Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136372e3134382e302f32332d3234203d3e2039383735.roa
File:                     3130332e3136372e3134382e302f32332d3234203d3e2039383735.roa (raw, json)
Hash identifier:          k/qaO7TVZF5RphoradZIHeL+bCB4eJIEqIiqHy7wAXY=
Subject key identifier:   57:12:65:86:FA:4D:AE:E6:C7:19:A7:E9:FA:88:5F:42:67:73:B3:C0
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       5C67180F74DBD12AAB9B2C0BDFA4D94571453E2A
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136372e3134382e302f32332d3234203d3e2039383735.roa
Signing time:             Sat 02 Oct 2021 00:45:09 +0000
ROA not before:           Sat 02 Oct 2021 00:40:09 +0000
ROA not after:            Sun 02 Oct 2022 00:45:09 +0000
asID:                     9875
IP address blocks:        103.167.148.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:67:18:0f:74:db:d1:2a:ab:9b:2c:0b:df:a4:d9:45:71:45:3e:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Oct  2 00:40:09 2021 GMT
            Not After : Oct  2 00:45:09 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:e4:48:72:c6:fa:e9:15:7c:0f:95:e9:1d:65:
                    db:28:ac:24:8e:7c:45:93:0c:c4:5b:e4:20:73:6a:
                    d1:c4:cb:57:be:ca:a4:a1:75:a7:05:a8:8d:fa:ba:
                    89:6b:6c:7e:6e:64:6e:6a:5b:24:82:1e:0a:fd:7a:
                    c9:5f:cd:af:c8:84:f8:dc:8c:43:53:e7:ff:ba:04:
                    ab:3b:96:4f:4d:07:09:f3:9c:93:80:a3:e7:78:a1:
                    b3:91:36:95:3f:ff:01:36:3c:b8:b8:85:c9:c0:a6:
                    68:27:f4:31:90:ef:cb:70:94:7a:9d:84:7d:7c:06:
                    0a:b3:4c:dc:52:3c:c2:dc:fc:11:b2:95:16:24:d9:
                    7f:60:83:0a:93:02:db:b5:53:7e:12:65:85:64:e4:
                    e8:e3:94:40:a4:16:2e:0c:73:a0:86:26:5b:94:61:
                    5a:29:44:55:3d:b6:84:08:6d:24:55:74:0f:60:40:
                    4b:23:1d:ef:34:b4:3d:e6:5b:f8:26:23:83:c2:1a:
                    7c:d2:93:27:80:0c:a6:18:a6:d7:30:f7:53:fa:44:
                    44:43:58:b9:84:7c:00:2b:00:73:d6:b4:c5:01:f6:
                    ed:a3:3c:4e:a5:37:94:8a:5e:c4:cd:11:6d:ce:ae:
                    1d:74:7c:cb:5f:d1:67:ea:fd:aa:98:e7:63:ff:95:
                    81:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:12:65:86:FA:4D:AE:E6:C7:19:A7:E9:FA:88:5F:42:67:73:B3:C0
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136372e3134382e302f32332d3234203d3e2039383735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.167.148.0/23

    Signature Algorithm: sha256WithRSAEncryption
         8d:8a:5f:6b:6e:df:a7:f9:14:92:de:98:a9:fd:33:3f:da:0e:
         1e:1a:ee:ec:ac:84:cb:c8:08:18:78:1f:3a:04:a5:97:81:44:
         59:b9:fe:76:0e:a6:21:4a:2f:1f:14:85:12:d5:a5:2b:73:c9:
         d2:2d:85:99:ee:87:52:b7:51:2f:db:46:ad:0c:9e:cf:ad:44:
         70:3b:62:a8:d8:a7:4f:8d:b0:95:4a:94:cc:b9:01:69:8f:94:
         0d:6e:44:0d:3a:bf:6b:a4:60:2c:69:9c:ad:59:c1:47:fa:62:
         83:44:ac:74:ff:7b:47:5d:ac:09:16:52:ed:81:d3:94:f1:bf:
         0c:39:10:83:8a:fd:78:13:43:7c:49:dd:3e:d8:93:12:f6:f4:
         d3:74:85:35:23:81:dc:d9:d7:d9:a8:ed:a1:6f:8e:38:c7:03:
         79:fb:cf:b3:8c:df:71:45:19:42:4d:38:33:3f:77:42:c7:85:
         31:5a:5a:61:24:6a:34:f7:aa:6c:50:eb:c0:5c:b5:81:69:92:
         1e:34:83:09:d0:f0:8a:b1:0a:11:d6:48:5a:f0:95:6a:4e:3e:
         8c:fa:c4:08:1d:a7:56:10:d8:7f:38:4b:64:d4:64:be:b8:8f:
         6a:b6:2e:99:4e:c0:82:6f:67:a6:cd:34:62:af:c1:a4:3f:e5:
         1c:bd:39:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:11 2024 by rpki-client on console-fra.rpki-client.org