Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3138322e3230382e302f32332d3234203d3e203137393935.roa
File:                     3130332e3138322e3230382e302f32332d3234203d3e203137393935.roa (raw, json)
Hash identifier:          F2V0bt4Gym/MGHt2L0vvKxadAz7Z0NsQos/LTaGa8Jo=
Subject key identifier:   02:52:B9:AC:60:BD:CE:50:B5:7F:8F:8E:B6:96:9B:97:85:17:B7:E6
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       1601DE5C6EA452B21F8CE2DCF6580B92091AFD5D
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3138322e3230382e302f32332d3234203d3e203137393935.roa
Signing time:             Thu 03 Mar 2022 07:25:25 +0000
ROA not before:           Thu 03 Mar 2022 07:20:25 +0000
ROA not after:            Fri 03 Mar 2023 07:25:25 +0000
asID:                     17995
IP address blocks:        103.182.208.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:01:de:5c:6e:a4:52:b2:1f:8c:e2:dc:f6:58:0b:92:09:1a:fd:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Mar  3 07:20:25 2022 GMT
            Not After : Mar  3 07:25:25 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a9:bc:8c:13:e2:e6:cf:92:ff:7a:d0:9e:4f:
                    a0:ee:c5:aa:97:9d:7f:ef:ff:a0:0f:3c:4e:df:d8:
                    7b:a6:bf:d3:4a:94:24:53:e7:62:4a:46:88:df:c7:
                    6b:42:ec:30:28:90:93:7d:3b:e0:22:11:20:f6:e8:
                    9b:f2:00:0c:44:4d:66:05:7d:55:8e:fc:03:ff:1f:
                    c0:52:02:1e:01:92:65:f6:a2:cf:5d:6a:8a:fd:4e:
                    7c:6d:ad:78:4d:d8:82:16:0c:1e:32:15:a4:4a:d9:
                    b1:23:19:e6:48:b2:06:12:b4:78:14:76:25:76:24:
                    05:ac:5b:db:39:e1:2a:af:73:76:7a:33:fe:24:a2:
                    4d:83:75:b8:d8:70:59:dd:b5:65:68:60:00:51:cc:
                    83:d8:d4:c5:aa:78:69:aa:3b:ba:c3:9d:8a:86:17:
                    d7:6f:06:10:25:df:38:18:69:ff:bd:ef:ea:e5:0f:
                    58:15:41:1a:5d:bd:e8:ac:c2:82:0f:28:33:47:51:
                    30:c7:90:11:41:2b:a8:4b:a6:0c:4d:93:22:e6:cb:
                    59:9f:39:1d:0f:ee:4d:09:69:79:10:1f:25:c4:92:
                    e6:f6:a2:62:be:f7:52:db:d2:58:7e:b1:68:f0:9c:
                    04:8e:cb:57:81:3d:c4:6a:72:00:58:cc:ed:b1:cc:
                    a5:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:52:B9:AC:60:BD:CE:50:B5:7F:8F:8E:B6:96:9B:97:85:17:B7:E6
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3138322e3230382e302f32332d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.182.208.0/23

    Signature Algorithm: sha256WithRSAEncryption
         46:6c:60:c3:c8:d6:6a:b6:72:12:fb:5f:e7:fb:8b:60:33:3c:
         21:03:8b:95:41:42:ac:b6:7d:b7:0d:6b:a9:de:da:28:b7:f1:
         ee:90:01:14:cf:11:1a:ba:f7:a4:43:99:ad:fc:89:35:66:84:
         52:1f:5a:66:89:cc:cd:44:41:bd:83:f8:f7:8c:0b:28:0a:06:
         a5:c0:f0:0c:e9:e1:0f:7f:84:2f:bb:48:c4:72:d2:9d:70:a9:
         e6:e5:8d:47:e4:d7:37:f9:d5:21:ce:ef:9c:73:d6:55:db:fe:
         0a:fd:86:15:ac:28:17:3a:23:e0:cf:f1:88:59:ab:ba:44:f8:
         23:74:c4:92:99:8b:c6:b8:14:b1:da:4f:34:d5:b8:05:78:b1:
         71:ab:59:9e:3c:db:5f:aa:f3:37:ae:64:8a:41:07:46:27:5d:
         6d:b6:b5:14:1e:08:23:35:e6:55:40:5a:29:38:0f:42:ed:91:
         cf:df:b1:fe:bd:be:43:01:f5:1f:a5:f9:5f:be:ce:88:57:1c:
         0f:81:0d:db:ba:d0:09:58:69:fb:75:84:aa:7b:c9:80:11:d5:
         33:94:b4:4d:df:9d:f9:68:f0:dc:cd:c7:75:b6:11:6c:1e:a2:
         b0:00:36:bc:6e:ec:fc:6a:95:4b:6f:43:77:f2:97:41:ba:e0:
         10:cd:1e:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:47 2024 by rpki-client on console-ams.rpki-client.org