Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3131392e34372e39342e302f32342d3234203d3e20313334363535.roa
File:                     3131392e34372e39342e302f32342d3234203d3e20313334363535.roa (raw, json)
Hash identifier:          x8aD4dOO1lIuFfLIwvXNNX8zxLwCZMWO10mZ7uA8fj8=
Subject key identifier:   B8:B3:A0:73:1A:B6:26:9D:D5:CA:2E:7A:37:14:93:BF:CB:ED:5B:4A
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       198A171454F4BCE20669EE88780FD3004DFB4F10
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3131392e34372e39342e302f32342d3234203d3e20313334363535.roa
Signing time:             Wed 08 Sep 2021 03:32:31 +0000
ROA not before:           Wed 08 Sep 2021 03:27:31 +0000
ROA not after:            Thu 08 Sep 2022 03:32:31 +0000
asID:                     134655
IP address blocks:        119.47.94.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:8a:17:14:54:f4:bc:e2:06:69:ee:88:78:0f:d3:00:4d:fb:4f:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Sep  8 03:27:31 2021 GMT
            Not After : Sep  8 03:32:31 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:83:b7:1e:8f:4b:2f:08:0e:c9:2b:be:ad:c2:
                    dd:04:66:7a:bf:da:ed:d6:79:d3:fb:9f:21:0d:5e:
                    11:e4:c4:bc:4d:61:a4:7b:ef:9b:1b:a1:8e:88:78:
                    fc:70:e7:c5:b9:89:a0:19:e1:dd:d9:b7:c1:a2:41:
                    87:a0:16:5c:33:29:3b:c6:d5:a9:e9:25:57:07:ac:
                    69:a5:8a:40:cc:13:7e:64:af:f8:c7:f1:90:ed:28:
                    9b:07:50:82:4c:fd:ad:4f:71:8e:6f:9f:93:c4:c1:
                    3f:22:31:da:84:a1:4b:ec:11:0f:33:38:7e:4b:6e:
                    37:b8:b5:68:56:7d:df:eb:e3:4e:f4:ae:d3:ea:0b:
                    49:27:0f:43:70:4a:fc:d6:86:5a:c6:f6:90:54:1a:
                    76:bf:bd:12:b7:b0:6f:2d:c6:bd:9e:55:41:42:65:
                    bf:9d:c2:2a:0c:2c:13:73:5d:45:92:d3:25:16:2a:
                    bf:43:77:b4:bf:56:90:72:98:fd:69:50:ac:fe:ed:
                    bb:7b:b1:a0:22:cd:f7:4e:f9:83:42:48:a7:7d:14:
                    fe:89:95:08:26:cd:17:b7:97:e3:25:82:d0:af:c5:
                    6b:f2:f4:5c:25:c2:8c:81:aa:93:43:b3:d3:f2:8d:
                    be:a6:26:8a:d4:aa:dc:04:d7:df:91:ea:9e:86:81:
                    26:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:B3:A0:73:1A:B6:26:9D:D5:CA:2E:7A:37:14:93:BF:CB:ED:5B:4A
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3131392e34372e39342e302f32342d3234203d3e20313334363535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.47.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4b:f3:af:3a:0b:2f:e9:6c:0a:25:1f:1a:8d:64:e9:99:04:f7:
         12:35:21:b0:e9:0b:49:31:59:9d:70:df:bb:39:49:9a:d2:b0:
         8d:63:ff:22:82:67:17:12:cf:01:4a:d6:7e:8b:ec:3a:f3:e7:
         40:4e:8c:ad:42:3f:a6:06:8f:fc:98:d3:eb:45:cf:e8:8e:43:
         54:76:03:45:97:d8:57:d9:e4:44:91:1d:9b:e1:65:7b:7e:86:
         d0:84:8d:62:8f:18:5c:be:9d:f7:11:93:46:4c:e4:2b:8e:88:
         c5:65:c0:39:6a:99:a6:39:3a:47:46:c9:a3:ee:93:42:19:93:
         00:14:10:c4:a1:d2:e0:d2:55:4f:13:81:f3:3d:89:ab:9e:af:
         57:17:15:1b:77:95:60:26:0b:49:31:ac:86:dd:23:af:21:77:
         5e:e2:0b:de:4a:5e:07:1d:66:85:8c:f7:ef:66:56:fc:43:8f:
         a6:4b:af:c2:5b:7f:ab:23:0a:0e:44:6a:ae:b7:90:f8:7d:a0:
         90:ba:c7:3e:e5:b3:87:e6:f6:ad:1a:6d:4e:6e:ed:e8:3d:07:
         9f:38:84:27:5c:e0:0f:25:27:88:06:ab:13:d0:4e:68:81:dd:
         75:c2:da:a5:eb:e7:84:27:b9:90:fb:97:56:5b:65:7b:2b:64:
         77:06:15:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:12 2024 by rpki-client on console-fra.rpki-client.org