Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3137352e3135362e302f32332d3234203d3e20313437313230.roa
File:                     3130332e3137352e3135362e302f32332d3234203d3e20313437313230.roa (raw, json)
Hash identifier:          BzngoniFcFOCiGuhzpLHaF+ahkSJytf9FpOJbpORwoI=
Subject key identifier:   EF:DE:32:8D:A5:83:45:98:CD:33:43:F8:1D:C9:88:1C:65:7D:F3:C9
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       677DD87F0BD78FAF0D2F40F2820F9AC67B56C7BE
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3137352e3135362e302f32332d3234203d3e20313437313230.roa
Signing time:             Mon 24 Jan 2022 08:58:14 +0000
ROA not before:           Mon 24 Jan 2022 08:53:14 +0000
ROA not after:            Tue 24 Jan 2023 08:58:14 +0000
asID:                     147120
IP address blocks:        103.175.156.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:7d:d8:7f:0b:d7:8f:af:0d:2f:40:f2:82:0f:9a:c6:7b:56:c7:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jan 24 08:53:14 2022 GMT
            Not After : Jan 24 08:58:14 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:de:86:e0:19:09:c5:85:bb:6f:86:ce:31:78:
                    dc:2d:4e:e0:d6:d2:2a:02:dc:76:70:31:7d:1c:09:
                    d3:10:cc:83:1f:99:af:34:7f:11:ff:e8:2d:f6:75:
                    78:2c:b1:51:98:08:26:8e:7c:c5:35:e5:87:56:ae:
                    5d:40:9d:ec:13:9b:3b:04:ca:1a:1b:3f:c3:2a:ff:
                    bd:8f:3c:af:18:b6:10:7c:83:13:17:a5:71:a2:d5:
                    e3:1c:91:ce:be:10:ef:ca:7e:e1:bd:bc:1e:e9:09:
                    46:7e:d5:a7:25:2b:76:b7:95:44:92:b5:5d:77:f1:
                    26:71:6a:93:bb:fd:48:fc:00:fd:1d:dc:a4:90:ff:
                    5c:df:48:60:1a:4c:ae:07:f0:8e:63:bc:e0:1a:b3:
                    4d:e6:29:6e:47:7f:35:28:df:67:a7:0d:52:70:bc:
                    72:0e:ee:66:49:47:b9:9d:32:99:a7:ff:ac:46:e7:
                    2f:75:1b:23:9b:67:a9:7c:74:15:03:fb:bf:54:f5:
                    de:78:23:09:39:2b:e2:19:5c:41:01:e9:ac:9a:0c:
                    d3:e4:79:25:b5:b6:5a:23:f2:e3:9e:e6:23:5f:d9:
                    f2:74:83:67:d8:d2:23:a1:dd:d5:18:51:03:94:08:
                    50:72:4d:fd:ca:6b:b6:91:8d:46:8b:0b:bd:10:f5:
                    f2:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:DE:32:8D:A5:83:45:98:CD:33:43:F8:1D:C9:88:1C:65:7D:F3:C9
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3137352e3135362e302f32332d3234203d3e20313437313230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.175.156.0/23

    Signature Algorithm: sha256WithRSAEncryption
         61:91:48:e9:38:27:f5:d7:43:8c:8e:c8:b7:21:9a:c7:98:ad:
         39:b4:77:57:37:0a:de:b9:a3:43:27:61:0e:4c:3e:d8:51:b7:
         3e:d7:c7:31:f3:48:33:fb:08:5e:17:48:30:4e:0f:1e:b4:97:
         6d:cf:5d:46:25:be:55:03:8e:4f:74:89:a5:04:02:6d:fa:fc:
         e8:a4:de:9f:1d:18:8b:44:36:a5:9f:b7:d1:56:b4:f7:e3:61:
         ea:f1:32:75:f2:07:2f:e9:15:99:2f:cb:a9:55:35:58:97:3d:
         5e:e3:df:72:ba:d5:2e:8f:e2:49:c7:aa:ef:4f:47:3d:5c:19:
         13:71:c0:35:1b:f8:0e:a2:9a:a9:bc:a6:6a:e0:7a:0b:f3:6c:
         80:6b:e7:10:ad:3e:f2:16:ac:d2:00:a2:f1:8a:14:26:44:d6:
         39:d4:24:72:36:70:c5:b2:e1:1f:1e:1a:ff:eb:0b:98:0c:f2:
         34:38:9f:d8:09:8d:fb:d5:b2:0e:37:37:5b:3f:a8:13:43:57:
         01:2e:1c:bf:ba:18:3a:48:55:80:8f:4f:db:28:6f:fc:b5:05:
         0c:78:b7:a1:f9:e8:60:64:1e:1b:c6:14:af:c4:a9:16:b9:81:
         23:e4:6e:2a:41:26:7b:72:fb:14:79:36:34:06:57:35:e1:55:
         ba:b6:1e:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:11 2024 by rpki-client on console-fra.rpki-client.org