Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3137302e32332e302f32342d3234203d3e20313432333539.roa
File:                     3130332e3137302e32332e302f32342d3234203d3e20313432333539.roa (raw, json)
Hash identifier:          ouw0KulYZJn3yamHN0CIVMq3qlOIyri41GWd+BWUu1Q=
Subject key identifier:   4A:68:C8:F1:94:09:7D:03:18:D2:FF:F9:5E:03:9A:6D:62:2D:79:91
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       6B8CF8126E068BCF1853438E3754106E44443F64
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3137302e32332e302f32342d3234203d3e20313432333539.roa
Signing time:             Mon 06 Sep 2021 04:12:07 +0000
ROA not before:           Mon 06 Sep 2021 04:07:07 +0000
ROA not after:            Tue 06 Sep 2022 04:12:07 +0000
asID:                     142359
IP address blocks:        103.170.23.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:8c:f8:12:6e:06:8b:cf:18:53:43:8e:37:54:10:6e:44:44:3f:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Sep  6 04:07:07 2021 GMT
            Not After : Sep  6 04:12:07 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:d8:cb:28:25:0f:c3:e9:67:93:cc:89:16:5c:
                    31:06:8e:de:0e:03:47:95:83:be:e0:07:d8:38:c3:
                    00:52:1e:cf:b0:28:8e:ac:ef:6b:48:67:ed:4c:93:
                    8a:d2:f6:b3:4b:97:47:e9:4b:d2:eb:58:2c:f3:e8:
                    ce:05:32:46:fa:b7:61:4c:88:c3:68:bf:b9:0e:14:
                    8d:d7:49:4d:04:56:8d:33:27:4e:25:97:4b:79:40:
                    f1:18:60:8e:4f:a4:b3:98:f7:1f:27:de:a4:73:67:
                    75:64:1b:47:5c:7f:d2:1d:85:7c:fe:17:7a:20:1b:
                    0d:6a:6d:71:42:fa:8d:d5:dd:24:36:86:03:17:70:
                    b6:a2:0f:48:56:08:d9:b0:08:c7:5f:f3:18:59:5d:
                    aa:e2:80:50:56:bf:8d:53:13:80:b8:0b:54:cd:41:
                    6f:0e:b1:92:e7:93:06:ba:54:f4:0e:bf:24:d9:a7:
                    c5:6b:8a:dd:75:ae:93:f8:e0:12:23:77:e6:b2:ca:
                    9e:21:7b:34:78:20:fe:00:3a:13:61:56:39:aa:63:
                    08:80:d1:58:eb:38:a5:72:2b:81:4b:a1:38:59:48:
                    0f:db:61:99:a5:3b:9c:86:39:de:a2:34:a6:b6:8c:
                    f0:d5:9b:a6:bd:5e:25:2f:25:91:d4:2f:c3:84:49:
                    e8:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:68:C8:F1:94:09:7D:03:18:D2:FF:F9:5E:03:9A:6D:62:2D:79:91
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3137302e32332e302f32342d3234203d3e20313432333539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.170.23.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9b:a2:aa:6c:9e:cf:5c:ec:d0:6c:50:9d:b6:00:59:a9:0a:e1:
         48:09:53:b7:d2:f4:8c:df:0d:39:d1:3d:f7:bf:10:5c:b4:47:
         48:55:9f:23:e7:88:8a:0a:48:d1:af:ed:73:90:ba:0e:d7:cb:
         72:b5:45:23:2b:e6:d6:4b:c5:e8:57:37:66:85:8b:78:b8:a1:
         a8:d6:7b:c1:90:50:47:cd:d4:b9:1e:73:c9:10:1b:38:0d:84:
         25:e9:d5:d2:f8:30:31:0d:1f:72:44:22:17:57:65:34:5a:d7:
         e9:f3:df:92:3a:af:cd:9d:b4:aa:cb:fc:c2:61:62:23:9a:ba:
         2c:2c:b5:a9:ac:7a:5e:d0:88:7f:b3:d7:70:6c:8b:f0:00:67:
         a1:30:7a:63:d8:31:b9:66:4b:00:b8:29:6d:f2:fa:1e:e7:86:
         ad:f5:cc:3c:4b:77:bf:79:e7:33:42:27:9c:f4:f8:a3:07:5e:
         38:67:35:60:c2:69:9c:a6:ad:31:c5:1a:b6:43:5b:b3:9b:df:
         5d:d5:72:f8:79:7d:7d:4a:f3:ee:07:fd:33:d0:73:65:17:0e:
         0d:9f:9c:4d:df:1f:92:85:24:1c:c2:49:0a:95:a2:64:db:56:
         0f:ff:cf:4c:52:97:25:33:8d:65:be:a1:e9:04:54:41:5f:ae:
         9b:a0:37:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:11 2024 by rpki-client on console-fra.rpki-client.org