Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3138322e3234302e302f32332d3234203d3e203137393935.roa
File:                     3130332e3138322e3234302e302f32332d3234203d3e203137393935.roa (raw, json)
Hash identifier:          8an7lQZwqGKf4iUgEYpKa3ZWV3WLfK+5RLzl6Dj4+m0=
Subject key identifier:   7B:F9:BE:BF:E6:EE:42:F4:2B:4F:D2:96:5F:29:AC:B2:DB:AC:9A:EF
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       29BA3DDC8198631577112914945A1BC3E91191AD
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3138322e3234302e302f32332d3234203d3e203137393935.roa
Signing time:             Thu 03 Mar 2022 07:25:26 +0000
ROA not before:           Thu 03 Mar 2022 07:20:26 +0000
ROA not after:            Fri 03 Mar 2023 07:25:26 +0000
asID:                     17995
IP address blocks:        103.182.240.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:ba:3d:dc:81:98:63:15:77:11:29:14:94:5a:1b:c3:e9:11:91:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Mar  3 07:20:26 2022 GMT
            Not After : Mar  3 07:25:26 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:80:85:e2:66:06:47:74:2f:ac:04:be:e7:1d:
                    bf:f7:50:07:6c:f4:49:0f:37:2c:8c:04:4a:01:b7:
                    22:a0:e2:4c:b4:2d:81:d7:03:84:bc:33:2a:b5:01:
                    86:6b:5c:1a:64:82:48:90:1b:15:e4:e0:ca:0c:87:
                    82:f9:40:e8:94:91:1e:5a:d1:68:dc:21:b1:5a:33:
                    90:7e:09:1b:d6:fb:48:b2:24:da:d5:b8:2b:2b:9f:
                    e2:e1:54:e0:ce:8c:2e:c3:19:b5:32:11:c9:71:45:
                    0e:b8:b3:26:dd:35:41:99:1a:11:54:6a:c5:16:83:
                    b4:cd:25:71:0d:d7:39:c9:1c:5a:b1:5e:61:1b:18:
                    75:63:9f:c8:04:cf:58:c1:37:ae:f0:a2:13:16:34:
                    19:28:53:c4:da:cc:40:fc:46:5a:1c:b2:af:68:b3:
                    27:03:22:a0:ce:60:8a:ec:6b:74:29:c0:7b:ed:5c:
                    a0:de:e1:fd:fa:e7:47:57:c2:6a:84:f0:77:14:d3:
                    07:99:64:fe:a9:1d:e0:de:cd:28:af:3e:53:aa:a9:
                    ac:16:4f:7a:d4:fd:b9:ce:1b:51:c0:72:00:f7:0e:
                    ee:e1:19:c1:5d:a2:f3:59:d6:33:a3:25:92:85:be:
                    0c:67:bc:5b:b0:f2:93:39:62:00:f8:ad:e7:00:b0:
                    e5:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:F9:BE:BF:E6:EE:42:F4:2B:4F:D2:96:5F:29:AC:B2:DB:AC:9A:EF
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3138322e3234302e302f32332d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.182.240.0/23

    Signature Algorithm: sha256WithRSAEncryption
         04:aa:ab:d1:25:f6:29:6b:4b:64:9e:06:7a:a8:71:54:47:ce:
         2f:aa:5c:fb:40:42:c5:eb:39:7f:f1:92:51:d6:20:29:3a:35:
         99:77:4a:c3:f5:6f:3a:98:77:b2:26:ca:62:80:b8:7c:2f:fb:
         d8:c7:ef:37:2e:25:e5:e9:b5:7f:02:ae:fe:b9:e9:a6:b9:4b:
         21:d4:2f:53:c7:26:cd:3c:27:83:88:c3:7a:e4:bd:66:c2:63:
         ec:38:69:5d:f3:6f:c7:76:f4:06:78:02:83:5d:be:ce:a3:31:
         87:ee:94:df:62:be:da:b9:44:6e:74:30:14:b5:d1:17:22:9f:
         28:96:4b:d5:ae:d0:56:2b:fd:94:17:66:c8:44:85:9f:d8:14:
         aa:66:5e:2e:60:85:d1:f9:0c:3c:e0:c7:8b:a0:45:a8:20:7a:
         c7:a8:c9:de:96:fb:37:10:a9:7c:a5:f1:51:5b:02:60:0a:86:
         d0:9f:5f:92:23:cc:40:cf:54:14:4d:08:76:bd:6c:3d:34:18:
         67:57:95:05:81:8a:a5:ad:39:8b:dc:43:d8:85:a8:f3:cf:e9:
         14:8a:72:60:aa:bf:ed:52:0a:71:ea:18:dd:1e:e7:f0:d7:92:
         f6:29:34:20:91:38:2e:0a:41:cd:fe:73:b9:ff:1e:6f:d6:be:
         33:ee:40:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:47 2024 by rpki-client on console-ams.rpki-client.org