Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136352e33342e302f32332d3234203d3e203137393935.roa
File:                     3130332e3136352e33342e302f32332d3234203d3e203137393935.roa (raw, json)
Hash identifier:          /JmfhWt0wA7Hz88imwGbCPLlUbxfJMh1ePrsZki9+NA=
Subject key identifier:   8F:4D:D7:F4:D3:26:C9:50:41:64:22:94:18:F0:CD:74:00:97:D2:6F
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       1F59C0F63B080D58B6C6299D7251CD9DF7EF580E
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136352e33342e302f32332d3234203d3e203137393935.roa
Signing time:             Tue 02 Nov 2021 00:43:15 +0000
ROA not before:           Tue 02 Nov 2021 00:38:15 +0000
ROA not after:            Wed 02 Nov 2022 00:43:15 +0000
asID:                     17995
IP address blocks:        103.165.34.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:59:c0:f6:3b:08:0d:58:b6:c6:29:9d:72:51:cd:9d:f7:ef:58:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov  2 00:38:15 2021 GMT
            Not After : Nov  2 00:43:15 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:15:0f:5c:72:38:84:3c:59:6a:86:fb:70:e4:
                    50:40:d3:66:98:f3:2d:bb:96:fe:56:42:e6:9b:80:
                    20:ac:bf:52:62:e5:15:bc:b9:11:bc:f5:54:5a:1a:
                    78:87:af:e6:a7:af:f7:0e:e4:bb:96:76:03:c7:b9:
                    a0:ef:ac:62:43:fe:1d:b2:75:cd:a2:7e:58:31:3b:
                    10:96:60:88:9e:8a:39:fd:e3:5c:0e:4d:04:e6:2e:
                    b1:17:52:43:46:31:bd:fb:8f:65:4d:b3:ee:0d:29:
                    dd:05:a2:1e:93:84:a0:4b:e3:8a:75:26:53:66:5d:
                    20:4b:07:d1:ee:98:62:5a:e3:19:a7:6d:9b:ad:60:
                    bd:5f:09:3c:85:1f:97:8e:a0:ef:23:35:af:5e:7a:
                    11:19:8e:ae:4d:ff:ef:d8:c1:52:5c:f4:39:bd:01:
                    4f:70:94:f0:2c:18:16:e5:9d:5e:a7:71:33:1c:8f:
                    c8:21:4b:e3:d4:59:6c:69:62:ae:9f:dd:dd:eb:bf:
                    44:a6:5f:b1:5b:7a:69:a1:7e:35:f3:78:03:90:4d:
                    b2:d8:b8:32:88:b0:c4:cb:b4:0e:fb:2c:cb:2c:aa:
                    43:d7:28:af:fc:d7:d1:6a:51:b6:ba:9a:35:f4:ac:
                    0f:35:dc:54:2a:95:8a:1e:83:f1:3b:c4:80:16:e6:
                    fd:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:4D:D7:F4:D3:26:C9:50:41:64:22:94:18:F0:CD:74:00:97:D2:6F
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136352e33342e302f32332d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.165.34.0/23

    Signature Algorithm: sha256WithRSAEncryption
         15:2d:83:2d:04:3e:d9:0c:e3:d2:d6:f0:4f:99:78:5f:0e:94:
         1f:67:b4:1c:8a:ba:b2:a2:07:88:6d:e2:38:20:b0:8a:b6:cd:
         a3:9c:ba:5f:78:04:4c:b7:1e:e5:94:f4:11:6e:34:c0:8c:37:
         93:0a:5c:9b:b1:dd:bf:63:92:84:6e:18:19:b9:9f:76:de:e9:
         00:5a:ef:ac:9a:02:b1:5d:76:66:c8:f7:ef:b2:ef:66:6b:31:
         46:9d:98:22:9a:27:cc:61:69:21:5c:9b:df:1e:e8:8b:84:c9:
         88:10:16:fc:6a:5e:c7:a1:2c:25:00:ad:4e:28:ed:44:80:1b:
         bd:02:22:d5:90:f1:14:09:1d:e9:ea:1a:ed:bf:12:a8:64:4d:
         2a:47:08:0a:23:7a:0a:81:f2:43:59:87:7c:95:a6:e3:6a:5d:
         e7:ce:e6:25:22:ba:da:bd:50:fc:8c:15:d1:2b:f4:be:9b:d9:
         79:ab:df:8c:d5:4c:1d:7c:04:df:fd:23:7c:38:37:50:14:94:
         27:a5:52:6d:65:94:7c:ce:54:23:6b:5f:64:9f:e9:d7:f7:ff:
         4b:87:e5:53:48:22:89:67:47:86:29:2e:db:34:d0:98:6e:c2:
         06:d5:31:86:41:fa:e5:f5:4e:24:69:62:1b:07:23:42:3d:04:
         38:fc:be:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:10 2024 by rpki-client on console-fra.rpki-client.org