Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136352e3233362e302f32332d3234203d3e203137393935.roa
File:                     3130332e3136352e3233362e302f32332d3234203d3e203137393935.roa (raw, json)
Hash identifier:          rUj8KLD2dSZvckER06f/ytRwJhBsxe5dY8g2fEaGfkc=
Subject key identifier:   B2:1B:7D:8F:4A:9F:C4:FE:AB:28:01:82:99:CA:0C:EC:2E:63:C2:BC
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       2BE50947BE392B6B172D76F7D4EB5CC4EB0C9D43
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136352e3233362e302f32332d3234203d3e203137393935.roa
Signing time:             Tue 02 Nov 2021 00:43:20 +0000
ROA not before:           Tue 02 Nov 2021 00:38:20 +0000
ROA not after:            Wed 02 Nov 2022 00:43:20 +0000
asID:                     17995
IP address blocks:        103.165.236.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:e5:09:47:be:39:2b:6b:17:2d:76:f7:d4:eb:5c:c4:eb:0c:9d:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov  2 00:38:20 2021 GMT
            Not After : Nov  2 00:43:20 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:78:b4:8b:f3:9c:00:cb:dd:43:53:3c:f5:62:
                    e9:06:35:7b:1c:9a:43:cc:b7:b3:10:07:cf:a6:d4:
                    c9:6b:86:f2:47:b8:98:ba:8c:f5:73:98:1d:b3:70:
                    a9:28:ee:13:f4:d1:d6:a0:40:3f:79:9d:3b:ae:15:
                    45:cb:41:bf:f5:ca:d1:c2:d5:a7:7e:f8:52:74:74:
                    ab:9b:f3:78:8c:2a:3e:7b:f5:90:a8:25:6c:a3:8e:
                    4b:37:13:7f:b9:07:76:81:5f:28:cb:be:91:12:21:
                    26:84:52:40:62:29:a7:91:2c:04:00:e2:24:e5:ad:
                    ef:48:b3:08:88:11:47:f2:2d:0f:7a:0b:5a:17:d7:
                    c6:f0:a2:ca:65:77:ae:2d:31:f6:8f:4d:48:f4:e2:
                    58:82:e9:03:b2:4f:9a:f6:6e:57:5e:cb:da:6d:b0:
                    bf:ca:d7:b9:a1:a5:28:de:c5:e6:eb:11:bf:62:9e:
                    34:18:9c:0b:18:35:96:50:9b:65:60:51:b4:19:b0:
                    ce:da:79:0a:97:d4:43:ab:e3:ad:d2:ee:e1:a5:e2:
                    9d:d9:17:cd:10:aa:c0:37:ec:6b:67:8c:3e:8f:62:
                    9d:31:9e:b3:5a:15:a3:9b:7b:97:15:af:8b:88:44:
                    72:f7:3c:91:d6:85:0a:ba:58:b1:c9:38:f9:f6:94:
                    b4:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:1B:7D:8F:4A:9F:C4:FE:AB:28:01:82:99:CA:0C:EC:2E:63:C2:BC
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136352e3233362e302f32332d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.165.236.0/23

    Signature Algorithm: sha256WithRSAEncryption
         40:f5:60:90:42:82:43:90:ac:1b:5a:d3:f3:dc:ea:f9:ca:d9:
         d9:a0:c2:5a:74:3e:55:22:8c:02:e0:0a:2f:08:49:6c:f1:77:
         25:be:9e:23:5f:26:3e:34:ee:43:11:52:59:e0:c0:60:6a:2f:
         05:d1:08:36:4f:28:69:a3:ec:07:e4:71:48:cd:91:fe:af:97:
         5b:fb:1b:09:c7:72:f6:14:a1:43:21:fc:88:a8:da:cf:6f:fe:
         a7:b1:f5:be:ac:ad:d0:a3:61:2b:e9:d1:dd:0b:5e:dc:4e:0b:
         42:8c:7b:4d:bb:83:7e:8a:ae:aa:f9:15:42:ab:62:18:da:c1:
         99:08:f0:a6:da:b8:b2:92:7b:b0:ce:09:81:a6:ed:ff:a5:c0:
         fa:a6:e4:92:33:ba:05:97:53:31:c7:24:a3:5e:28:0e:6c:d6:
         24:45:1f:55:a4:b2:2f:77:a6:58:36:dd:3f:42:21:6e:ef:17:
         71:30:4b:e0:de:ba:e6:5b:d3:e0:88:46:95:f9:60:35:a2:33:
         3d:98:87:09:cb:8b:59:01:00:5e:81:1a:64:4d:a0:5e:e1:9b:
         c2:eb:db:b4:f0:4a:76:47:c0:2e:6c:5c:e9:9c:6c:77:a6:90:
         2c:3c:af:f9:98:44:b7:79:04:6c:67:f5:d2:0b:d5:9b:a0:2f:
         ea:d1:8f:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:45 2024 by rpki-client on console-ams.rpki-client.org