Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136352e3233382e302f32332d3234203d3e203137393935.roa
File:                     3130332e3136352e3233382e302f32332d3234203d3e203137393935.roa (raw, json)
Hash identifier:          iP5HU+igoWHxR0bWSog29HAb05sIg866ueKzCcFqQdE=
Subject key identifier:   97:8D:DE:7B:29:D4:45:D4:07:DC:5D:F8:8A:F0:34:E0:02:F8:1B:8C
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       037F6B034B66C08A10BAC7A3EB5F10CC461E9F79
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136352e3233382e302f32332d3234203d3e203137393935.roa
Signing time:             Tue 02 Nov 2021 00:43:17 +0000
ROA not before:           Tue 02 Nov 2021 00:38:17 +0000
ROA not after:            Wed 02 Nov 2022 00:43:17 +0000
asID:                     17995
IP address blocks:        103.165.238.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:7f:6b:03:4b:66:c0:8a:10:ba:c7:a3:eb:5f:10:cc:46:1e:9f:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov  2 00:38:17 2021 GMT
            Not After : Nov  2 00:43:17 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:8a:55:b9:17:22:16:d0:5c:27:5b:4c:9c:bc:
                    99:32:99:6e:ce:25:88:e4:d1:87:1a:12:eb:17:45:
                    7f:5f:e2:08:40:e1:d6:87:b7:92:a1:eb:71:48:12:
                    05:f5:4e:2b:1e:7b:21:43:21:28:cb:23:47:81:b8:
                    7d:16:0a:88:d9:2f:b5:92:4e:9f:16:71:6e:59:46:
                    af:e8:07:0d:0f:c4:82:ff:3e:4f:2e:5a:8b:7f:32:
                    5d:77:f6:a9:77:d1:4b:df:87:ab:de:62:19:45:b2:
                    24:c3:28:e0:a3:62:25:12:66:ea:d1:e0:95:7a:9c:
                    ff:68:64:9b:da:3d:14:2b:a9:39:8a:8e:de:9b:e0:
                    a7:9b:58:f5:bc:67:63:07:f6:04:5e:d7:2c:30:6a:
                    a5:87:9f:b6:99:09:cb:c3:22:b5:22:47:76:1d:4f:
                    75:80:bd:ca:b4:72:e1:74:6c:17:7b:1d:3d:96:61:
                    1e:12:52:05:76:51:91:ab:88:11:44:3a:a7:6e:55:
                    d5:7b:1b:2d:f4:3b:cf:6b:e5:72:cd:da:0e:d3:f2:
                    19:c0:a0:08:be:95:29:ad:73:19:37:4e:a6:50:10:
                    25:d2:0a:d4:4a:22:c7:6b:d1:52:0e:a5:f1:9f:5c:
                    90:0d:ba:65:06:e7:a8:69:18:5e:47:48:8f:9e:88:
                    68:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:8D:DE:7B:29:D4:45:D4:07:DC:5D:F8:8A:F0:34:E0:02:F8:1B:8C
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136352e3233382e302f32332d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.165.238.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5e:e8:ad:ad:3f:93:34:1a:f1:e6:b2:bd:a5:dc:d9:12:81:63:
         f2:f2:74:11:b1:f7:03:0a:62:cb:39:31:7e:22:16:e3:b7:e6:
         fb:f5:bd:8f:90:82:1f:b5:10:7f:9e:68:6b:52:39:8e:4d:7f:
         f7:53:9a:f7:2e:b6:67:60:0c:af:40:3c:b3:f7:da:03:fa:f0:
         3a:3c:fd:99:82:56:7e:05:c0:66:1d:c3:7b:11:3d:54:3c:cc:
         90:85:ba:d1:85:55:64:0f:39:ff:4d:13:01:17:f9:6c:de:f2:
         e3:b6:7c:1e:29:a5:08:27:88:97:8c:5e:8c:37:5f:9d:b4:41:
         fc:0a:f8:62:10:fd:cc:1b:a6:a4:34:ed:63:ba:57:93:21:db:
         4c:70:4a:ba:fb:80:be:7f:3b:45:bf:a5:03:8d:58:23:34:9b:
         bc:b0:b7:ad:2a:68:f6:c2:3b:28:c7:6e:d2:e2:95:28:29:75:
         fc:6c:f9:0b:73:96:f7:5c:88:48:c6:25:05:4a:db:47:8f:31:
         30:49:a7:a3:74:66:4f:2c:d1:18:07:73:56:50:44:51:81:63:
         a9:f1:4a:5a:85:5a:e8:9d:18:00:a5:15:c4:ab:80:92:17:95:
         fd:b9:cc:2e:c8:f1:f1:67:32:3b:ab:57:78:bc:6d:88:e8:58:
         0d:bf:06:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:45 2024 by rpki-client on console-ams.rpki-client.org