Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3234372e32322e302f32342d3234203d3e203538343835.roa
File:                     3130332e3234372e32322e302f32342d3234203d3e203538343835.roa (raw, json)
Hash identifier:          3DOINR06SsKMFybhwGO0HLrJNK8VNB6fOXLx6U6yYQ8=
Subject key identifier:   CE:48:A8:11:54:8A:25:32:8B:BD:3E:C0:3F:A0:38:D5:96:2D:64:C7
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       46F27773896EF4634D5115C5F944E53AE3508A72
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3234372e32322e302f32342d3234203d3e203538343835.roa
Signing time:             Thu 01 Jul 2021 04:20:06 +0000
ROA not before:           Thu 01 Jul 2021 04:15:06 +0000
ROA not after:            Fri 01 Jul 2022 04:20:06 +0000
asID:                     58485
IP address blocks:        103.247.22.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:f2:77:73:89:6e:f4:63:4d:51:15:c5:f9:44:e5:3a:e3:50:8a:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jul  1 04:15:06 2021 GMT
            Not After : Jul  1 04:20:06 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:6f:a5:40:37:90:ae:98:a3:2d:4d:66:63:72:
                    93:2c:92:1e:32:88:07:49:86:71:6d:c6:88:20:ea:
                    4a:1e:f8:cb:be:e7:d2:ad:ea:c1:29:f1:eb:7b:72:
                    d9:aa:81:5f:53:22:80:e0:1e:36:41:cb:80:3b:a7:
                    cf:4b:16:fc:d1:e8:e5:11:e4:25:4e:1c:e8:af:68:
                    b2:d5:48:f8:c7:dc:9c:6b:72:64:4e:aa:cd:98:99:
                    3b:81:46:c6:56:4a:37:78:6d:21:6c:70:74:58:4f:
                    7f:c2:66:c0:cb:64:c3:17:9c:3c:35:7a:5a:3d:5b:
                    a0:bc:36:35:ac:0e:9b:78:91:c4:f9:22:c6:9c:af:
                    40:36:29:a7:e6:a1:06:21:8d:b7:10:5a:1e:c9:f2:
                    9d:d1:5b:05:8c:d3:0c:52:a0:43:7a:f5:5e:b4:97:
                    72:0f:8b:25:33:43:3e:a7:3e:83:db:1b:9d:d2:8c:
                    84:f1:85:a2:32:90:20:20:d7:ff:fc:f0:48:7f:d7:
                    7d:9d:76:86:0d:dd:9c:13:51:98:20:97:4c:e3:2b:
                    28:86:16:68:dc:fb:0d:c6:f8:15:97:03:62:d2:2c:
                    c2:31:f7:8d:03:98:af:e2:db:c0:f7:82:f7:11:8f:
                    d5:42:73:97:21:ce:5a:47:34:ef:8b:69:a9:70:94:
                    d9:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:48:A8:11:54:8A:25:32:8B:BD:3E:C0:3F:A0:38:D5:96:2D:64:C7
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3234372e32322e302f32342d3234203d3e203538343835.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.247.22.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:12:91:b2:ad:27:a9:04:fa:94:4b:7d:ba:e6:18:ad:11:a9:
         e4:d8:9a:12:8d:57:0e:6b:f1:c1:0d:dd:de:3a:3d:7b:87:c6:
         de:05:99:2c:b5:8c:c6:6d:91:23:45:c0:a5:cf:fa:a4:63:ec:
         92:d7:0c:49:f6:e9:98:18:e3:d9:83:a1:80:83:be:8a:30:3e:
         91:2f:11:15:1c:58:f1:71:40:01:84:18:bd:25:dd:e4:de:8b:
         be:d0:7c:dc:42:f2:04:1a:1b:0d:d3:33:f3:ec:ab:57:bd:b6:
         c2:28:fc:ec:0e:6a:66:0a:dc:1a:fa:91:d0:a3:72:20:af:df:
         62:a3:a7:6d:b7:08:d9:e3:30:c2:be:0d:4a:71:99:c4:95:c3:
         fd:48:4e:78:66:3c:6b:c4:e5:18:50:08:45:de:2a:28:26:cb:
         d3:11:53:f4:fa:0a:63:75:f3:42:b2:f4:5b:72:7c:8e:90:a0:
         2e:c7:b5:8c:11:41:0a:26:ad:d9:cf:58:fa:1f:2e:7d:71:f8:
         23:30:97:ed:85:83:69:7e:34:e6:c5:51:d1:45:a7:a0:cf:17:
         f4:e1:51:34:ea:03:69:d0:b2:22:27:eb:3d:6c:92:4a:da:63:
         6b:a9:f7:c0:a2:12:39:e1:14:d2:a7:11:89:cc:6d:5d:6e:4e:
         09:4f:47:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:47 2024 by rpki-client on console-ams.rpki-client.org