Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136372e3231382e302f32332d3234203d3e203137393935.roa
File:                     3130332e3136372e3231382e302f32332d3234203d3e203137393935.roa (raw, json)
Hash identifier:          ysXbS7ia9/6gUV9aUVEvQdzgQ9CZxc4pawKBFyq5Tfo=
Subject key identifier:   E2:4F:98:89:70:49:42:52:FE:C2:2E:F9:5F:C6:DA:75:19:F2:A6:D4
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       5DD01CE4C77877AAC8C0B12727BE03198664EF32
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136372e3231382e302f32332d3234203d3e203137393935.roa
Signing time:             Thu 05 Aug 2021 02:44:21 +0000
ROA not before:           Thu 05 Aug 2021 02:39:21 +0000
ROA not after:            Fri 05 Aug 2022 02:44:21 +0000
asID:                     17995
IP address blocks:        103.167.218.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:d0:1c:e4:c7:78:77:aa:c8:c0:b1:27:27:be:03:19:86:64:ef:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Aug  5 02:39:21 2021 GMT
            Not After : Aug  5 02:44:21 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:5c:f4:ab:71:0f:87:9d:ec:71:18:3d:57:bb:
                    37:2f:c4:d2:48:c3:68:09:b8:6d:fb:ce:63:51:3b:
                    87:e9:b5:a6:2b:eb:e5:67:66:a1:44:a5:04:e5:8f:
                    30:ce:a8:cb:f5:cd:10:d5:fb:34:cb:65:2c:f0:6a:
                    c7:b2:76:ad:6d:21:d7:de:45:19:d9:f0:25:fa:c7:
                    73:e6:18:49:62:32:f0:22:09:9f:89:2c:94:bb:4f:
                    f1:28:b7:02:e5:8c:91:1d:2d:e3:4c:7e:2e:fc:b5:
                    a3:b7:1d:7a:1c:41:f2:5b:53:d7:51:e2:13:0b:26:
                    fe:85:13:04:2b:70:04:99:9c:14:97:b4:ed:38:6b:
                    24:f0:23:92:74:13:16:86:37:59:3d:18:97:c7:53:
                    0e:89:71:d4:7f:75:e0:1e:21:d6:97:3e:5e:80:b6:
                    86:bd:83:01:71:29:25:44:11:d2:ea:96:16:dc:46:
                    e1:57:47:83:74:35:5e:20:e9:1a:9d:58:da:35:47:
                    9d:d6:97:54:61:05:b1:93:f8:ec:16:5e:db:2a:43:
                    5b:14:bb:08:86:9f:c5:d3:81:d5:9b:f2:b6:95:1f:
                    08:93:a4:71:3f:59:d9:d3:00:02:58:90:84:2e:9c:
                    8d:3a:e1:a0:9f:1f:ac:0b:ab:c7:fa:b4:df:8b:9c:
                    2f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:4F:98:89:70:49:42:52:FE:C2:2E:F9:5F:C6:DA:75:19:F2:A6:D4
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136372e3231382e302f32332d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.167.218.0/23

    Signature Algorithm: sha256WithRSAEncryption
         34:77:f5:33:b3:70:d8:f1:76:5b:07:25:57:e9:12:7b:ec:0a:
         f1:e8:82:f9:01:e9:b7:80:c3:d4:bd:58:de:8f:60:ff:13:39:
         6a:cf:47:1d:7b:06:8a:4c:08:8f:a9:51:a3:a5:1e:5b:22:15:
         8a:bb:52:f8:85:75:30:41:8a:33:41:53:56:80:40:7b:92:68:
         64:ba:1f:42:5c:52:9d:7b:13:a4:09:2b:29:ac:cc:84:32:e1:
         f6:93:29:6e:30:a3:46:d0:7d:c5:31:9b:d5:e3:7c:aa:55:7e:
         6e:be:65:f5:f0:63:06:ef:b5:f5:97:8e:f8:18:37:c5:47:80:
         c6:1d:49:33:dd:ce:7b:71:a5:06:98:22:f5:dd:71:22:1e:03:
         e9:08:54:ed:a9:d8:cf:16:e2:a2:37:65:df:f2:16:9c:44:9b:
         1f:45:c1:1f:28:12:d0:ef:79:2f:33:24:5a:d9:b7:61:39:db:
         76:49:b2:22:1e:17:f6:cc:f4:52:99:15:d1:6f:a9:db:92:e4:
         75:a1:61:8f:04:87:f4:5e:03:0e:a9:fe:af:f4:5e:09:5d:b7:
         2d:c1:b1:b9:0d:a4:4e:b1:24:21:64:36:36:47:be:c0:7b:7f:
         e7:d8:f3:e6:5d:f4:1d:b6:20:da:5c:bd:7e:55:f6:6d:ca:42:
         42:db:36:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:46 2024 by rpki-client on console-ams.rpki-client.org