Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e38332e39382e302f32342d3234203d3e203435333035.roa
File:                     3130332e38332e39382e302f32342d3234203d3e203435333035.roa (raw, json)
Hash identifier:          sfkGmv1uOdAqj/QRc2OIXrNcJKfqbPgyMyuttv/EMno=
Subject key identifier:   EA:00:B2:80:A3:8E:BB:15:B7:90:5C:A8:01:A0:D7:BC:AB:73:1A:D4
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       5D7D920DD6EB43673AED3DC71F46B22A24E0DEF0
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e38332e39382e302f32342d3234203d3e203435333035.roa
Signing time:             Wed 19 Jan 2022 12:20:19 +0000
ROA not before:           Wed 19 Jan 2022 12:15:19 +0000
ROA not after:            Thu 19 Jan 2023 12:20:19 +0000
asID:                     45305
IP address blocks:        103.83.98.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:7d:92:0d:d6:eb:43:67:3a:ed:3d:c7:1f:46:b2:2a:24:e0:de:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jan 19 12:15:19 2022 GMT
            Not After : Jan 19 12:20:19 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a4:44:3e:35:00:95:40:3d:70:ba:4d:51:49:
                    1e:22:be:99:38:48:b8:70:42:d9:30:84:92:99:95:
                    33:97:73:9d:74:36:7c:a1:7c:a5:99:a2:76:46:45:
                    db:f3:20:d8:90:d4:89:2e:46:77:b7:6d:9e:90:d1:
                    24:12:ee:f4:a4:07:13:0d:e7:19:94:ae:3b:1e:3d:
                    c4:c4:18:3d:8a:f0:52:44:22:56:49:c6:b2:8a:2d:
                    c1:dd:c9:7d:53:61:36:27:b8:c6:e6:f7:e0:2b:45:
                    84:39:61:91:38:8e:a2:08:dc:bb:36:0f:26:9e:5b:
                    11:fa:3c:3b:10:0e:9f:8f:6c:63:4a:c0:68:fe:b7:
                    00:9f:1f:7e:32:54:76:18:1b:19:f8:30:41:6a:fb:
                    fc:a4:d8:1d:f3:94:c3:a6:26:12:16:f9:d9:fe:a6:
                    71:d3:97:09:68:55:46:0b:3f:f2:a2:3f:31:64:c4:
                    65:01:0d:9c:89:46:a7:c3:d5:df:af:c7:1a:f4:83:
                    d0:02:4d:af:d1:f8:de:16:05:f5:8f:df:53:60:37:
                    21:04:12:a4:4d:30:d4:26:f4:02:2e:6c:ec:dc:64:
                    68:ef:4b:b4:7f:de:07:6d:44:00:ac:b3:3f:11:83:
                    1e:c8:c3:3c:15:a0:80:ee:09:8d:29:97:6a:4c:43:
                    19:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:00:B2:80:A3:8E:BB:15:B7:90:5C:A8:01:A0:D7:BC:AB:73:1A:D4
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e38332e39382e302f32342d3234203d3e203435333035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.83.98.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:dd:33:82:2b:61:9e:19:24:a8:fc:43:a7:fc:6f:c6:1b:02:
         47:9e:41:8f:5f:b6:a4:45:94:73:b8:e2:ae:34:1c:95:f5:cd:
         8f:4c:3b:4a:5f:8e:b6:1d:bc:ad:d5:10:77:09:1b:49:4c:9f:
         34:73:71:30:7e:f6:ac:48:fd:7b:32:c5:36:ba:4f:9e:ad:94:
         02:91:5c:42:3a:42:dc:4d:6c:70:bc:fc:ab:6a:af:60:f9:63:
         19:58:86:96:5b:3b:6f:85:05:a9:7f:35:a1:71:fc:a5:c8:c9:
         8d:ba:37:0e:02:a1:21:be:8c:21:f5:5a:42:41:dd:8c:54:a2:
         30:4b:0b:01:e7:45:4c:c6:29:ae:21:cd:6d:01:41:9f:6b:30:
         c0:45:e4:32:1f:46:66:7d:4d:8d:ee:f1:76:c5:81:1a:b6:ed:
         2d:43:db:38:3e:84:b3:86:32:69:40:5d:ed:31:66:4a:94:aa:
         8a:58:1a:61:4c:af:04:28:8a:90:03:2e:87:07:dd:52:43:cf:
         04:b7:3a:79:1c:10:c5:9a:6c:13:01:b9:95:e4:11:ba:ec:71:
         3f:24:a0:e4:cd:34:bd:28:cb:87:66:54:a6:a1:82:9a:3b:ce:
         75:cb:fd:49:fd:ee:4c:fe:57:29:2c:94:9e:66:e3:89:e4:e7:
         d5:82:c5:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:12 2024 by rpki-client on console-fra.rpki-client.org