Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3138322e3138302e302f32332d3234203d3e203137393935.roa
File:                     3130332e3138322e3138302e302f32332d3234203d3e203137393935.roa (raw, json)
Hash identifier:          ZplzdyQaV6RSGANbtb2pBpzecz9nW1HFsIivTiwdGZM=
Subject key identifier:   D6:3D:D1:C1:63:D1:39:88:EF:B4:CD:2B:B8:D5:DC:3D:40:FD:25:4C
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       1DC1DFC474525A58A9FCF2C94E33F74C1624D47C
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3138322e3138302e302f32332d3234203d3e203137393935.roa
Signing time:             Thu 03 Mar 2022 07:25:27 +0000
ROA not before:           Thu 03 Mar 2022 07:20:27 +0000
ROA not after:            Fri 03 Mar 2023 07:25:27 +0000
asID:                     17995
IP address blocks:        103.182.180.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:c1:df:c4:74:52:5a:58:a9:fc:f2:c9:4e:33:f7:4c:16:24:d4:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Mar  3 07:20:27 2022 GMT
            Not After : Mar  3 07:25:27 2023 GMT
        Subject: CN=3082010A0282010100B9E8B3C32F961A0EE2204C995BDB45496996E28F667E7FA2E13EC9CEAAB5F229754B4FA80E9178850D735EECE37635D4B59FC2ACC9194F50876FF925F37F218E466B000D31D0EDB8CB927485BEC24C5131BA49B2850673E79FFA83360567F32B9CE7387A712F6BD063358A63E05603B155BD6264650FF52D66193A8BC26D7AA88CF81623C0A95D7EDE2C7399EB49E16D2898DD2CB14D474DEF4FDB303C2683B9F40B638F936B34D107710DB1311D5A70AB4DD5D23D57F75C2CDA5480101DF13C9CFE20AB95572F89DB55541EF824CC2BA3DDE735C6482B89609C37DA9E53E24A34D4A37BF29AB7AB056104DE854A5B3731E19ECE69A4E9F7630E454C077F09B10203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e8:b3:c3:2f:96:1a:0e:e2:20:4c:99:5b:db:
                    45:49:69:96:e2:8f:66:7e:7f:a2:e1:3e:c9:ce:aa:
                    b5:f2:29:75:4b:4f:a8:0e:91:78:85:0d:73:5e:ec:
                    e3:76:35:d4:b5:9f:c2:ac:c9:19:4f:50:87:6f:f9:
                    25:f3:7f:21:8e:46:6b:00:0d:31:d0:ed:b8:cb:92:
                    74:85:be:c2:4c:51:31:ba:49:b2:85:06:73:e7:9f:
                    fa:83:36:05:67:f3:2b:9c:e7:38:7a:71:2f:6b:d0:
                    63:35:8a:63:e0:56:03:b1:55:bd:62:64:65:0f:f5:
                    2d:66:19:3a:8b:c2:6d:7a:a8:8c:f8:16:23:c0:a9:
                    5d:7e:de:2c:73:99:eb:49:e1:6d:28:98:dd:2c:b1:
                    4d:47:4d:ef:4f:db:30:3c:26:83:b9:f4:0b:63:8f:
                    93:6b:34:d1:07:71:0d:b1:31:1d:5a:70:ab:4d:d5:
                    d2:3d:57:f7:5c:2c:da:54:80:10:1d:f1:3c:9c:fe:
                    20:ab:95:57:2f:89:db:55:54:1e:f8:24:cc:2b:a3:
                    dd:e7:35:c6:48:2b:89:60:9c:37:da:9e:53:e2:4a:
                    34:d4:a3:7b:f2:9a:b7:ab:05:61:04:de:85:4a:5b:
                    37:31:e1:9e:ce:69:a4:e9:f7:63:0e:45:4c:07:7f:
                    09:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:3D:D1:C1:63:D1:39:88:EF:B4:CD:2B:B8:D5:DC:3D:40:FD:25:4C
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3138322e3138302e302f32332d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.182.180.0/23

    Signature Algorithm: sha256WithRSAEncryption
         1b:37:b6:ca:87:c0:1a:8b:f4:09:f8:fe:a3:84:bc:96:ea:67:
         de:b7:83:6c:94:d6:1e:62:06:50:d1:74:59:99:0e:df:9c:4b:
         5d:94:f9:ab:ec:6c:29:fa:01:9a:66:db:54:c4:62:b0:ef:dc:
         bc:f6:83:13:50:a1:ee:82:0e:a5:7c:34:00:6b:b0:78:4e:b0:
         5d:f6:7b:8f:36:29:bd:6a:1f:7e:0a:9c:e6:9e:ec:4a:e1:ba:
         0d:33:b1:58:f3:6d:fa:e8:6f:cd:6d:8e:fe:67:78:88:ab:7f:
         01:64:fe:d3:63:f3:60:35:6e:cf:86:1e:11:cf:9d:aa:14:12:
         07:a6:f6:66:9c:5f:c8:31:d3:32:d1:f6:4d:b2:b9:6a:8f:2a:
         6a:b5:03:36:2c:46:ee:3a:8b:35:14:0f:9f:cd:45:b1:c6:a4:
         6e:1e:a4:40:ad:21:c3:92:2a:2b:1b:ae:ac:3d:fe:54:ec:6a:
         6b:61:6d:8a:77:8b:3f:80:8c:b1:0d:7d:6e:50:61:60:46:5f:
         db:00:2f:5b:5a:2d:6d:65:18:4c:b7:01:32:74:d2:92:13:66:
         06:8b:df:5f:87:5a:32:92:a9:48:08:a2:86:88:86:ed:7f:bf:
         44:17:c6:6f:a5:8c:94:6b:5c:70:3e:8c:6e:65:40:8f:d0:f7:
         6e:72:50:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:47 2024 by rpki-client on console-ams.rpki-client.org