Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136352e33322e302f32332d3234203d3e203137393935.roa
File:                     3130332e3136352e33322e302f32332d3234203d3e203137393935.roa (raw, json)
Hash identifier:          Tr7wMdgxTY8YRXi5hgSkp8AzEbb3CL48W6qsu4ze27U=
Subject key identifier:   AE:67:D2:C0:71:61:39:E9:9B:2B:10:D2:61:25:8E:EE:78:80:8D:B8
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       1F2E8418203E0458CA832A60DD0A98E28C1D294D
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136352e33322e302f32332d3234203d3e203137393935.roa
Signing time:             Tue 02 Nov 2021 00:43:14 +0000
ROA not before:           Tue 02 Nov 2021 00:38:14 +0000
ROA not after:            Wed 02 Nov 2022 00:43:14 +0000
asID:                     17995
IP address blocks:        103.165.32.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:2e:84:18:20:3e:04:58:ca:83:2a:60:dd:0a:98:e2:8c:1d:29:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov  2 00:38:14 2021 GMT
            Not After : Nov  2 00:43:14 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:f5:94:1d:f4:b7:84:79:55:a5:11:d7:82:39:
                    e0:4c:31:37:c6:46:27:0e:81:39:eb:56:fb:ec:0a:
                    71:0e:d4:37:40:9a:48:d9:30:b5:14:15:fe:d4:28:
                    51:c2:09:b6:c2:cf:3f:e2:78:6f:ae:e7:dc:f1:2c:
                    69:ec:f8:35:52:37:1a:8f:d2:ce:ed:3b:cb:9e:2b:
                    64:c0:8f:a2:80:0f:c6:30:a2:10:eb:d0:70:7e:39:
                    a6:5e:bc:90:65:63:70:2f:95:61:2d:ac:cf:bc:6b:
                    23:6f:1e:b4:b8:34:bd:1f:a3:f5:74:61:c4:7e:62:
                    b8:aa:21:2e:51:09:a7:08:4d:d5:2a:6d:e1:0c:fe:
                    9a:4c:e0:2c:59:72:21:05:7b:68:97:c6:6a:67:cc:
                    0a:25:d2:ca:16:53:b4:b0:e3:d5:42:2c:73:38:28:
                    f2:ea:04:68:fb:0e:f6:1b:20:21:25:ba:7b:3d:e4:
                    c5:14:85:6f:06:7d:5c:c0:b9:ba:0b:da:ca:4a:d3:
                    37:11:17:9a:6a:e2:3b:14:00:f3:7f:59:37:f7:f0:
                    dd:42:84:d8:68:d3:34:c5:6a:b5:fa:67:0f:0f:0f:
                    28:8b:da:d7:36:48:5a:c8:bf:18:ca:01:04:ba:a2:
                    95:bf:e7:07:ad:b0:8d:d8:ff:9f:f9:cd:7b:ee:04:
                    91:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:67:D2:C0:71:61:39:E9:9B:2B:10:D2:61:25:8E:EE:78:80:8D:B8
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136352e33322e302f32332d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.165.32.0/23

    Signature Algorithm: sha256WithRSAEncryption
         68:29:9c:c2:42:90:84:8a:ef:cd:da:77:3d:c4:d9:9a:fe:10:
         60:db:69:31:42:c2:31:92:38:57:34:fc:74:27:8e:00:cb:51:
         6d:99:87:44:90:9e:4d:e3:ed:f1:ea:93:ff:b3:31:d5:af:ab:
         85:0c:36:80:3c:19:21:6a:eb:f4:5f:d0:29:62:ad:04:cd:73:
         38:dd:ad:ab:34:1d:0f:5f:92:8e:5a:f2:93:de:a7:fc:f8:ea:
         9b:d8:8f:66:e5:9d:bf:a0:9f:02:ba:b2:86:b5:12:66:b0:36:
         be:a1:c7:10:e1:36:4f:25:d4:8f:41:d4:8c:22:aa:ae:e0:6e:
         31:46:06:70:42:2c:97:f0:ce:36:7d:6b:7f:6e:43:ed:e7:79:
         43:63:ce:60:f7:11:ed:aa:7e:02:31:ee:ce:37:19:75:a3:ee:
         c1:af:29:37:e3:98:dd:0c:de:4c:cd:5a:1b:79:11:fa:76:1d:
         ed:7d:86:8f:d3:b1:34:6a:44:a1:5c:77:4d:86:b9:b6:b1:1a:
         23:96:51:69:51:20:98:81:4f:bc:f8:f8:34:0b:49:88:e2:d4:
         fc:94:e9:75:6d:a0:53:6f:2b:48:4c:bc:cd:62:aa:48:93:76:
         bd:de:af:0c:92:8c:46:71:65:08:e6:83:71:c8:22:92:b7:a0:
         87:ea:4d:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:46 2024 by rpki-client on console-ams.rpki-client.org