Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3138322e3233302e302f32332d3234203d3e203137393935.roa
File:                     3130332e3138322e3233302e302f32332d3234203d3e203137393935.roa (raw, json)
Hash identifier:          ZVq42W5PiYUyN2Mb6ITLQmI5lJpq5+C2M4hhorgORDo=
Subject key identifier:   BF:AB:F1:E2:C1:E3:EF:41:6E:41:92:F8:09:ED:6E:EC:00:87:40:C1
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       0126B7AA75AAA84B235A68266B594945D5317315
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3138322e3233302e302f32332d3234203d3e203137393935.roa
Signing time:             Thu 03 Mar 2022 07:25:24 +0000
ROA not before:           Thu 03 Mar 2022 07:20:24 +0000
ROA not after:            Fri 03 Mar 2023 07:25:24 +0000
asID:                     17995
IP address blocks:        103.182.230.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:26:b7:aa:75:aa:a8:4b:23:5a:68:26:6b:59:49:45:d5:31:73:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Mar  3 07:20:24 2022 GMT
            Not After : Mar  3 07:25:24 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ce:2f:19:3d:c9:69:de:da:9b:86:16:3e:e4:
                    7e:cf:9b:13:b3:8d:92:1e:3b:33:87:e9:51:bd:21:
                    d3:36:46:2f:54:fb:1d:a8:ef:81:39:29:8b:b7:ed:
                    a6:82:ea:f6:4e:ec:35:91:32:5d:8c:7e:a7:71:92:
                    b1:35:b6:7e:28:ce:37:03:6b:d4:63:5d:66:31:b1:
                    48:a2:15:17:62:18:4c:bf:16:21:dd:b7:6b:fa:e4:
                    ed:a6:85:92:da:22:37:2d:b2:15:bb:34:40:e2:d4:
                    23:55:75:47:cd:3c:cc:ed:57:0e:ec:8b:48:39:ad:
                    8f:dc:4e:70:7f:c4:cc:73:1f:6c:d4:b1:7e:ca:ff:
                    83:78:27:c7:fc:53:39:18:e5:4d:47:47:5a:00:a6:
                    7a:35:82:0d:ae:28:aa:56:73:ba:b6:3c:09:e7:57:
                    d0:cd:4a:1c:c1:5e:6c:17:44:0b:33:48:1d:ba:93:
                    35:b7:55:24:c9:a8:e7:50:79:c1:f6:35:a8:b8:07:
                    8b:c7:a4:21:b9:bd:d6:93:94:38:ea:17:fa:61:d2:
                    28:68:02:a5:e2:58:0c:26:61:f6:18:4b:76:03:65:
                    33:ac:81:26:80:9a:e6:4d:63:18:cf:54:e6:9c:df:
                    03:8b:34:40:01:5d:65:e4:50:30:db:da:c6:f6:d0:
                    63:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:AB:F1:E2:C1:E3:EF:41:6E:41:92:F8:09:ED:6E:EC:00:87:40:C1
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3138322e3233302e302f32332d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.182.230.0/23

    Signature Algorithm: sha256WithRSAEncryption
         93:5f:f4:41:a1:3c:02:bc:1e:00:57:ac:ff:01:8c:5d:02:a0:
         51:a5:34:8d:42:a0:d8:41:f4:d6:7a:75:fd:f4:f6:af:c8:f6:
         dc:71:ea:bd:27:28:cc:46:9c:c8:0b:0b:c4:f6:7e:7f:6f:06:
         53:f2:24:ae:89:81:7d:9e:05:be:fa:89:8e:52:1e:4b:3d:26:
         04:33:43:bf:c7:0a:45:ee:c9:7f:76:4d:38:ef:13:ed:50:6f:
         ed:e5:00:8b:f1:66:f0:f5:2a:aa:7d:3f:70:c3:71:cb:53:14:
         2f:2e:b2:1d:cb:44:b8:14:67:fa:c1:d8:e5:be:06:2f:19:e1:
         5c:35:6e:d9:7b:aa:06:fb:47:a6:75:7a:47:ff:f5:b0:71:2c:
         78:22:06:b4:f1:69:f9:ba:f5:2d:a1:7f:2d:99:73:0f:59:10:
         7e:56:7b:02:46:f7:8c:99:66:af:98:3e:7e:37:25:2b:21:fd:
         88:d0:62:48:75:a8:81:6d:9f:f4:01:1f:51:72:cd:43:f5:56:
         fc:64:08:a7:6d:72:df:85:30:a3:ff:73:cc:99:48:df:44:76:
         e0:16:54:9d:26:35:71:26:84:0a:12:90:09:35:dc:fd:b4:d1:
         df:fb:3a:56:33:e3:9b:5e:9c:41:99:8f:dd:49:77:66:bd:14:
         2b:61:73:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:47 2024 by rpki-client on console-ams.rpki-client.org