Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3138322e3234342e302f32332d3234203d3e203137393935.roa
File:                     3130332e3138322e3234342e302f32332d3234203d3e203137393935.roa (raw, json)
Hash identifier:          vuAv4JHPw8qZPRz8ZMz5ZAvPIFEQBf9IRQhldTm6Lrk=
Subject key identifier:   6A:47:AF:B2:45:27:CB:72:CD:0A:34:44:A8:AA:FD:A4:74:C3:7A:37
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       0ADB71BB8E3537AE4F1C3F5512EE5DC64C632E6E
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3138322e3234342e302f32332d3234203d3e203137393935.roa
Signing time:             Thu 03 Mar 2022 07:25:28 +0000
ROA not before:           Thu 03 Mar 2022 07:20:28 +0000
ROA not after:            Fri 03 Mar 2023 07:25:28 +0000
asID:                     17995
IP address blocks:        103.182.244.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:db:71:bb:8e:35:37:ae:4f:1c:3f:55:12:ee:5d:c6:4c:63:2e:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Mar  3 07:20:28 2022 GMT
            Not After : Mar  3 07:25:28 2023 GMT
        Subject: CN=3082010A0282010100C3678DD8FA0E6A94740169F26087652250438E5CD7DE78CFEB89AB1EBFB0A3AFA361C5A640461A6BF2AB2FF83D252057458840F6EAA1CE65E1D209614B1E84B618F63CAA0670E98B4C67893AD3328857B61E6035E1E15D029D30336D6076D1F33280B712E7A10708A5C7C670AB9FF5DA4E81B0510B2021E2F416FCB46B3F25E725D4997F949C845E211A9E726E7DDD2F070F0DB7A9E139892BB67E11D7EF70EE3B3D94A226FC4F590262F54968E474DA7CCE914C8EE41398EF50CF7ADBED73D64C83864E0A915B2F8D4D29701BE66769E03A56A94A35743485363729C7D12894CB71F08867B0031F3BA9B21CB91C35C2717FC8EB4AFB87BC67AF03A94B30FCE70203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:67:8d:d8:fa:0e:6a:94:74:01:69:f2:60:87:
                    65:22:50:43:8e:5c:d7:de:78:cf:eb:89:ab:1e:bf:
                    b0:a3:af:a3:61:c5:a6:40:46:1a:6b:f2:ab:2f:f8:
                    3d:25:20:57:45:88:40:f6:ea:a1:ce:65:e1:d2:09:
                    61:4b:1e:84:b6:18:f6:3c:aa:06:70:e9:8b:4c:67:
                    89:3a:d3:32:88:57:b6:1e:60:35:e1:e1:5d:02:9d:
                    30:33:6d:60:76:d1:f3:32:80:b7:12:e7:a1:07:08:
                    a5:c7:c6:70:ab:9f:f5:da:4e:81:b0:51:0b:20:21:
                    e2:f4:16:fc:b4:6b:3f:25:e7:25:d4:99:7f:94:9c:
                    84:5e:21:1a:9e:72:6e:7d:dd:2f:07:0f:0d:b7:a9:
                    e1:39:89:2b:b6:7e:11:d7:ef:70:ee:3b:3d:94:a2:
                    26:fc:4f:59:02:62:f5:49:68:e4:74:da:7c:ce:91:
                    4c:8e:e4:13:98:ef:50:cf:7a:db:ed:73:d6:4c:83:
                    86:4e:0a:91:5b:2f:8d:4d:29:70:1b:e6:67:69:e0:
                    3a:56:a9:4a:35:74:34:85:36:37:29:c7:d1:28:94:
                    cb:71:f0:88:67:b0:03:1f:3b:a9:b2:1c:b9:1c:35:
                    c2:71:7f:c8:eb:4a:fb:87:bc:67:af:03:a9:4b:30:
                    fc:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:47:AF:B2:45:27:CB:72:CD:0A:34:44:A8:AA:FD:A4:74:C3:7A:37
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3138322e3234342e302f32332d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.182.244.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0c:c4:30:2c:f1:b8:0c:91:af:a6:0c:c9:2c:4f:a5:50:b6:dd:
         fe:79:41:63:36:82:36:ed:38:f5:ba:49:4a:37:14:d4:a6:13:
         3a:37:01:ef:99:1b:7a:cb:ba:73:ab:06:d7:6d:5a:6c:ba:04:
         82:fe:6c:10:81:96:46:e9:80:32:66:1d:f3:67:70:9f:ac:26:
         ab:38:11:d4:10:ed:c6:36:8c:fe:5e:cd:36:6c:74:7e:50:1c:
         37:75:20:d2:94:f3:1a:1d:64:d9:ce:a8:e4:86:39:4c:2f:99:
         5c:b0:07:68:ea:85:57:e5:a1:65:71:b1:3d:aa:cc:77:58:34:
         9d:ca:3f:29:2a:7f:27:4f:9e:63:11:5e:13:1b:e4:80:59:63:
         8a:9c:b6:26:b4:00:9f:69:92:1a:1a:07:c0:27:27:48:e7:73:
         e1:8c:6e:ca:2b:50:02:f7:2f:ad:94:7b:56:96:3e:ed:0e:cb:
         80:57:8b:12:53:ab:f4:fe:88:67:8b:b6:4c:a3:a6:cc:8f:db:
         ab:eb:2a:3e:1c:cb:79:2a:f9:ff:a2:77:88:f8:03:49:56:ea:
         ac:45:bc:49:89:77:7f:5b:2c:08:3a:bd:ea:5a:67:cd:13:e3:
         33:5b:27:b8:4e:a1:b7:2f:be:43:68:16:c4:6e:77:76:76:b2:
         a7:cc:6e:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:47 2024 by rpki-client on console-ams.rpki-client.org