Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3138332e31382e302f32332d3234203d3e203137393935.roa
File:                     3130332e3138332e31382e302f32332d3234203d3e203137393935.roa (raw, json)
Hash identifier:          r7P8T170FQNrvV6vEEtGJlprBirg/6OmB+6Q6+oUNcc=
Subject key identifier:   9F:B5:0B:F4:41:F4:07:CD:37:03:EC:87:2D:36:E5:47:A4:52:39:FF
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       0C7C956708DA5ED3C99F726BA6FFFA2DF94D47EB
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3138332e31382e302f32332d3234203d3e203137393935.roa
Signing time:             Thu 03 Mar 2022 07:25:25 +0000
ROA not before:           Thu 03 Mar 2022 07:20:25 +0000
ROA not after:            Fri 03 Mar 2023 07:25:25 +0000
asID:                     17995
IP address blocks:        103.183.18.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:7c:95:67:08:da:5e:d3:c9:9f:72:6b:a6:ff:fa:2d:f9:4d:47:eb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Mar  3 07:20:25 2022 GMT
            Not After : Mar  3 07:25:25 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:3c:77:ff:12:b4:0a:97:a6:77:4e:c7:a4:e9:
                    cb:99:b8:02:58:aa:13:7e:c2:38:cd:56:2e:e0:7c:
                    2d:42:61:1a:d7:8a:ca:a8:b3:16:54:08:83:10:bb:
                    1f:67:2b:df:0e:87:3f:04:59:01:7c:ef:ac:bd:24:
                    a6:34:07:b5:ca:90:b3:73:e2:dc:ff:a3:5b:f0:fe:
                    d7:95:e0:56:4a:df:aa:31:cd:1b:0e:8b:7c:f2:fd:
                    58:d5:ca:08:6c:62:ef:bc:dc:7a:a3:02:94:a3:37:
                    f8:ac:1a:ce:80:cd:b4:e0:95:b0:6a:d9:dc:4a:a6:
                    70:db:5a:93:8e:66:76:0f:74:58:fb:da:24:26:33:
                    6f:c5:fb:0b:b7:0d:57:10:ff:50:22:05:5a:f7:b5:
                    44:67:b8:7c:8e:69:93:81:ea:a4:d4:72:b0:cd:8c:
                    91:d0:b7:8a:9f:ca:0c:5e:5d:54:f3:f3:e0:26:be:
                    7f:f4:61:08:da:89:1e:56:d6:03:e8:57:8e:2c:f9:
                    e6:22:70:80:9d:a3:38:a4:8e:7b:6f:95:7b:16:0f:
                    73:1f:61:c5:5b:1c:b0:e9:59:70:4a:4a:b9:e6:6b:
                    b4:f5:97:f3:aa:3f:7c:e3:26:5e:73:99:1b:d4:ce:
                    8b:59:48:80:2e:32:c8:98:70:6c:77:58:ba:f7:bb:
                    a5:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:B5:0B:F4:41:F4:07:CD:37:03:EC:87:2D:36:E5:47:A4:52:39:FF
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3138332e31382e302f32332d3234203d3e203137393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.183.18.0/23

    Signature Algorithm: sha256WithRSAEncryption
         58:35:f9:75:17:11:6d:a8:95:d7:66:bd:00:b1:d0:61:bb:8f:
         c9:00:60:5d:0b:46:2e:4f:c3:f8:21:5c:d2:fe:8f:e0:ae:29:
         3c:27:0f:e0:49:1d:d7:8e:98:04:1f:d0:e9:97:54:87:c8:d9:
         a8:95:7a:e1:17:f5:46:f8:b0:99:19:a7:49:47:e4:43:a6:55:
         42:55:10:14:9b:03:0f:de:ac:bf:16:8a:3f:6a:18:8a:d4:e8:
         25:a5:d9:93:45:ed:bc:dc:b6:00:85:f2:9f:44:cb:ac:9e:e4:
         4c:05:0d:63:17:a3:63:ac:9b:23:4f:d6:74:90:d4:b4:ae:ab:
         e6:24:27:f8:6a:7a:32:11:ef:9c:36:42:28:7f:0b:1f:99:33:
         94:df:e7:00:e8:56:e4:79:c0:06:72:88:89:55:21:5a:11:d2:
         e6:99:c3:42:10:57:0c:87:93:4e:98:1c:1a:aa:5e:71:a5:f4:
         cd:fe:05:b0:ea:5c:0f:b7:af:71:48:14:f4:34:c7:41:e3:90:
         5c:98:b3:a9:fa:b6:01:67:b0:b4:28:6e:5b:b1:c2:cc:eb:a9:
         ee:38:2b:5a:d6:4b:c0:e7:86:bd:28:5c:92:60:bf:c5:6a:37:
         d7:d1:a3:e5:50:31:8e:dc:93:dd:27:26:4a:92:8e:a7:60:86:
         be:dc:03:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:11 2024 by rpki-client on console-fra.rpki-client.org