Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3138322e3232322e302f32332d3234203d3e203137393935.roa
File:                     3130332e3138322e3232322e302f32332d3234203d3e203137393935.roa (raw, json)
Hash identifier:          X8AC8r5pzKuGk7UBSJmk1NyWOquR2+CpCybFf0yIfLs=
Subject key identifier:   DA:EA:2B:9D:E0:12:24:59:B2:10:15:57:56:C9:B5:F6:8E:37:77:E2
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       7372EE75E3E2A62EAE3EBEE1EB45219B5D4CE3A5
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3138322e3232322e302f32332d3234203d3e203137393935.roa
Signing time:             Thu 03 Mar 2022 07:25:27 +0000
ROA not before:           Thu 03 Mar 2022 07:20:27 +0000
ROA not after:            Fri 03 Mar 2023 07:25:27 +0000
asID:                     17995
IP address blocks:        103.182.222.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:72:ee:75:e3:e2:a6:2e:ae:3e:be:e1:eb:45:21:9b:5d:4c:e3:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Mar  3 07:20:27 2022 GMT
            Not After : Mar  3 07:25:27 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b5:40:1e:40:96:f7:dc:42:52:cb:5e:ed:b6:
                    c5:a8:1a:f9:f7:58:cd:45:89:c2:1e:12:59:7e:3f:
                    03:a4:7e:41:11:bf:93:0c:3e:7e:20:cf:c9:f6:bb:
                    57:9b:dc:2e:fd:74:e0:0d:9b:d8:8e:13:02:38:a4:
                    61:22:7a:89:d7:20:f6:51:89:7a:89:bb:92:b0:8e:
                    8b:4c:3d:df:9e:c4:4c:6c:2b:64:45:83:7a:45:76:
                    76:f0:9a:8a:3b:52:be:29:d1:31:ad:58:a3:12:83:
                    24:d8:e1:12:76:9c:d5:ea:fb:ee:61:da:ee:80:ad:
                    33:60:1d:9e:22:23:d6:10:97:63:34:c2:90:91:12:
                    c0:02:3d:47:f3:c0:ec:75:d6:df:2d:ee:97:2a:71:
                    2d:04:7d:9c:6b:87:8b:94:c1:25:c8:2d:1e:01:7c:
                    c7:61:0d:ff:ff:b5:26:ea:12:b3:13:4e:06:5d:d8:
                    66:a3:8a:57:de:f7:59:85:4b:ac:98:23:33:b5:7f:
                    95:43:f0:5c:63:f6:1b:b3:68:c4:03:e5:5b:83:76:
                    d4:b2:1f:0f:18:b5:3b:06:4f:f6:b7:01:e3:e6:37:
                    1f:88:8c:37:1b:66:5b:51:87:b5:25:be:6f:72:9f:
                    eb:47:3b:44:e0:c0:3e:dd:0c:15:09:f7:9d:dc:13:
                    8c:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:EA:2B:9D:E0:12:24:59:B2:10:15:57:56:C9:B5:F6:8E:37:77:E2
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3138322e3232322e302f32332d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.182.222.0/23

    Signature Algorithm: sha256WithRSAEncryption
         95:ce:61:2d:ab:61:5e:49:26:34:6c:e4:30:98:96:79:1d:f1:
         f9:24:3d:80:b5:56:0f:db:15:8a:f2:a2:75:41:78:b4:d2:e5:
         eb:58:64:b9:7a:f6:00:d4:68:74:49:10:e6:09:b3:39:f7:10:
         4b:04:ed:b4:a8:bd:ec:0d:30:88:4d:15:f7:f8:6c:23:a5:62:
         08:d2:9b:eb:fa:f5:1e:ab:5f:5d:81:29:59:47:64:23:a1:d1:
         4b:82:c9:c0:4e:fc:61:d2:01:f9:83:86:bb:15:ef:e7:78:19:
         b4:a5:b1:03:4b:7c:c4:7a:f5:31:87:d4:b7:3a:95:ee:92:df:
         38:27:8d:80:5b:f0:68:46:85:a8:d0:ec:f6:7b:66:6f:f4:12:
         87:ca:4f:80:de:18:7f:fb:f0:9d:0d:e7:4e:d5:70:77:de:56:
         83:70:f8:22:ea:5e:b5:a3:57:13:6d:3d:f4:db:f1:ba:6f:53:
         ab:eb:24:d6:17:14:e3:7b:d1:c7:96:d2:2f:d7:3e:ba:32:78:
         7d:57:f0:7a:2e:21:a7:ab:31:30:39:51:d6:ff:85:5e:aa:7c:
         ac:11:93:f7:8c:d7:54:4e:a6:48:79:c5:e6:61:c8:f5:6f:9a:
         29:64:57:d3:86:e9:80:f7:f4:d3:f2:8b:96:36:0f:9a:16:33:
         9f:c7:c9:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:47 2024 by rpki-client on console-ams.rpki-client.org