Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3138322e3138342e302f32332d3234203d3e203137393935.roa
File:                     3130332e3138322e3138342e302f32332d3234203d3e203137393935.roa (raw, json)
Hash identifier:          4vsAJbPb9SctbZt/hH+8E7zc2UQ6rsG9VP7KrtsWZTU=
Subject key identifier:   44:1D:34:5B:BF:FA:1E:5B:08:56:F9:47:85:04:CA:AB:B9:8C:8B:27
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       591C4AA6044C9CDFCF2313A424E1FAA4130E5CB6
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3138322e3138342e302f32332d3234203d3e203137393935.roa
Signing time:             Thu 03 Mar 2022 07:25:26 +0000
ROA not before:           Thu 03 Mar 2022 07:20:26 +0000
ROA not after:            Fri 03 Mar 2023 07:25:26 +0000
asID:                     17995
IP address blocks:        103.182.184.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:1c:4a:a6:04:4c:9c:df:cf:23:13:a4:24:e1:fa:a4:13:0e:5c:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Mar  3 07:20:26 2022 GMT
            Not After : Mar  3 07:25:26 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:88:3e:c3:ee:10:3b:74:56:2d:56:42:a3:24:
                    05:ba:17:8b:fd:aa:c1:bf:3f:6d:1a:8a:b5:3c:2c:
                    a4:ae:80:d5:02:b7:83:93:65:73:f7:bf:d9:3e:00:
                    22:3c:f7:51:42:a5:09:89:4d:b6:f7:61:dc:48:e1:
                    ab:d4:91:71:e8:6c:3f:1e:36:51:be:cc:77:82:46:
                    ef:82:a7:5f:cb:77:42:ff:20:43:bd:34:52:fa:73:
                    de:20:15:89:bc:98:e0:e0:f1:ce:28:64:a5:f4:a5:
                    d2:f3:69:a1:de:84:80:ee:0a:c8:03:cc:dc:ac:96:
                    09:d9:35:7e:6a:99:7a:e3:b5:e9:8f:30:70:33:79:
                    e4:5c:0a:43:91:7b:5c:59:89:1a:1d:95:c8:02:ac:
                    d3:69:8e:9c:6f:e1:40:28:ba:fe:94:b5:c3:e3:9a:
                    81:c9:12:a5:64:59:65:e9:5e:87:fc:f0:d0:00:54:
                    6e:0f:c7:0d:3f:a4:d1:5f:f4:91:15:50:0b:54:ec:
                    39:b3:5f:ea:1c:ff:7e:17:75:7a:ec:63:97:3d:98:
                    2c:49:cf:cd:16:ce:38:fa:ae:78:d4:b7:e7:7e:79:
                    a2:c8:7f:76:52:ff:e4:fd:87:8a:8c:45:2f:f2:66:
                    ce:cf:b7:cd:80:81:fc:97:ce:bf:c0:8e:ba:d5:79:
                    e0:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:1D:34:5B:BF:FA:1E:5B:08:56:F9:47:85:04:CA:AB:B9:8C:8B:27
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3138322e3138342e302f32332d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.182.184.0/23

    Signature Algorithm: sha256WithRSAEncryption
         81:d0:c9:69:0c:35:26:58:60:b7:0d:ed:07:98:ec:67:aa:c6:
         c8:d7:a3:82:9b:cb:a2:55:46:9d:ec:fb:31:82:70:99:84:24:
         95:4a:75:58:11:80:57:b0:6f:08:c5:47:dc:8e:e9:89:03:cf:
         d1:34:0f:52:09:4e:d7:af:d4:82:21:12:3c:ac:fc:e8:30:48:
         bf:72:28:08:88:5d:cb:79:0e:ba:b6:e4:78:7e:8b:3b:a9:55:
         d0:5d:0d:e8:fa:ff:6a:b9:83:ce:44:fe:46:ed:d2:87:4c:a6:
         de:9c:fa:11:b3:fc:52:29:ac:3d:8c:6d:ba:9c:2c:21:98:43:
         ec:8c:e7:25:29:b6:ae:76:4b:13:98:36:02:65:84:e8:70:a6:
         4c:ff:7d:a8:fb:f7:61:c6:39:4c:92:c9:84:9b:0a:e4:d7:f4:
         7e:f0:c0:46:34:e9:34:bb:45:68:2b:92:9e:25:ab:27:8b:52:
         05:36:3a:58:db:86:6a:17:06:fd:27:97:d3:04:ba:eb:23:23:
         da:af:fd:e6:0b:50:54:0d:60:94:63:79:6a:dd:4c:1f:c4:77:
         0d:d3:e1:e7:78:2a:c6:de:56:a6:ae:5e:48:8a:ba:ab:3f:2f:
         7c:98:96:7a:ae:0d:d3:3b:6f:bb:dc:ad:53:49:b0:b2:f5:f7:
         d5:7d:93:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:11 2024 by rpki-client on console-fra.rpki-client.org