Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3138322e3230342e302f32332d3234203d3e203137393935.roa
File:                     3130332e3138322e3230342e302f32332d3234203d3e203137393935.roa (raw, json)
Hash identifier:          aJTgsTFvtO+CJHFBnmZiQVsBl27MOA2t/1OKHt29FDE=
Subject key identifier:   70:17:6E:1A:57:4E:C2:05:1A:8F:47:68:B8:AF:B5:9A:6C:FA:B5:18
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       0BB4E0CC57201FC143E8461818ABDFEF6EE8A3DF
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3138322e3230342e302f32332d3234203d3e203137393935.roa
Signing time:             Thu 03 Mar 2022 07:25:26 +0000
ROA not before:           Thu 03 Mar 2022 07:20:26 +0000
ROA not after:            Fri 03 Mar 2023 07:25:26 +0000
asID:                     17995
IP address blocks:        103.182.204.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:b4:e0:cc:57:20:1f:c1:43:e8:46:18:18:ab:df:ef:6e:e8:a3:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Mar  3 07:20:26 2022 GMT
            Not After : Mar  3 07:25:26 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:38:f9:a0:06:b6:80:b5:00:bc:19:21:9b:cd:
                    12:fd:53:56:24:e4:5e:18:f1:81:ac:c0:a8:66:48:
                    72:e9:44:d2:a1:c5:d9:66:0e:8c:79:53:ed:46:06:
                    da:47:8f:44:28:75:fa:39:07:2e:fd:54:2e:65:2a:
                    3e:38:c9:11:e7:ad:5b:2c:a4:a1:31:78:3c:03:bb:
                    18:42:35:ad:ba:df:e7:19:13:31:68:92:2b:4e:c7:
                    40:77:0b:ec:37:94:70:a7:aa:21:67:94:a6:9a:06:
                    b6:bf:6a:c0:49:f7:32:15:d8:75:08:8a:e1:fa:f8:
                    ba:28:b6:ff:18:2c:57:ac:d2:4f:3f:17:46:ed:4a:
                    a3:76:81:41:75:60:d4:97:f8:5c:5e:bc:93:9f:5e:
                    d6:0d:a5:b2:41:2f:aa:0f:45:92:ac:90:31:44:44:
                    5c:4e:6a:6f:9d:b1:3b:85:11:77:41:14:b9:e9:60:
                    fd:b0:c2:54:1f:d9:c4:6b:bb:ed:d3:56:62:23:87:
                    b4:d7:70:5d:9b:98:3e:e4:70:93:bd:df:e4:fc:a8:
                    f8:43:25:d1:83:7d:6e:8c:b3:9e:53:8d:c7:7e:ac:
                    d1:1c:f1:d2:4f:b9:d5:ea:48:3f:03:07:f5:bd:6b:
                    26:61:05:96:98:40:18:51:07:1d:72:e6:fe:58:74:
                    69:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:17:6E:1A:57:4E:C2:05:1A:8F:47:68:B8:AF:B5:9A:6C:FA:B5:18
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3138322e3230342e302f32332d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.182.204.0/23

    Signature Algorithm: sha256WithRSAEncryption
         14:d7:b0:67:05:6b:6d:fb:d5:1e:25:d5:bc:99:da:fc:28:48:
         e4:8d:8f:75:f2:38:92:4c:92:43:8e:b5:c7:c9:aa:06:63:8d:
         6a:21:1d:64:c2:56:78:5e:37:43:22:bd:94:be:34:a4:24:f5:
         7e:13:2a:51:68:1c:5b:2c:3d:90:dc:51:d3:4f:b8:12:0b:51:
         97:2e:1d:09:8f:b7:98:29:3d:60:00:42:c5:8c:e8:ec:c2:53:
         a0:5a:f3:c6:fb:ad:57:da:10:af:cf:e5:93:c5:fe:e3:96:43:
         f6:f2:6f:73:0b:af:2d:b7:ac:3c:ec:01:bb:90:81:d7:2c:d0:
         a3:76:fe:c1:f6:a4:fa:6a:d3:d1:13:0b:c9:9f:22:68:3c:ad:
         1f:0d:45:43:a1:31:d9:73:0b:69:f5:7d:c9:d5:c9:fe:2d:f2:
         e7:74:f5:78:8c:5e:08:fc:66:b0:d5:c5:3f:c4:8d:f5:9a:e1:
         f7:83:9d:2d:bb:30:a4:68:3f:04:22:4e:2c:3d:19:7b:44:fa:
         e9:c3:97:c7:7f:d8:b1:55:69:7b:ec:05:08:fa:07:bc:74:97:
         27:1d:bb:07:6a:c7:df:7e:50:8e:c6:fd:50:dd:c2:24:a9:92:
         20:55:e9:eb:2d:f3:84:e4:29:8e:47:58:6b:6c:cc:3b:5a:39:
         05:90:83:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:11 2024 by rpki-client on console-fra.rpki-client.org