Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136352e3233302e302f32332d3234203d3e203137393935.roa
File:                     3130332e3136352e3233302e302f32332d3234203d3e203137393935.roa (raw, json)
Hash identifier:          jfErwUHdyyJ6E9dMKJk9tvKQDMXBo1NERpe6O2Im+4Q=
Subject key identifier:   2C:8B:D9:76:3D:F8:05:04:0E:04:68:C2:79:5C:21:E5:5A:2F:D6:10
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       563A3FFE818FA37A22B0411CE1441F78CFF22A17
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136352e3233302e302f32332d3234203d3e203137393935.roa
Signing time:             Tue 02 Nov 2021 00:43:20 +0000
ROA not before:           Tue 02 Nov 2021 00:38:20 +0000
ROA not after:            Wed 02 Nov 2022 00:43:20 +0000
asID:                     17995
IP address blocks:        103.165.230.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:3a:3f:fe:81:8f:a3:7a:22:b0:41:1c:e1:44:1f:78:cf:f2:2a:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov  2 00:38:20 2021 GMT
            Not After : Nov  2 00:43:20 2022 GMT
        Subject: CN=3082010A0282010100CFC8C4CCEBBE7341376898844131E259B77226229EBB8C515F66871D84AFEFACEEAEFC343CADD84BAFC21B54EB201676BBEF2B461ACFB1273AB9303354A0C13C1F6FCC109AEABA6C8BEB6E3BC1617ACB286E1F7EFCD002E8EA1943159863A5162AE6B7EFDED5E7971C4F35BF20E27E4CB249EBB7CA6468B716846655DF822EB4DDF4DF4E09671CD9302E6C5C74870F373CDB31D01943B8D4285CCA363841E90E8B1D9EB13DC5CD3511BB57B2DAB55331F7DD608DBBCC4A91E5EA3F0878DBF7BA4CF4D084ED87DAE11E859F5ABF11F73A92842181937C164F4E02D517A26CF9181AB2917A90A1E29A45AB00E7D51CCE96680E6CA6BA3406E331797573A14FAEA50203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:c8:c4:cc:eb:be:73:41:37:68:98:84:41:31:
                    e2:59:b7:72:26:22:9e:bb:8c:51:5f:66:87:1d:84:
                    af:ef:ac:ee:ae:fc:34:3c:ad:d8:4b:af:c2:1b:54:
                    eb:20:16:76:bb:ef:2b:46:1a:cf:b1:27:3a:b9:30:
                    33:54:a0:c1:3c:1f:6f:cc:10:9a:ea:ba:6c:8b:eb:
                    6e:3b:c1:61:7a:cb:28:6e:1f:7e:fc:d0:02:e8:ea:
                    19:43:15:98:63:a5:16:2a:e6:b7:ef:de:d5:e7:97:
                    1c:4f:35:bf:20:e2:7e:4c:b2:49:eb:b7:ca:64:68:
                    b7:16:84:66:55:df:82:2e:b4:dd:f4:df:4e:09:67:
                    1c:d9:30:2e:6c:5c:74:87:0f:37:3c:db:31:d0:19:
                    43:b8:d4:28:5c:ca:36:38:41:e9:0e:8b:1d:9e:b1:
                    3d:c5:cd:35:11:bb:57:b2:da:b5:53:31:f7:dd:60:
                    8d:bb:cc:4a:91:e5:ea:3f:08:78:db:f7:ba:4c:f4:
                    d0:84:ed:87:da:e1:1e:85:9f:5a:bf:11:f7:3a:92:
                    84:21:81:93:7c:16:4f:4e:02:d5:17:a2:6c:f9:18:
                    1a:b2:91:7a:90:a1:e2:9a:45:ab:00:e7:d5:1c:ce:
                    96:68:0e:6c:a6:ba:34:06:e3:31:79:75:73:a1:4f:
                    ae:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:8B:D9:76:3D:F8:05:04:0E:04:68:C2:79:5C:21:E5:5A:2F:D6:10
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136352e3233302e302f32332d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.165.230.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5f:19:70:73:e7:be:58:09:e9:f3:6e:b7:ff:ff:90:49:de:9f:
         8b:b0:58:3c:1f:bc:8a:59:99:42:4f:b4:f8:40:14:3a:bf:23:
         f1:b7:15:da:ba:0a:4e:73:8f:12:27:98:fe:fb:d8:a6:5a:81:
         2b:3d:93:10:84:9f:37:ed:ee:ca:cd:f5:ec:97:45:0c:2b:e1:
         c1:dd:b1:50:62:38:72:f2:e0:44:d2:9c:32:33:9a:70:85:42:
         08:f5:a8:0f:40:0a:91:c0:91:e2:1a:40:49:82:bb:eb:e1:be:
         da:76:44:44:26:1b:d0:66:a7:84:13:3f:64:6c:dd:5c:9b:d8:
         d7:a9:24:6b:20:68:29:f9:b2:ca:47:98:e6:1f:ff:f3:08:f7:
         8b:35:af:d4:08:08:66:d3:34:2a:75:5e:bf:bb:e3:b3:96:f6:
         7b:55:7b:fa:7e:b5:f3:9a:79:1b:c8:b9:55:4e:2a:e8:4e:24:
         2e:3a:b8:03:7a:e0:d1:6b:05:09:c6:88:c9:29:a1:c5:71:a3:
         cd:8f:1f:6c:a3:04:7c:16:b0:82:16:24:1e:69:76:c3:ce:17:
         6f:a2:e2:d7:8f:16:1d:ec:f8:90:1e:4c:6c:73:d8:96:c6:72:
         e6:ef:bc:9d:aa:70:36:ce:97:2b:88:40:61:25:40:05:ae:bf:
         b5:7c:c9:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:10 2024 by rpki-client on console-fra.rpki-client.org