Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136382e32362e302f32332d3234203d3e20313432333035.roa
File:                     3130332e3136382e32362e302f32332d3234203d3e20313432333035.roa (raw, json)
Hash identifier:          OK2zv9SUaNdubjgyl3u5iS/5Q/tL6THyx7lIl+zvovI=
Subject key identifier:   B0:64:EC:40:29:ED:E3:32:59:C5:49:39:60:94:F6:02:6C:83:9A:87
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       730E1CB6F3B6435E6C1C5D0CA6E232866A21B499
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136382e32362e302f32332d3234203d3e20313432333035.roa
Signing time:             Wed 08 Sep 2021 04:26:56 +0000
ROA not before:           Wed 08 Sep 2021 04:21:56 +0000
ROA not after:            Thu 08 Sep 2022 04:26:56 +0000
asID:                     142305
IP address blocks:        103.168.26.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:0e:1c:b6:f3:b6:43:5e:6c:1c:5d:0c:a6:e2:32:86:6a:21:b4:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Sep  8 04:21:56 2021 GMT
            Not After : Sep  8 04:26:56 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:5d:08:7f:82:4c:0d:35:c5:38:d5:7e:9c:ef:
                    3c:72:69:8d:d2:5b:ec:1d:bd:84:bf:a9:00:50:85:
                    17:32:cf:4b:5f:7e:bc:de:0a:7d:da:9f:b6:85:40:
                    b1:ed:51:eb:9d:c1:95:8c:50:cd:fd:ee:27:e8:59:
                    7b:df:85:2f:4b:08:4a:bb:ba:4d:ec:8d:5c:1f:e2:
                    45:d1:ce:9e:77:08:31:58:03:88:b0:78:bc:fe:7c:
                    a2:11:06:99:43:c9:1c:4b:c9:d1:c1:7d:69:0c:cc:
                    a1:9a:16:08:1b:15:4d:c8:85:b8:49:69:8d:47:ed:
                    43:14:e0:49:7d:b1:bc:f8:96:77:da:05:50:d2:a0:
                    14:44:93:ae:e9:dd:30:1a:00:12:ca:2f:01:af:6e:
                    54:02:bd:7e:cd:30:9c:81:28:12:12:6d:78:d9:1e:
                    40:54:d5:ab:4a:0b:d1:14:44:4c:04:cb:a5:0b:da:
                    eb:74:00:42:90:cf:d1:f4:01:c3:13:03:7e:46:2e:
                    57:16:1b:4b:a4:d5:19:a3:f6:f8:64:86:12:c4:a4:
                    63:50:e0:6f:a1:2c:32:f6:48:dc:d5:2e:1f:7d:75:
                    40:32:5d:69:13:b0:d8:f4:a0:fe:86:6e:4f:12:9c:
                    7e:19:80:5a:29:40:22:bc:5f:8c:5f:2e:30:fe:92:
                    84:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:64:EC:40:29:ED:E3:32:59:C5:49:39:60:94:F6:02:6C:83:9A:87
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136382e32362e302f32332d3234203d3e20313432333035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.168.26.0/23

    Signature Algorithm: sha256WithRSAEncryption
         10:dc:6f:f3:17:f2:d7:5e:9f:37:d0:9e:a1:00:4a:fc:d7:b8:
         20:71:b1:02:22:fd:84:fe:0c:9b:63:a5:c8:62:82:80:df:36:
         fd:e1:b0:47:c8:b6:04:2c:af:4d:5b:2d:a7:6c:94:0a:45:50:
         6b:cd:e5:25:ec:88:8a:e1:e8:06:ab:72:6e:42:af:ef:69:cd:
         b2:01:da:9f:a0:1f:51:c0:0d:e8:fa:57:7b:e3:0b:55:23:5d:
         4a:49:a3:3b:43:3b:62:4e:00:80:d4:3e:b5:61:b5:a3:6e:93:
         28:9d:a5:d4:fc:71:64:aa:03:d7:61:0f:43:4e:31:08:fa:ba:
         e3:9a:1f:20:a1:e8:7b:0a:23:4c:0e:19:6d:ed:80:be:33:71:
         75:66:35:fe:4e:63:b0:8a:b0:19:d8:f3:85:75:49:32:67:61:
         81:0e:f2:a9:3d:5b:0c:2d:93:cb:39:d2:0d:8c:fe:96:62:54:
         a7:f4:c6:52:9b:b3:09:68:bb:22:f8:e4:7f:26:79:3b:f6:fc:
         90:34:59:a8:ac:a2:86:73:7c:68:9f:71:b9:ff:96:11:dd:cd:
         f6:f7:4f:fa:fd:59:e4:19:ed:2c:ff:e8:36:e9:15:5e:ef:d0:
         d7:3c:f4:7d:7e:64:6b:6c:de:a3:2d:19:da:1f:9f:aa:55:36:
         fc:b7:d4:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:11 2024 by rpki-client on console-fra.rpki-client.org