Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3233312e3230302e302f32322d3234203d3e20313333333532.roa
File:                     3130332e3233312e3230302e302f32322d3234203d3e20313333333532.roa (raw, json)
Hash identifier:          km6wo98BuzQlWfykSdCsF5g2Fj0fllbtZBkRIARtqVQ=
Subject key identifier:   45:5E:61:B9:61:39:B3:A9:5F:6D:D2:40:8D:2F:EC:DD:33:EA:CC:72
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       6785DE57DAEBBED3330C7DB9251AEBD141D79D81
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3233312e3230302e302f32322d3234203d3e20313333333532.roa
Signing time:             Mon 26 Apr 2021 07:15:36 +0000
ROA not before:           Mon 26 Apr 2021 07:10:36 +0000
ROA not after:            Tue 26 Apr 2022 07:15:36 +0000
asID:                     133352
IP address blocks:        103.231.200.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:85:de:57:da:eb:be:d3:33:0c:7d:b9:25:1a:eb:d1:41:d7:9d:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Apr 26 07:10:36 2021 GMT
            Not After : Apr 26 07:15:36 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:97:d9:d9:f6:6c:2b:f5:04:d8:db:95:39:f7:
                    89:43:d3:7c:96:ac:44:75:69:16:4c:aa:ce:46:8c:
                    c4:32:0e:67:06:44:56:e8:ba:98:76:ca:28:aa:e1:
                    f3:49:4a:17:e2:21:1f:77:a1:0d:a9:da:9f:8e:d5:
                    23:9d:25:a0:be:67:14:0c:dc:4b:51:6b:62:d6:22:
                    84:55:0b:35:b8:7f:82:e4:d5:da:fc:dc:38:8d:9b:
                    b7:17:af:ea:d3:d0:a3:e2:15:67:9f:3d:31:c8:59:
                    67:b3:0b:cb:cb:9e:af:5d:59:4c:15:d2:39:ac:fb:
                    db:8d:3a:47:de:66:26:9a:4b:50:f3:80:a3:2d:8d:
                    dc:00:2b:82:21:d5:8c:cb:29:3e:00:6d:73:d2:09:
                    19:1f:c9:6c:72:73:0b:26:c8:68:ab:ad:96:d3:7a:
                    4c:c9:27:ba:f6:a4:5d:2e:92:6c:85:da:50:e9:de:
                    f5:fd:36:75:d8:63:c5:ae:9b:cd:8a:94:1f:85:57:
                    90:6a:c6:ee:8c:16:c2:cc:a6:17:6f:af:8d:e7:31:
                    0b:ff:73:ff:f8:d6:c5:f3:6f:99:13:91:76:5e:8a:
                    8f:e5:fc:be:31:c3:97:9a:ca:e2:2f:23:81:39:63:
                    38:5b:e9:ee:8c:80:bc:89:73:c0:ab:7b:8d:8b:74:
                    00:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:5E:61:B9:61:39:B3:A9:5F:6D:D2:40:8D:2F:EC:DD:33:EA:CC:72
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3233312e3230302e302f32322d3234203d3e20313333333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.231.200.0/22

    Signature Algorithm: sha256WithRSAEncryption
         41:ac:d8:f7:c7:71:89:e6:05:74:45:49:ef:3b:9a:95:03:33:
         05:64:01:0b:c5:3c:ff:13:58:75:3a:05:3b:2f:24:d4:af:3f:
         11:5b:cc:ff:1f:81:d4:b9:1e:cc:02:3b:5d:ae:b0:c6:7e:e8:
         47:c1:12:a8:c9:6e:33:c0:8f:79:82:62:04:af:e2:0a:22:56:
         e9:3a:24:3f:b5:ca:0c:7a:aa:5a:ea:7d:ac:bd:18:e3:6e:40:
         0b:40:4a:c9:80:52:f0:d4:96:70:91:81:9d:e9:f4:06:5e:2c:
         01:71:01:be:ef:90:cf:8c:9f:65:1f:af:ea:a1:1b:79:99:c9:
         b1:7f:c2:3f:ed:6a:10:39:2f:94:4a:ca:64:9a:00:55:d0:64:
         cf:45:d3:be:66:8f:02:8d:e5:a0:49:d3:e6:68:15:92:a5:72:
         11:92:b7:19:9d:16:69:9d:fc:31:5a:32:c1:07:0c:cb:01:31:
         99:ae:fe:ad:ef:2d:a8:6e:44:7c:27:61:1d:21:9d:6c:23:b6:
         08:7f:e9:0e:bb:e4:92:c7:12:81:3d:c5:f3:9b:c3:71:3e:7e:
         62:e0:54:02:e6:95:5d:9b:56:df:9d:a5:83:57:29:46:6f:ec:
         a9:04:3b:6e:2b:e8:88:84:bc:c6:14:3f:a8:56:b0:c2:b5:ab:
         db:76:cb:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:11 2024 by rpki-client on console-fra.rpki-client.org