Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3234322e3132342e302f32332d3234203d3e203538383232.roa
File:                     3130332e3234322e3132342e302f32332d3234203d3e203538383232.roa (raw, json)
Hash identifier:          czSQsdgQjaZ/e8amNGp63aJMUZY9qNADPkuqgslfRFo=
Subject key identifier:   5B:E2:5E:FE:97:75:09:41:7F:C9:07:07:61:6B:24:F3:CA:73:69:C0
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       1181B806A71B2D8EA0117F55164BC18117286BCB
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3234322e3132342e302f32332d3234203d3e203538383232.roa
Signing time:             Mon 01 Nov 2021 04:06:48 +0000
ROA not before:           Mon 01 Nov 2021 04:01:48 +0000
ROA not after:            Tue 01 Nov 2022 04:06:48 +0000
asID:                     58822
IP address blocks:        103.242.124.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:81:b8:06:a7:1b:2d:8e:a0:11:7f:55:16:4b:c1:81:17:28:6b:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov  1 04:01:48 2021 GMT
            Not After : Nov  1 04:06:48 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:62:09:cb:5d:af:5e:ea:7b:86:31:9a:43:e6:
                    4d:dc:27:cd:a5:97:7b:90:03:99:45:d6:65:d1:bf:
                    2d:75:f2:d5:52:1b:8d:e5:9c:0e:8c:68:ad:b8:72:
                    05:8e:1a:f8:b5:1a:03:68:25:18:a2:fa:b2:1f:c6:
                    8e:af:e3:88:77:4a:57:59:07:6e:82:07:14:fb:79:
                    cc:dd:28:0a:42:d8:ea:16:8e:0b:9c:c8:27:b4:ef:
                    49:55:90:fb:23:05:d6:19:58:f8:b1:82:0a:cc:54:
                    9d:3d:49:5b:57:a7:b0:6c:cd:3a:59:b5:a9:5a:44:
                    3e:50:ac:fb:b3:17:66:84:c5:33:5f:35:00:89:3c:
                    45:79:1c:d0:2e:c4:f4:b5:23:a6:11:57:bf:7b:77:
                    8c:0e:c4:be:31:bd:24:d9:06:a4:77:77:aa:ba:8d:
                    50:19:93:02:ad:b3:9f:4b:76:7c:e2:d3:de:16:ad:
                    42:0c:0a:31:66:21:74:4b:1e:ed:42:14:f2:68:ba:
                    be:d7:15:e3:b0:20:e0:7f:bb:f8:d8:b4:a1:56:b9:
                    00:a8:ae:8e:5f:0e:1c:76:af:cb:04:3b:ef:d9:f3:
                    37:ce:f5:90:f4:a6:3f:f0:94:e0:3a:93:24:10:47:
                    b7:be:e8:24:90:89:ea:10:2d:a1:cd:88:42:78:5b:
                    31:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:E2:5E:FE:97:75:09:41:7F:C9:07:07:61:6B:24:F3:CA:73:69:C0
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3234322e3132342e302f32332d3234203d3e203538383232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.242.124.0/23

    Signature Algorithm: sha256WithRSAEncryption
         5c:9d:20:6f:57:4d:4e:56:c7:29:43:e2:32:88:d7:3c:70:fc:
         9f:53:5a:8f:ba:bd:02:77:81:f2:fe:88:8d:32:46:1b:94:98:
         93:24:70:5f:0a:ea:3d:0a:f8:1b:c1:71:c0:95:16:6c:47:31:
         f2:3f:93:c0:8c:4d:4b:03:8b:0a:80:18:05:74:4a:e2:79:cf:
         44:16:a9:46:33:86:72:77:f7:e2:eb:a2:fb:50:9d:71:c5:3f:
         0f:7a:f2:56:d5:0f:a3:4d:15:63:35:53:66:9b:59:11:35:0c:
         98:1c:e0:72:f2:51:9e:b2:d4:99:20:1a:17:e0:66:79:b3:01:
         17:a9:1d:05:91:7e:63:19:84:d2:fc:0c:31:3c:11:0b:75:23:
         97:32:c3:d8:1a:c0:04:78:d9:1c:3f:2e:fd:3a:f7:6f:5b:6b:
         76:1a:50:49:b2:01:7c:1f:8c:d7:93:88:0b:bf:81:db:be:57:
         72:aa:3c:c4:98:5f:d7:e5:c2:80:a7:f8:2a:67:c1:94:39:7d:
         68:b1:92:84:6e:02:a0:0c:ec:b4:48:a4:31:94:b6:e1:6d:87:
         23:8c:8e:a1:66:72:43:81:25:ef:57:1b:5a:28:fa:47:5c:56:
         f7:53:75:4b:fc:17:a2:ee:b9:e0:d0:18:55:2d:44:4c:0c:79:
         a6:f8:90:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:47 2024 by rpki-client on console-ams.rpki-client.org