Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3137382e3135322e302f32342d3234203d3e20313430343433.roa
File:                     3130332e3137382e3135322e302f32342d3234203d3e20313430343433.roa (raw, json)
Hash identifier:          4M0TTntNJ8gYnxsmyuJ1h/YqqFG1jn3edPIJg+7An4Q=
Subject key identifier:   1A:BF:9F:56:41:AA:39:1C:4C:1D:99:80:BD:10:3A:FA:54:14:E7:43
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       14D6CC1C83A801F632C83E1F191084EDB86F6039
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3137382e3135322e302f32342d3234203d3e20313430343433.roa
Signing time:             Tue 04 Jan 2022 07:31:22 +0000
ROA not before:           Tue 04 Jan 2022 07:26:22 +0000
ROA not after:            Wed 04 Jan 2023 07:31:22 +0000
asID:                     140443
IP address blocks:        103.178.152.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:d6:cc:1c:83:a8:01:f6:32:c8:3e:1f:19:10:84:ed:b8:6f:60:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jan  4 07:26:22 2022 GMT
            Not After : Jan  4 07:31:22 2023 GMT
        Subject: CN=3082010A0282010100E77C6C954E3E9C2C2C96A32DD5D435D7961B2160F50392C3BF57B74AD9C0FB6C336DFFA1159D1452215B1C267684D714CBD1BF0F40031862A24BC78DA1D1FFC4367276FAA331669693A5F4851B690AFCABE7762D746F13E6144AFDBEDC55E79C29CA704F62CE185821D4A1E86677CC64F8F6A45EABEC69A554FBE4047CFF855C6E99054E82D2A559813536232B45BD5BBC9CC37F7D5B21CE70527C44DDC155473C37ACB7DB9A108C2FAA5C1B1B0E2828714B0EFED6D36B7913C9FE3409E49DD03527DF4363DCD8D67076C34421A11E9A1FA04EA0B82E726437156B12BD6F8DEDE3772A1CC5BCCB4C70984278EF7373CECC48C21318EB146DA29F06031CD9AF2D0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:7c:6c:95:4e:3e:9c:2c:2c:96:a3:2d:d5:d4:
                    35:d7:96:1b:21:60:f5:03:92:c3:bf:57:b7:4a:d9:
                    c0:fb:6c:33:6d:ff:a1:15:9d:14:52:21:5b:1c:26:
                    76:84:d7:14:cb:d1:bf:0f:40:03:18:62:a2:4b:c7:
                    8d:a1:d1:ff:c4:36:72:76:fa:a3:31:66:96:93:a5:
                    f4:85:1b:69:0a:fc:ab:e7:76:2d:74:6f:13:e6:14:
                    4a:fd:be:dc:55:e7:9c:29:ca:70:4f:62:ce:18:58:
                    21:d4:a1:e8:66:77:cc:64:f8:f6:a4:5e:ab:ec:69:
                    a5:54:fb:e4:04:7c:ff:85:5c:6e:99:05:4e:82:d2:
                    a5:59:81:35:36:23:2b:45:bd:5b:bc:9c:c3:7f:7d:
                    5b:21:ce:70:52:7c:44:dd:c1:55:47:3c:37:ac:b7:
                    db:9a:10:8c:2f:aa:5c:1b:1b:0e:28:28:71:4b:0e:
                    fe:d6:d3:6b:79:13:c9:fe:34:09:e4:9d:d0:35:27:
                    df:43:63:dc:d8:d6:70:76:c3:44:21:a1:1e:9a:1f:
                    a0:4e:a0:b8:2e:72:64:37:15:6b:12:bd:6f:8d:ed:
                    e3:77:2a:1c:c5:bc:cb:4c:70:98:42:78:ef:73:73:
                    ce:cc:48:c2:13:18:eb:14:6d:a2:9f:06:03:1c:d9:
                    af:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:BF:9F:56:41:AA:39:1C:4C:1D:99:80:BD:10:3A:FA:54:14:E7:43
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3137382e3135322e302f32342d3234203d3e20313430343433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.178.152.0/24

    Signature Algorithm: sha256WithRSAEncryption
         49:37:05:68:ce:ee:e0:2b:c2:4e:46:df:70:b5:27:aa:ee:a4:
         a6:a1:42:a4:d9:8e:9a:dd:c8:8c:12:6e:23:f8:d3:1d:c4:78:
         9a:ae:fc:e2:58:52:e9:fc:fe:18:3a:91:3c:e9:d1:12:b9:1b:
         73:67:c4:a2:06:75:b1:ac:c0:44:a7:7f:e6:93:5e:c9:22:6e:
         76:0e:2f:c9:ed:71:dd:23:ea:c7:28:c1:4c:11:95:bd:5b:ba:
         36:fc:e3:71:9c:b8:66:9a:41:65:d9:19:1b:ab:14:6c:90:a7:
         b7:00:66:85:f7:4c:f6:20:6d:53:23:c6:a8:f3:2c:4e:6a:90:
         8f:91:ff:72:f5:7a:96:cb:f0:8d:28:cd:2c:38:b7:1b:d8:6c:
         a5:87:65:6f:fb:75:d6:b5:56:c0:bf:48:48:b2:7e:1e:68:17:
         69:5b:e8:11:65:49:e7:04:e6:fd:27:6f:63:85:0f:bf:80:88:
         74:e2:57:f8:ac:ba:d2:e2:40:78:cd:dd:60:6d:ad:fc:fd:d7:
         cf:ca:11:12:d3:f6:d0:82:b9:2f:e6:25:2c:77:26:49:d0:5f:
         3a:b4:7a:60:78:91:90:08:c6:3f:65:de:5c:b5:f3:91:2e:1b:
         b1:7b:a1:50:a1:77:fc:1d:00:e8:1f:8d:bf:81:0e:04:14:48:
         98:68:da:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:47 2024 by rpki-client on console-ams.rpki-client.org