Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3138332e31322e302f32332d3234203d3e203137393935.roa
File:                     3130332e3138332e31322e302f32332d3234203d3e203137393935.roa (raw, json)
Hash identifier:          ealGi9VKAFpX3IZvDE6uJaaepuuKJg0jImM9FpVA0/Y=
Subject key identifier:   AC:F3:26:28:5F:13:CD:EE:FE:66:DC:57:68:23:89:2B:C2:12:DF:8B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       6EB5A69458F68F210FE2A5ACE0F12CAFE1AA379E
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3138332e31322e302f32332d3234203d3e203137393935.roa
Signing time:             Thu 03 Mar 2022 07:25:28 +0000
ROA not before:           Thu 03 Mar 2022 07:20:28 +0000
ROA not after:            Fri 03 Mar 2023 07:25:28 +0000
asID:                     17995
IP address blocks:        103.183.12.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:b5:a6:94:58:f6:8f:21:0f:e2:a5:ac:e0:f1:2c:af:e1:aa:37:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Mar  3 07:20:28 2022 GMT
            Not After : Mar  3 07:25:28 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:85:91:da:90:08:98:c9:61:14:1c:0b:35:4d:
                    28:69:3c:c0:fc:61:7e:b8:fe:67:5a:e2:ab:1f:34:
                    6f:21:f6:a1:6d:dd:e4:5a:35:6c:e6:aa:e8:21:05:
                    ef:e0:b0:9a:ae:e5:a5:e4:39:61:ba:04:60:72:35:
                    18:ee:25:16:f9:68:0c:cf:97:1e:c0:d9:e5:b5:76:
                    f0:8b:cd:7c:1f:0d:d5:30:c3:46:f8:1c:96:cd:85:
                    82:9d:23:e5:9b:f5:57:08:1d:8d:39:d6:51:f5:8a:
                    f4:a5:ca:01:07:31:2d:30:ca:0b:35:cf:4e:49:11:
                    48:44:e7:5f:03:6e:fe:4c:fa:d4:4b:ee:b5:f1:5a:
                    2b:61:e4:99:79:25:60:95:7e:09:64:46:9d:af:74:
                    6f:1d:84:e1:38:5f:dc:dc:14:d5:28:3e:68:e1:51:
                    c9:84:a6:81:3f:54:3b:8f:b5:48:6d:da:1c:b6:ab:
                    8d:fe:16:57:3d:d6:e6:53:b3:8c:7b:47:9b:d5:67:
                    03:06:97:84:b4:cd:2e:ef:94:41:09:3b:b8:be:ab:
                    b4:4a:24:17:d0:79:d2:30:c4:a5:21:a5:84:2f:dc:
                    19:4a:2e:53:5c:f1:ab:2b:c4:66:0a:4f:50:bd:70:
                    3c:6f:cb:93:fd:87:92:11:83:3a:98:3e:29:23:d0:
                    c2:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:F3:26:28:5F:13:CD:EE:FE:66:DC:57:68:23:89:2B:C2:12:DF:8B
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3138332e31322e302f32332d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.183.12.0/23

    Signature Algorithm: sha256WithRSAEncryption
         00:e6:b8:4c:ed:7f:4f:48:4d:4a:f1:24:1d:43:f1:d3:92:1d:
         43:fd:79:0e:7d:59:60:4d:fe:dc:c0:27:cc:ac:82:7a:c2:34:
         7d:f3:6c:27:e1:b0:3f:cc:8a:94:8a:27:c3:4c:be:56:6e:c6:
         57:cb:2d:15:09:02:41:16:a7:a8:c0:35:80:46:b9:2d:04:33:
         65:f5:85:22:78:c8:25:e1:d2:8e:9f:de:2e:81:4f:ef:10:a5:
         6c:77:7b:a7:c4:49:23:4b:c7:37:66:2f:e7:39:d1:0b:2c:37:
         7a:29:25:83:63:ed:91:f7:d3:f9:ea:cf:15:56:62:16:4b:f1:
         da:84:39:5a:35:23:f0:b4:32:65:0c:2b:d9:e0:f5:28:57:d4:
         2f:fe:86:9f:c9:4f:d0:31:59:86:d7:30:89:e2:7e:7b:51:6a:
         bd:74:17:91:07:3e:29:cd:a3:b6:6c:13:d8:61:3e:77:5d:14:
         a4:18:9a:02:c3:9f:a3:3b:f8:91:a2:55:61:e2:13:0e:8f:21:
         0c:19:f9:b8:98:25:82:29:59:e9:8a:45:dc:5f:12:1a:1e:89:
         23:76:b9:0e:aa:e0:09:0b:82:73:83:8d:d2:fb:3a:99:ff:f0:
         ab:72:47:90:c1:0e:36:c2:93:40:7a:46:cb:4d:a3:e9:5c:67:
         18:73:25:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:11 2024 by rpki-client on console-fra.rpki-client.org