Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3137372e39342e302f32332d3234203d3e20313431393638.roa
File:                     3130332e3137372e39342e302f32332d3234203d3e20313431393638.roa (raw, json)
Hash identifier:          4IPBHK50StatwH3fipwFHCh81rv7OiAKfxl8YrwrpOY=
Subject key identifier:   3D:C0:9F:0C:57:75:A0:86:B0:C6:91:F4:FC:91:D9:77:FC:56:77:06
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       1F2E0D31B45117C50B882D41931E367C8DA6968A
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3137372e39342e302f32332d3234203d3e20313431393638.roa
Signing time:             Mon 06 Dec 2021 03:59:37 +0000
ROA not before:           Mon 06 Dec 2021 03:54:37 +0000
ROA not after:            Tue 06 Dec 2022 03:59:37 +0000
asID:                     141968
IP address blocks:        103.177.94.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:2e:0d:31:b4:51:17:c5:0b:88:2d:41:93:1e:36:7c:8d:a6:96:8a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Dec  6 03:54:37 2021 GMT
            Not After : Dec  6 03:59:37 2022 GMT
        Subject: CN=3082010A0282010100BB46C2EDA09EB0EE7DF58E3D4DB61AF460752DA3622E62853229850AEF7540DD67CE1FAAEC9941016946076CE199AB34443CE1B6DE656F01FB2B71A85FF3E004223DD0DC1A678D79C4C637729A7B143D7CFFA4F5735A30E3BD1FCE1BE3ED9CAA613D7C1AA085A8F7563B9C3453B4BD8090D7E0CA45D5C6A01E4C2D33160CC0B30A85C0E2597A9012B423CD2AB8DEB5AD05E9938A33FDC8DD296636AF42960038371786DC4B31A2C9F9AFA0F0171295EA81BEFB6A05EBD3B72AA4A48BB330C7ACFE213E73096ED0625403C788826FAC3D39371BE5C34AD744D5FD650A6B20213930719444F99851E493C30B7EC45FE7814E08FAFFEE000BE2BAC86412B891D0C50203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:46:c2:ed:a0:9e:b0:ee:7d:f5:8e:3d:4d:b6:
                    1a:f4:60:75:2d:a3:62:2e:62:85:32:29:85:0a:ef:
                    75:40:dd:67:ce:1f:aa:ec:99:41:01:69:46:07:6c:
                    e1:99:ab:34:44:3c:e1:b6:de:65:6f:01:fb:2b:71:
                    a8:5f:f3:e0:04:22:3d:d0:dc:1a:67:8d:79:c4:c6:
                    37:72:9a:7b:14:3d:7c:ff:a4:f5:73:5a:30:e3:bd:
                    1f:ce:1b:e3:ed:9c:aa:61:3d:7c:1a:a0:85:a8:f7:
                    56:3b:9c:34:53:b4:bd:80:90:d7:e0:ca:45:d5:c6:
                    a0:1e:4c:2d:33:16:0c:c0:b3:0a:85:c0:e2:59:7a:
                    90:12:b4:23:cd:2a:b8:de:b5:ad:05:e9:93:8a:33:
                    fd:c8:dd:29:66:36:af:42:96:00:38:37:17:86:dc:
                    4b:31:a2:c9:f9:af:a0:f0:17:12:95:ea:81:be:fb:
                    6a:05:eb:d3:b7:2a:a4:a4:8b:b3:30:c7:ac:fe:21:
                    3e:73:09:6e:d0:62:54:03:c7:88:82:6f:ac:3d:39:
                    37:1b:e5:c3:4a:d7:44:d5:fd:65:0a:6b:20:21:39:
                    30:71:94:44:f9:98:51:e4:93:c3:0b:7e:c4:5f:e7:
                    81:4e:08:fa:ff:ee:00:0b:e2:ba:c8:64:12:b8:91:
                    d0:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:C0:9F:0C:57:75:A0:86:B0:C6:91:F4:FC:91:D9:77:FC:56:77:06
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3137372e39342e302f32332d3234203d3e20313431393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.177.94.0/23

    Signature Algorithm: sha256WithRSAEncryption
         08:e8:83:d1:5f:ad:39:f7:1d:57:4a:19:ff:f0:d6:95:71:76:
         25:d0:70:e9:5c:f1:8b:b4:56:29:83:74:8b:78:d6:18:fb:5e:
         eb:37:23:2d:b9:a4:46:3b:28:95:ea:a3:8c:3f:34:15:df:1a:
         09:6e:d6:42:a5:3a:df:03:86:c1:70:a4:ca:de:9a:42:a6:23:
         32:0b:03:2e:a9:31:aa:a5:64:83:5a:bf:1f:ba:ea:a8:94:8f:
         a8:6b:0b:44:a3:c5:29:c6:3c:b5:3b:54:e3:91:23:1f:61:12:
         b9:18:26:aa:f5:12:3a:4a:eb:e5:40:a6:51:53:1b:89:be:5d:
         7e:de:d2:c0:ee:28:ae:de:43:13:02:74:c9:b1:36:76:8f:11:
         05:4f:95:49:8a:02:2d:93:6a:77:15:82:c2:a3:13:43:d0:1d:
         33:fb:71:45:2e:d9:fb:d0:08:fb:05:f9:88:87:f5:3e:a6:ca:
         70:05:7d:c8:78:e2:fa:78:be:0c:b8:3e:ad:cf:a6:0f:1c:73:
         79:b9:c4:b1:81:4e:c8:11:1f:10:26:87:d4:e6:11:58:83:37:
         c4:35:54:74:11:7c:ce:a6:89:91:6c:c9:3e:29:90:ec:fe:f8:
         56:da:6f:15:2e:07:ef:28:02:26:63:2a:f4:5d:1c:3b:d8:9f:
         4b:0b:08:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:47 2024 by rpki-client on console-ams.rpki-client.org