Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3137352e3231312e302f32342d3234203d3e203435373237.roa
File:                     3130332e3137352e3231312e302f32342d3234203d3e203435373237.roa (raw, json)
Hash identifier:          z+uRGMLuqnd/7vAlbi3lip2e3ADr9dz6hOX5TUmQ3Jw=
Subject key identifier:   70:3E:92:21:93:21:25:E6:A4:E9:03:99:10:ED:F3:CF:A0:FC:93:2C
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       3443CBCB58760B199EAC75EFD20A443C8B7B7EA1
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3137352e3231312e302f32342d3234203d3e203435373237.roa
Signing time:             Tue 14 Dec 2021 02:40:08 +0000
ROA not before:           Tue 14 Dec 2021 02:35:08 +0000
ROA not after:            Wed 14 Dec 2022 02:40:08 +0000
asID:                     45727
IP address blocks:        103.175.211.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:43:cb:cb:58:76:0b:19:9e:ac:75:ef:d2:0a:44:3c:8b:7b:7e:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Dec 14 02:35:08 2021 GMT
            Not After : Dec 14 02:40:08 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:df:1b:71:36:1a:b4:76:8e:86:90:48:05:ee:
                    a2:f5:2c:d9:b3:b9:ec:f8:d6:87:a9:03:cb:6f:87:
                    2d:38:ca:79:73:e1:e1:fe:83:fe:1e:2b:47:22:9d:
                    c7:d1:d1:0a:3e:c6:f7:72:1a:cd:65:14:22:6c:2d:
                    fb:87:47:ea:50:ab:99:d7:76:98:4a:f8:a0:af:50:
                    29:5e:71:0e:8f:41:07:93:34:0a:b2:d2:d6:49:c4:
                    07:af:d0:9a:62:27:56:11:7e:51:a5:09:45:39:13:
                    a0:05:9e:06:14:ed:e7:12:58:24:4e:37:69:c1:e5:
                    ee:d0:1c:1c:13:46:2b:f7:be:ca:d1:a7:cc:41:5f:
                    65:26:af:16:cf:f2:13:54:0c:1b:27:73:b7:15:d5:
                    7a:6b:aa:19:13:09:5a:e0:50:b0:20:ad:c2:7f:a0:
                    cb:ee:61:40:b9:52:aa:25:eb:01:90:7d:b9:ce:b4:
                    69:d4:cc:af:89:06:6b:0f:10:61:88:21:6c:bd:a5:
                    5d:b7:e2:9d:b6:7c:fb:ea:d2:4b:7f:81:16:ef:7e:
                    40:54:35:26:cb:e8:18:3b:e0:a3:f2:e3:71:2b:fd:
                    1a:bf:4d:c6:61:2d:29:1f:bf:50:c1:98:89:de:fe:
                    6f:75:3b:49:03:78:3a:2f:b9:ab:c7:f3:1e:1b:33:
                    74:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:3E:92:21:93:21:25:E6:A4:E9:03:99:10:ED:F3:CF:A0:FC:93:2C
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3137352e3231312e302f32342d3234203d3e203435373237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.175.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:ec:74:a5:80:67:be:50:ca:7f:5b:3d:ef:1c:d6:34:fd:f2:
         34:58:49:19:a6:a4:5d:88:f4:d0:02:8d:5f:89:62:e7:a5:32:
         36:b0:fe:58:b7:76:31:13:31:0b:d6:f0:8c:d7:ee:97:f5:8a:
         93:d2:7e:72:f3:b9:7e:f8:86:36:95:af:e7:83:08:75:f1:0e:
         b1:8c:aa:bc:83:c1:2b:65:86:a8:f5:91:ac:17:47:9d:26:5d:
         29:8e:80:13:15:b0:7f:08:b0:2f:2b:38:bc:ff:32:76:33:c6:
         98:84:63:2f:56:95:5b:d9:5c:9b:8d:fc:0c:e2:d6:27:2b:fa:
         ee:67:5f:01:93:4d:ef:a7:df:8b:4f:b9:05:25:5c:54:6a:58:
         96:e1:d0:88:58:7c:45:9a:1d:08:9d:2a:50:a2:8a:69:d0:4b:
         ac:e6:5d:2d:94:a2:55:f8:b4:33:8c:98:1c:4e:02:08:89:99:
         75:ea:f2:84:25:9a:46:6c:41:f2:f1:be:71:11:d8:2e:21:86:
         a4:ca:fe:ba:c1:11:63:30:f8:40:c4:52:61:ae:de:54:f1:c6:
         b1:f1:8a:fc:ad:e3:95:59:b8:3f:fc:14:86:a0:7d:6c:e8:25:
         e4:2a:f5:de:9f:5c:3f:9a:92:25:0c:6e:66:53:41:d7:e0:ab:
         89:ce:03:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:11 2024 by rpki-client on console-fra.rpki-client.org