3:f3:f9:
                    f4:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:99:DD:4E:17:8B:5E:D4:E8:85:91:2B:CB:E7:2F:F4:5E:10:FD:9F
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136352e3232382e302f32332d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.165.228.0/23

    Signature Algorithm: sha256WithRSAEncryption
         86:3a:c9:59:20:e8:25:56:8d:da:65:9d:36:31:0b:c3:fd:1c:
         50:98:7b:d6:b9:ba:af:93:37:c0:4c:c2:94:05:b7:89:b7:9a:
         37:69:73:c7:a9:23:a8:4b:09:17:c9:6d:55:8f:6f:50:c0:09:
         08:26:a5:ad:6a:e5:1c:7d:10:0f:7c:7a:53:ad:af:45:aa:92:
         6b:d6:38:1e:38:fd:17:15:ae:14:96:e8:f5:0e:55:a8:94:07:
         bf:95:25:6f:2b:6f:5a:0a:97:3f:c8:b4:45:9f:01:b0:5f:48:
         76:b9:3d:5d:22:51:31:ba:52:e9:68:ab:ee:5d:87:31:c2:f6:
         a9:96:ca:cc:84:f8:1b:49:62:88:a1:85:1a:44:27:cd:60:0d:
         4c:60:fa:2c:e8:dc:78:b6:23:f6:a4:2a:ab:e9:f2:58:0c:8c:
         f7:bf:17:50:05:93:f7:49:67:cb:5b:5c:3d:5a:e0:b8:d1:11:
         ae:af:a2:2f:2a:16:15:b1:00:3d:e9:da:7a:e0:ba:ee:23:3f:
         94:3b:a0:b7:fb:09:30:88:4f:bb:89:90:4c:9f:9e:32:dc:50:
         bc:34:ae:d0:aa:2c:57:ca:67:0c:25:65:32:ab:b5:a3:13:ff:
         88:cb:7b:2c:c4:06:6b:d5:49:1b:35:6c:55:c8:59:50:c7:c8:
         ba:06:80:8a
-----BEGIN CERTIFICATE-----
MIIHCjCCBfKgAwIBAgIUT3NDS6MAwVqV9xNqpOrq2QJ4OfIwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIxMTEwMjAwMzgxN1oX
DTIyMTEwMjAwNDMxN1owggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBDRTk4MkJDMTZEQkREMkVFQTEzOURBQ0Y0ODMzQzUxNjE4NzQzNkVEMjhE
RkMyRTUyMkVEMDQ0MjcxNzAwNjI2QTZDODVCNjlEQTFDRUY0QkFEM0E4OURBQ0I4
RENCNTM0QjgxNzlCMkQzMkRGMDNGQkRBQzcxNDY4MTY1ODkzNDJBN0U3RTU2Q0Yx
Njg1MkIyNzA1QThBMjg4NTc3MTcxMUMwODkwNEZFQjQ3MjdGMjE2Q0U2MkUyMDUw
OTk4QzVFOTBFRkUxNUQzQUJGMTlCQ0I5OTlENjc2N0ZBNjUyMTY3RjcxNUMwQkE1
OTE1NDI1MDUxMzg4QzU1QkNEQ0QzQzMyOTFCQUFEQTMxOUY2MTQ2MjkwOTUzMUEz
RDNGOTcwMjhFOEJBMzZDMDRFMDAyQ0Q3NDBFOTNCRkJGNUIwNEVBMUEzMDE4MzdD
RjYxMjRGNThFMUNDMDhEODdBM0ZEQUFBNTIzQTk4NDM0MEZERDBDQkY4NTM4OUIy
QzNCOTY4MDQ2ODM4QkZDRDJCQUIxQjI0NTIyNUQwRUQxRjJDNURDQUE2QTgzMkM0
RDI5NkY3NENEMDc3QTlEMTVDRUVDMzA4OUJEMzIyNzNGOUUyNTYyRTcyRTMwRTUw
NkVEMEUxRDFDNkExMUM3MDBEMzAwMzFGOTg4QjNGM0Y5RjQwNzAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDOmCvBbb3S7qE52s9IM8UW
GHQ27SjfwuUi7QRCcXAGJqbIW2naHO9LrTqJ2suNy1NLgXmy0y3wP72scUaBZYk0
Kn5+Vs8WhSsnBaiiiFdxcRwIkE/rRyfyFs5i4gUJmMXpDv4V06vxm8uZnWdn+mUh
Z/cVwLpZFUJQUTiMVbzc08MpG6raMZ9hRikJUxo9P5cCjoujbATgAs10DpO/v1sE
6howGDfPYST1jhzAjYej/aqlI6mENA/dDL+FOJssO5aARoOL/NK6sbJFIl0O0fLF
3KpqgyxNKW90zQd6nRXO7DCJvTInP54lYucuMOUG7Q4dHGoRxwDTADH5iLPz+fQH
AgMBAAGjggIBMIIB/TAdBgNVHQ4EFgQUo5ndTheLXtTohZEry+cv9F4Q/Z8wHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjCBhAYIKwYB
BQUHAQsEeDB2MHQGCCsGAQUFBzALhmhyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby9JRE5JQy1JRC8yLzMxMzAzMzJlMzEzNjM1MmUzMjMyMzgyZTMwMmYz
MjMzMmQzMjM0MjAzZDNlMjAzMTM3MzkzOTM1LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBZ6XkMA0GCSqG
SIb3DQEBCwUAA4IBAQCGOslZIOglVo3aZZ02MQvD/RxQmHvWubqvkzfATMKUBbeJ
t5o3aXPHqSOoSwkXyW1Vj29QwAkIJqWtauUcfRAPfHpTra9FqpJr1jgeOP0XFa4U
luj1DlWolAe/lSVvK29aCpc/yLRFnwGwX0h2uT1dIlExulLpaKvuXYcxwvaplsrM
hPgbSWKIoYUaRCfNYA1MYPos6Nx4tiP2pCqr6fJYDIz3vxdQBZP3SWfLW1w9WuC4
0RGur6IvKhYVsQA96dp64LruIz+UO6C3+wkwiE+7iZBMn54y3FC8NK7QqixXymcM
JWUyq7WjE/+Iy3ssxAZr1UkbNWxVyFlQx8i6BoCK
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:45 2024 by rpki-client on console-ams.rpki-client.org