Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136392e32322e302f32332d3234203d3e2034383030.roa
File:                     3130332e3136392e32322e302f32332d3234203d3e2034383030.roa (raw, json)
Hash identifier:          Db0FiXpVWYbFNLA4C53fFS4ImD/2w0RHgSntusO3Wn0=
Subject key identifier:   2E:1D:7A:98:68:20:24:C0:20:C9:88:38:24:BB:28:4F:B4:E0:06:D2
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       7E7436CF7EE61037467D32C4FC022E1FFC25960E
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136392e32322e302f32332d3234203d3e2034383030.roa
Signing time:             Mon 28 Jun 2021 16:52:14 +0000
ROA not before:           Mon 28 Jun 2021 16:47:14 +0000
ROA not after:            Tue 28 Jun 2022 16:52:14 +0000
asID:                     4800
IP address blocks:        103.169.22.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:74:36:cf:7e:e6:10:37:46:7d:32:c4:fc:02:2e:1f:fc:25:96:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jun 28 16:47:14 2021 GMT
            Not After : Jun 28 16:52:14 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:53:c9:e7:91:7b:38:54:3b:b1:2d:b1:49:9b:
                    82:24:c1:54:49:38:65:18:7f:b1:96:db:76:47:b2:
                    ff:06:ce:32:5e:bb:b1:21:e7:83:b1:55:96:2b:86:
                    e6:78:25:13:9c:07:92:a5:65:66:b1:3f:d4:1d:48:
                    13:f3:4f:7a:25:b4:f3:80:17:a4:bd:9a:9f:7e:ce:
                    18:7e:66:b6:d7:4f:4a:78:9f:fb:22:21:f8:19:61:
                    b3:3f:f9:60:87:9a:df:ce:e8:89:08:83:cd:19:04:
                    2b:50:d2:b6:55:42:24:ac:5d:b8:aa:4e:2a:f7:90:
                    09:76:d6:87:84:40:cd:34:86:3a:db:17:23:54:3e:
                    40:68:85:35:81:5a:8e:30:55:87:76:a0:e0:47:12:
                    e2:f4:1c:c5:ea:65:c6:8e:e6:34:69:cd:00:6f:ae:
                    17:bb:be:25:8b:80:a4:21:39:e5:1e:1f:a1:a8:35:
                    8f:2a:8c:dd:be:cc:90:16:79:2e:81:0d:23:90:03:
                    6f:b1:19:d1:db:9e:98:83:d6:50:60:8c:5e:a0:1a:
                    a5:8d:82:18:ed:69:35:15:a8:dd:98:05:22:9f:36:
                    a2:ae:a6:0c:65:e7:3a:d5:6a:98:ce:81:73:11:05:
                    4c:13:9d:24:41:d5:cd:10:36:ed:b5:14:ad:46:a9:
                    41:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:1D:7A:98:68:20:24:C0:20:C9:88:38:24:BB:28:4F:B4:E0:06:D2
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3136392e32322e302f32332d3234203d3e2034383030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.169.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         59:96:02:1c:63:b9:e0:a0:7c:cf:e3:58:e6:5e:4f:37:9c:70:
         f2:ed:53:b2:e7:32:c0:83:68:ba:1e:28:9e:ac:97:24:f2:64:
         76:bb:de:86:f2:80:69:34:11:9f:f3:17:de:bb:de:06:f6:dd:
         65:98:a7:58:ba:1c:ae:b0:aa:3b:ff:bd:fe:59:76:dc:db:81:
         7f:09:3c:f7:3b:4a:0c:e0:68:ce:9e:82:ea:66:b1:98:01:6e:
         5b:34:ca:9f:fb:29:bd:4b:c5:e0:6f:2f:cc:79:6e:9b:3e:f4:
         45:b4:f3:28:c2:b1:f3:ca:fc:cd:35:51:f8:9a:c4:8f:59:aa:
         99:95:b7:fe:24:63:90:59:a8:74:ae:4b:c4:35:2b:e1:af:43:
         96:82:b0:db:0a:a9:af:a4:7c:b1:84:4c:67:9d:ff:0a:87:f7:
         4e:c0:14:0b:0b:52:ee:ec:64:67:bd:32:df:d4:f0:6c:ad:db:
         5d:c3:7e:9d:4a:06:38:fe:c3:dd:7c:d4:e8:91:de:ac:11:69:
         c0:f7:46:e4:74:17:54:79:b7:4e:77:77:b8:c7:a8:e0:c0:15:
         70:b7:65:ef:87:7a:74:b0:0b:2a:b4:aa:e1:01:c8:b5:ce:ea:
         9a:e5:9c:ec:60:53:59:65:87:65:a6:44:12:6e:d5:6f:8d:ec:
         aa:04:34:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:11 2024 by rpki-client on console-fra.rpki-client.org