Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136362e3130342e302f32332d3234203d3e203137393935.roa
File:                     3130332e3136362e3130342e302f32332d3234203d3e203137393935.roa (raw, json)
Hash identifier:          nNck0NHpnAlqgKvh/qJBFDPSeIHZ3CcH3mXH8ULCFYI=
Subject key identifier:   57:E2:37:D1:25:BD:45:F9:0B:16:98:FB:7F:EC:E6:FF:26:31:41:CF
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       6E1E34513690883872CE7F8CF0B66AB615228870
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136362e3130342e302f32332d3234203d3e203137393935.roa
Signing time:             Wed 04 Aug 2021 08:39:16 +0000
ROA not before:           Wed 04 Aug 2021 08:34:16 +0000
ROA not after:            Thu 04 Aug 2022 08:39:16 +0000
asID:                     17995
IP address blocks:        103.166.104.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:1e:34:51:36:90:88:38:72:ce:7f:8c:f0:b6:6a:b6:15:22:88:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Aug  4 08:34:16 2021 GMT
            Not After : Aug  4 08:39:16 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:ed:0d:7d:ae:08:82:bc:ca:03:6f:ce:fa:ed:
                    98:6c:a1:f6:bf:9f:42:9b:c2:48:79:74:eb:76:a6:
                    d6:6f:17:35:9c:d4:bd:00:1f:49:1a:d0:22:28:a4:
                    21:31:1b:09:e4:47:de:eb:ee:b3:5e:0d:3f:68:58:
                    52:dc:6e:43:70:a2:4f:05:34:5f:4e:7b:5d:1a:2d:
                    53:71:29:bc:45:1d:e6:5a:48:09:d0:ba:7a:1f:bf:
                    14:c7:c6:b4:96:53:de:64:56:90:1a:2b:d3:59:fa:
                    25:7b:8c:4f:cd:21:1d:a7:52:52:62:80:d2:b7:cd:
                    a7:b8:33:66:1b:75:3b:59:47:26:32:84:cc:d6:3f:
                    a5:d7:4c:da:eb:45:63:61:ea:15:f2:a3:52:99:97:
                    e6:ea:7e:c0:56:24:db:32:5c:8b:b2:f7:07:3b:99:
                    fa:db:47:ce:db:c3:9e:84:81:79:ff:ba:bd:97:07:
                    70:aa:16:94:66:7e:59:64:86:87:fd:88:9d:3d:fc:
                    99:ea:e7:c8:ae:61:de:43:a1:51:5d:36:0c:bd:de:
                    e6:a5:f9:a8:25:66:70:4f:26:7e:0f:66:5d:0f:c9:
                    47:d5:4d:8d:2a:07:52:f9:04:f2:c4:e2:38:40:7d:
                    b4:a8:dc:2f:59:8f:73:3e:44:d5:50:bc:8a:d7:97:
                    b1:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:E2:37:D1:25:BD:45:F9:0B:16:98:FB:7F:EC:E6:FF:26:31:41:CF
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136362e3130342e302f32332d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.166.104.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7a:b1:6f:6b:91:35:c2:a0:ad:3d:59:4e:38:09:00:d7:b6:39:
         37:b2:6d:64:47:10:66:5f:aa:b2:15:39:4d:2f:6e:64:05:a6:
         50:9f:d0:2c:a2:20:26:64:17:25:b9:76:21:85:7e:1a:02:6e:
         4a:7b:9c:3c:23:fa:2d:3c:4b:ec:57:7b:e3:d9:a2:3e:5d:a9:
         ce:e4:45:88:64:78:b2:df:3b:d6:5f:3d:e7:50:33:b1:4f:0d:
         54:63:31:28:cb:2c:75:10:d7:e9:c3:60:9d:0c:8e:db:86:35:
         44:72:f4:f0:8e:25:67:a3:63:da:c2:e0:af:20:fe:ec:de:59:
         a3:b1:5e:a0:a5:7b:f8:67:05:8f:32:0c:31:73:a6:56:78:58:
         bc:e0:42:67:90:de:e9:ec:b1:d6:ea:75:6e:3b:3a:3f:80:04:
         91:2b:63:bf:47:5b:83:d1:df:a3:3e:87:74:c2:5a:db:58:69:
         b5:d8:76:3c:59:e3:1e:de:d6:d8:63:56:fb:8f:3c:b1:50:9f:
         31:f6:71:1b:2d:9f:08:ee:f6:5c:3b:ff:e0:90:0a:80:17:78:
         07:cf:6c:ca:43:ea:c0:14:a1:c5:14:50:74:d2:39:00:7e:9f:
         25:4c:d8:15:09:0b:29:fa:54:96:e8:15:31:83:85:46:75:4e:
         9d:e6:46:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:10 2024 by rpki-client on console-fra.rpki-client.org