Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136352e34322e302f32332d3234203d3e203137393935.roa
File:                     3130332e3136352e34322e302f32332d3234203d3e203137393935.roa (raw, json)
Hash identifier:          48ftQB+iPB0TnhSpcwICTqhGN/o4SfDuhI+gaF3+bLQ=
Subject key identifier:   4A:33:06:82:BB:C5:3B:8F:AA:DB:8F:F9:10:DC:85:98:8A:C0:56:2E
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       496CE8814CEC3633D5222D3A0C7EA99AEAA32356
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136352e34322e302f32332d3234203d3e203137393935.roa
Signing time:             Tue 02 Nov 2021 00:43:14 +0000
ROA not before:           Tue 02 Nov 2021 00:38:14 +0000
ROA not after:            Wed 02 Nov 2022 00:43:14 +0000
asID:                     17995
IP address blocks:        103.165.42.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:6c:e8:81:4c:ec:36:33:d5:22:2d:3a:0c:7e:a9:9a:ea:a3:23:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov  2 00:38:14 2021 GMT
            Not After : Nov  2 00:43:14 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:5f:a8:ab:ac:a5:4f:3b:90:be:84:47:35:51:
                    81:52:3e:c3:49:de:ff:58:54:2c:73:51:97:13:0b:
                    83:5e:0f:1a:b9:3e:49:17:3c:f7:e7:2d:ea:19:10:
                    d9:27:0e:b2:15:14:b4:30:ba:f0:93:d9:ae:e6:0f:
                    08:29:15:95:81:36:ee:ee:08:8c:43:f9:e1:af:58:
                    f6:65:4e:85:31:57:7a:30:94:0b:6d:59:52:5d:76:
                    f9:60:42:98:0d:08:dc:df:11:03:86:5e:96:c7:0d:
                    7a:f3:36:70:4a:d5:ad:fe:f4:ce:cf:77:be:a3:d1:
                    fe:62:38:37:80:af:29:22:1e:70:d0:b0:1d:20:54:
                    93:4b:2e:dc:7c:f0:98:d4:3a:f2:a0:2e:b1:de:79:
                    d9:c6:8b:da:b4:88:cd:b7:30:26:8d:38:af:8c:79:
                    2e:f9:a4:7a:c1:90:bc:31:a3:60:57:3a:e4:94:78:
                    cd:37:57:7b:e2:e1:77:41:ea:59:7e:63:dc:98:0d:
                    f9:96:7a:1c:4f:c2:47:a0:28:19:85:e4:47:a9:7b:
                    32:62:1e:e5:3c:55:5d:ba:8a:e8:3b:e5:7c:6a:a7:
                    bd:c5:4c:ea:c2:9d:fd:87:0f:e5:31:b9:4d:51:3f:
                    6a:3e:f9:18:1f:2a:3c:22:d4:2a:db:8b:a0:66:b6:
                    9a:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:33:06:82:BB:C5:3B:8F:AA:DB:8F:F9:10:DC:85:98:8A:C0:56:2E
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136352e34322e302f32332d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.165.42.0/23

    Signature Algorithm: sha256WithRSAEncryption
         01:01:fc:30:57:f4:fe:a2:69:c1:48:71:08:23:bc:4a:e2:f6:
         c4:3c:90:81:3c:b7:14:87:03:d7:79:b3:42:7e:4d:33:a6:c7:
         c8:b4:67:d5:22:33:38:33:87:16:d9:9a:95:7b:b0:f3:8f:30:
         ea:c1:9f:e2:b0:5a:4b:72:af:ad:f9:21:15:e0:94:8f:3f:ef:
         c9:ab:a0:48:62:95:ee:46:f4:4c:0a:bc:0c:14:45:10:b2:9d:
         7c:24:96:35:70:33:46:26:44:76:3a:9f:74:5f:07:0c:91:2c:
         6c:f3:54:e5:90:88:59:73:cf:38:48:35:e5:9e:e4:c7:0b:30:
         02:ea:ae:7c:8d:dd:96:e4:f7:19:0e:a1:d4:78:91:31:89:9b:
         0f:d3:f9:44:aa:c6:87:06:1b:e5:52:a3:8e:f2:0d:a4:44:50:
         25:fc:d8:03:60:e0:f2:33:2d:e3:ff:9d:22:2f:9f:66:44:e4:
         d8:6d:15:c7:41:f6:d8:ef:83:fb:f8:39:33:e6:11:20:ef:8a:
         ea:c2:e8:84:82:dd:b9:27:f2:42:0c:4b:bd:a6:1c:80:43:ae:
         c1:90:52:00:73:88:17:81:48:83:3b:f2:38:f2:8a:10:b6:3c:
         51:c3:19:89:21:eb:d4:77:cd:f5:76:2a:82:bb:8d:de:de:30:
         64:7b:d8:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:10 2024 by rpki-client on console-fra.rpki-client.org