Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3138322e3138382e302f32332d3234203d3e203137393935.roa
File:                     3130332e3138322e3138382e302f32332d3234203d3e203137393935.roa (raw, json)
Hash identifier:          FXvS/kcsmsgK5uMs+jBsdviMqDC5K50qN269NAYA8go=
Subject key identifier:   10:5B:EB:A8:9E:A7:90:59:B4:AB:8D:43:CF:72:27:B0:28:73:9B:AC
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       3E9D94014CA07F2EE500EC1D76420B89E9304D88
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3138322e3138382e302f32332d3234203d3e203137393935.roa
Signing time:             Thu 03 Mar 2022 07:25:28 +0000
ROA not before:           Thu 03 Mar 2022 07:20:28 +0000
ROA not after:            Fri 03 Mar 2023 07:25:28 +0000
asID:                     17995
IP address blocks:        103.182.188.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:9d:94:01:4c:a0:7f:2e:e5:00:ec:1d:76:42:0b:89:e9:30:4d:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Mar  3 07:20:28 2022 GMT
            Not After : Mar  3 07:25:28 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:c4:5c:39:92:60:4f:53:f6:5a:99:0d:62:d4:
                    dc:8c:e0:91:b5:14:da:6f:3b:bf:18:02:9a:6c:23:
                    4d:b9:93:ea:19:44:31:50:13:8f:2a:89:5c:7f:9c:
                    6a:88:33:21:9a:4c:da:09:52:49:e0:94:93:36:2c:
                    db:04:13:b5:aa:51:50:50:07:3b:d1:02:c9:4b:22:
                    24:e8:16:19:4e:68:4c:34:a7:25:f4:f5:ae:fe:48:
                    ec:3d:ce:af:78:74:ef:9f:be:a6:4c:2e:9c:24:8e:
                    96:e0:b7:22:35:7e:25:91:f6:39:04:c6:cd:cd:0b:
                    79:16:21:3f:4e:01:ea:6e:ec:9e:96:33:95:57:fb:
                    c3:47:bc:86:e6:54:fc:9a:c9:a4:fd:9e:7d:ff:81:
                    a7:3e:94:e8:fa:a1:e0:2c:03:3d:32:ca:56:cc:fe:
                    47:ed:42:a6:2e:f2:8c:c6:d1:53:f7:f3:21:fc:84:
                    15:e1:28:1b:2d:80:43:42:2f:b0:53:c1:b1:b5:bd:
                    2b:b1:6f:5b:34:5e:8e:82:42:b3:0d:ff:8e:cf:33:
                    31:89:00:7e:5b:aa:2c:8f:df:7e:db:79:47:04:02:
                    32:88:c9:b8:08:5c:9e:60:eb:04:9b:f0:0a:b8:f6:
                    4c:bb:36:68:ce:97:e5:b4:0b:d1:22:a0:fe:fc:80:
                    d9:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:5B:EB:A8:9E:A7:90:59:B4:AB:8D:43:CF:72:27:B0:28:73:9B:AC
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3138322e3138382e302f32332d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.182.188.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6b:d0:73:48:8d:31:c7:b2:5e:74:57:d9:2f:3c:b4:1c:43:80:
         fe:18:be:dd:2e:7a:da:eb:f7:b8:77:42:cf:a3:47:59:94:44:
         46:ab:63:c2:db:f2:90:7c:f0:7f:40:3b:ea:48:44:1d:ce:f9:
         dd:7d:c0:a9:e1:c3:05:b6:9a:6d:03:27:3c:a8:ef:89:fe:fa:
         09:66:8d:31:b3:26:31:de:8c:ad:bd:45:fa:91:2f:dd:e0:12:
         6c:0f:25:6e:22:a7:35:26:a9:5a:77:b2:ba:f8:33:1a:61:d5:
         3b:ea:09:f5:6c:58:4a:d9:00:27:c6:07:71:28:3b:b5:35:49:
         b7:94:d9:33:bd:03:70:e5:08:d0:1c:c0:3c:7a:c9:52:ad:98:
         56:1a:23:aa:8a:fb:a8:53:79:21:71:4b:79:0c:f9:0f:56:64:
         95:c6:7a:e4:45:a4:91:0f:ee:57:7c:40:a8:1b:64:02:9f:d0:
         f7:0d:89:e3:0a:73:32:5c:87:b6:0e:2a:89:8c:85:1c:cc:92:
         fc:43:ca:de:7c:09:a5:89:05:17:3b:4a:3a:39:83:ca:10:fd:
         f8:00:e4:38:f8:ee:dd:c3:63:fb:bf:9a:99:eb:31:a3:f7:d7:
         97:a9:20:cd:d5:67:7e:f7:8b:8d:71:e7:fa:d3:99:15:bb:33:
         72:b3:2f:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:11 2024 by rpki-client on console-fra.rpki-client.org