Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136372e3131342e302f32342d3234203d3e20313431393736.roa
File:                     3130332e3136372e3131342e302f32342d3234203d3e20313431393736.roa (raw, json)
Hash identifier:          NS8DqdyftcCIcSu8hjy6DAnMFRl3DTnYSx22rJ7H98g=
Subject key identifier:   DE:05:93:37:55:7F:25:50:A7:BA:46:E7:1C:9E:08:53:1A:CC:92:48
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       50BC5EF8F0FCFCAFE71905743B751C7892FB719F
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136372e3131342e302f32342d3234203d3e20313431393736.roa
Signing time:             Mon 06 Sep 2021 04:10:47 +0000
ROA not before:           Mon 06 Sep 2021 04:05:47 +0000
ROA not after:            Tue 06 Sep 2022 04:10:47 +0000
asID:                     141976
IP address blocks:        103.167.114.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:bc:5e:f8:f0:fc:fc:af:e7:19:05:74:3b:75:1c:78:92:fb:71:9f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Sep  6 04:05:47 2021 GMT
            Not After : Sep  6 04:10:47 2022 GMT
        Subject: CN=3082010A0282010100A4EEEF39EE0021128E4B396C8FAE87E81E06463CA4E9546CF1333973A57348A4D4D17224A7AEEB3A783497CE4CE9752299A7C527DBF99CBF32C2535D8F3AA997EF138B625A9A071C13EB3C47F19E7B8E2E84773DD03A6F0837BE88FB065D96F3D203459A03A95526FB6B91BB6B1E4E0F7F60B5A51A1B92BBF366281947F72E9A0C484601629C336FB9581A0B6DDDD06BEC0EF7216AFF562E1866DE239C3BEF5ECE16844D11805D6CDE57DC44F3E71139A1449E9F73E0539FDC5B69544E38B4E1BB979BCFF6985877691C651241103AE1EC691C05EC064BB610FF7D6A876A677252B0641A34931A70EB7727259D8F6FB69EF6D9660B654CD11EEB702CB61FD6B50203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:ee:ef:39:ee:00:21:12:8e:4b:39:6c:8f:ae:
                    87:e8:1e:06:46:3c:a4:e9:54:6c:f1:33:39:73:a5:
                    73:48:a4:d4:d1:72:24:a7:ae:eb:3a:78:34:97:ce:
                    4c:e9:75:22:99:a7:c5:27:db:f9:9c:bf:32:c2:53:
                    5d:8f:3a:a9:97:ef:13:8b:62:5a:9a:07:1c:13:eb:
                    3c:47:f1:9e:7b:8e:2e:84:77:3d:d0:3a:6f:08:37:
                    be:88:fb:06:5d:96:f3:d2:03:45:9a:03:a9:55:26:
                    fb:6b:91:bb:6b:1e:4e:0f:7f:60:b5:a5:1a:1b:92:
                    bb:f3:66:28:19:47:f7:2e:9a:0c:48:46:01:62:9c:
                    33:6f:b9:58:1a:0b:6d:dd:d0:6b:ec:0e:f7:21:6a:
                    ff:56:2e:18:66:de:23:9c:3b:ef:5e:ce:16:84:4d:
                    11:80:5d:6c:de:57:dc:44:f3:e7:11:39:a1:44:9e:
                    9f:73:e0:53:9f:dc:5b:69:54:4e:38:b4:e1:bb:97:
                    9b:cf:f6:98:58:77:69:1c:65:12:41:10:3a:e1:ec:
                    69:1c:05:ec:06:4b:b6:10:ff:7d:6a:87:6a:67:72:
                    52:b0:64:1a:34:93:1a:70:eb:77:27:25:9d:8f:6f:
                    b6:9e:f6:d9:66:0b:65:4c:d1:1e:eb:70:2c:b6:1f:
                    d6:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:05:93:37:55:7F:25:50:A7:BA:46:E7:1C:9E:08:53:1A:CC:92:48
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136372e3131342e302f32342d3234203d3e20313431393736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.167.114.0/24

    Signature Algorithm: sha256WithRSAEncryption
         12:2f:2c:91:71:a1:f8:b4:e5:96:be:4f:56:58:88:b5:82:fc:
         f1:c8:e0:46:ef:2b:f0:52:56:8e:3e:b7:74:8a:93:61:ae:9b:
         98:9a:97:6f:2f:e0:c4:7b:bb:b8:f9:c9:f0:60:41:58:a0:c1:
         e7:a2:5a:e3:a3:3b:f2:20:5a:d4:67:3a:f5:4d:b2:3d:d9:0a:
         fb:86:51:b6:71:3a:c0:df:2e:01:35:6b:d2:31:34:27:8a:e1:
         24:4d:71:49:26:c7:b9:39:47:91:7e:82:c0:c0:70:9c:8a:62:
         cb:f9:1b:55:6b:2f:8e:4c:15:a8:6c:6f:61:b1:86:60:64:90:
         c7:7a:f1:77:ae:e7:51:01:ce:8a:03:ef:52:cb:5e:a9:02:c3:
         96:de:09:48:a7:a2:9b:e2:24:a7:40:e3:e5:52:fd:c1:72:f5:
         29:45:72:24:64:38:d4:39:e9:ac:f9:28:48:93:6f:05:63:95:
         54:9c:9a:d4:e6:a3:d0:3c:5e:ea:54:ce:10:b6:65:bd:15:f8:
         e0:ef:9f:09:68:47:c1:0e:2b:cb:9e:1f:fb:e3:5c:2f:2d:36:
         fd:74:48:47:38:dc:e9:1b:27:87:7b:01:37:20:a4:aa:14:55:
         3b:1a:24:3d:e7:f9:52:6b:98:66:3b:21:d2:3d:2d:84:2d:e0:
         cd:53:4e:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:10 2024 by rpki-client on console-fra.rpki-client.org