Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136362e3135362e302f32332d3234203d3e203535363838.roa
File:                     3130332e3136362e3135362e302f32332d3234203d3e203535363838.roa (raw, json)
Hash identifier:          M9oQtyVPYhfwKDlEA5EjUDla/j60rtmUet7bPAg7ZoQ=
Subject key identifier:   5B:EA:5A:D9:C9:D2:99:FC:8A:A9:44:D6:04:BE:C1:E6:4F:17:40:26
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       16849728CECCC8E8CF39E066DE0DDDA7DABB7B38
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136362e3135362e302f32332d3234203d3e203535363838.roa
Signing time:             Tue 04 May 2021 06:06:25 +0000
ROA not before:           Tue 04 May 2021 06:01:25 +0000
ROA not after:            Wed 04 May 2022 06:06:25 +0000
asID:                     55688
IP address blocks:        103.166.156.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:84:97:28:ce:cc:c8:e8:cf:39:e0:66:de:0d:dd:a7:da:bb:7b:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: May  4 06:01:25 2021 GMT
            Not After : May  4 06:06:25 2022 GMT
        Subject: CN=3082010A0282010100DD01E0EEFBE29ABF31764530113481DC93D15EA9F0911A5AB39C3BDE561898650D0F377A4C0620602E06E0F4FA7B47641841A31578B6FC87A96A829C6FBB8A3DD9F93A3FAA4848E5EC597E7D870BC2CE52B4306F23C8C088F8F2D599E87CF76E8C1E7A47A004FD774DF186DFFEFA0D89059B36651E86F7C7097853E3A6F69C0F94CEEB92B9DDBBC0EFAB3574AF60DCCB997B45A6F9D1C2113E45F677A051B4D7DEE5D7391613C319F52C98647B5D59D1DFDFB3F1DFC9DB90B1C550BC5323FA36AD61A73451BCB9D877EBAB7925AAA3BBCE7045C4C844B3C4A38E87083A3DF2E56F9B57C673D1504AB9DEC28F4E0288065F861D7048C92A88503EC751E2D751650203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:01:e0:ee:fb:e2:9a:bf:31:76:45:30:11:34:
                    81:dc:93:d1:5e:a9:f0:91:1a:5a:b3:9c:3b:de:56:
                    18:98:65:0d:0f:37:7a:4c:06:20:60:2e:06:e0:f4:
                    fa:7b:47:64:18:41:a3:15:78:b6:fc:87:a9:6a:82:
                    9c:6f:bb:8a:3d:d9:f9:3a:3f:aa:48:48:e5:ec:59:
                    7e:7d:87:0b:c2:ce:52:b4:30:6f:23:c8:c0:88:f8:
                    f2:d5:99:e8:7c:f7:6e:8c:1e:7a:47:a0:04:fd:77:
                    4d:f1:86:df:fe:fa:0d:89:05:9b:36:65:1e:86:f7:
                    c7:09:78:53:e3:a6:f6:9c:0f:94:ce:eb:92:b9:dd:
                    bb:c0:ef:ab:35:74:af:60:dc:cb:99:7b:45:a6:f9:
                    d1:c2:11:3e:45:f6:77:a0:51:b4:d7:de:e5:d7:39:
                    16:13:c3:19:f5:2c:98:64:7b:5d:59:d1:df:df:b3:
                    f1:df:c9:db:90:b1:c5:50:bc:53:23:fa:36:ad:61:
                    a7:34:51:bc:b9:d8:77:eb:ab:79:25:aa:a3:bb:ce:
                    70:45:c4:c8:44:b3:c4:a3:8e:87:08:3a:3d:f2:e5:
                    6f:9b:57:c6:73:d1:50:4a:b9:de:c2:8f:4e:02:88:
                    06:5f:86:1d:70:48:c9:2a:88:50:3e:c7:51:e2:d7:
                    51:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:EA:5A:D9:C9:D2:99:FC:8A:A9:44:D6:04:BE:C1:E6:4F:17:40:26
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136362e3135362e302f32332d3234203d3e203535363838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.166.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         44:49:66:31:f0:8d:db:52:a9:30:54:ff:d1:5c:b1:a7:73:23:
         cd:46:c5:9c:a7:b1:f7:7b:07:15:f3:78:ae:34:32:6e:77:6e:
         af:91:fa:8d:2f:19:45:f7:b0:52:d6:02:1b:f3:f4:32:a2:c1:
         e3:04:67:49:57:51:6a:78:89:23:ad:25:ac:f4:2b:42:00:ef:
         62:ae:66:eb:e6:3a:64:3e:49:08:3b:08:52:1b:a6:f4:23:d4:
         3b:04:34:99:80:67:85:e5:a3:00:21:d4:85:66:82:2d:7d:d7:
         62:1a:03:2b:3c:de:c1:07:ce:ba:85:e6:8e:6f:3e:0a:b8:42:
         89:46:3b:92:ec:18:d9:58:47:13:6f:fd:06:44:8c:0f:e8:a4:
         05:ad:e3:e0:b7:63:07:67:30:45:5e:05:f6:a4:a4:88:73:28:
         2b:74:05:a1:94:75:ef:9b:3f:11:f6:3e:0d:16:0a:ef:52:a2:
         ae:e4:e1:16:ba:5c:df:5f:86:41:f9:e8:d1:0d:b2:74:a5:89:
         e0:0a:bf:74:93:1d:36:51:f6:de:b9:eb:aa:a2:75:18:2a:f4:
         10:de:e5:ae:43:40:94:23:b1:e0:94:d7:b3:bc:1f:b7:5c:94:
         1c:ca:6f:89:59:75:f4:23:05:98:06:cf:dc:87:5e:48:1e:85:
         d2:3f:63:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:10 2024 by rpki-client on console-fra.rpki-client.org