Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3132342e36362e3136302e302f32312d3234203d3e2030.roa
File:                     3132342e36362e3136302e302f32312d3234203d3e2030.roa (raw, json)
Hash identifier:          oqwQ10tszi1tEdyqLHHcRF+hkfJZxNgy2Yhk2I2ccT8=
Subject key identifier:   21:D7:49:E5:CF:2E:7B:04:F9:1A:2F:C7:C3:47:6C:D2:EF:88:7A:E3
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       56E272EC49C412ABF7C34281554DF224FB79878E
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3132342e36362e3136302e302f32312d3234203d3e2030.roa
Signing time:             Wed 02 Feb 2022 06:29:48 +0000
ROA not before:           Wed 02 Feb 2022 06:24:48 +0000
ROA not after:            Thu 02 Feb 2023 06:29:48 +0000
asID:                     0
IP address blocks:        124.66.160.0/21 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            56:e2:72:ec:49:c4:12:ab:f7:c3:42:81:55:4d:f2:24:fb:79:87:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb  2 06:24:48 2022 GMT
            Not After : Feb  2 06:29:48 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:84:fa:7e:b7:ba:c2:6d:81:75:e1:15:1d:d0:
                    b1:d4:5a:05:08:a2:eb:8c:25:df:8f:87:3c:c5:24:
                    a4:2e:9d:47:54:b7:78:c3:89:b6:a3:09:4c:18:2c:
                    75:0b:fa:9f:3b:5a:1e:fa:15:04:f5:b3:94:3c:dd:
                    06:d8:ec:67:14:2e:e1:4d:ce:b5:0d:98:33:06:86:
                    4c:5b:a6:37:c7:7d:62:04:80:a5:80:19:c5:c5:5a:
                    00:44:5c:67:17:cf:41:6d:db:01:7c:3f:93:c2:99:
                    af:41:19:d9:91:1b:43:4b:2c:eb:bb:6a:8c:4b:42:
                    21:23:c9:c8:d4:06:13:f8:af:4b:42:d2:9a:d0:c0:
                    93:eb:9b:34:50:fa:a1:c2:91:d4:df:77:07:92:af:
                    90:7d:e7:11:71:2f:bc:b8:e2:be:72:de:07:fb:29:
                    76:22:85:f2:8e:7c:db:ac:59:29:2d:8c:ae:f1:cb:
                    1a:85:48:0e:77:45:a9:d2:51:df:d2:03:76:50:f5:
                    c9:3f:ef:3b:f0:3b:79:81:29:b2:0a:4a:72:90:c6:
                    b8:70:41:3a:0c:ce:62:16:8e:7b:81:6f:e8:8b:3f:
                    d8:7c:b6:46:94:fb:30:da:4d:c9:f0:17:ef:a4:dd:
                    ba:67:d7:48:a4:d8:b9:f9:3c:ce:30:59:b9:e6:d4:
                    2e:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:D7:49:E5:CF:2E:7B:04:F9:1A:2F:C7:C3:47:6C:D2:EF:88:7A:E3
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3132342e36362e3136302e302f32312d3234203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.66.160.0/21

    Signature Algorithm: sha256WithRSAEncryption
         00:d6:2a:84:08:70:f6:70:e4:5d:d5:bd:90:51:2f:23:c7:3c:
         85:86:e4:00:8b:37:42:ae:68:4b:40:e4:d5:06:17:0e:7f:7c:
         1b:b1:54:fe:33:f7:34:82:21:0b:89:1f:3b:6c:66:a9:8d:1f:
         c9:65:58:82:c5:36:2a:d4:62:dc:19:a7:f8:7a:97:6f:df:49:
         3a:86:7e:77:ba:fb:f7:e0:b2:c8:25:2b:5e:09:6d:82:ae:7c:
         00:07:da:ab:83:16:29:42:dc:8d:09:28:f6:67:97:3e:5f:c3:
         4e:e5:ba:08:50:83:32:d8:3d:fa:51:b0:0c:64:ca:3b:b7:46:
         80:65:d1:23:63:a2:ce:d3:dc:aa:92:92:50:a6:a5:c3:b6:05:
         d5:fd:3c:cb:fd:ff:b6:76:e5:1c:e4:8d:2c:29:a8:a3:d2:40:
         a2:1c:76:4c:9c:47:3e:0d:89:45:2e:57:12:11:05:64:bf:cc:
         f6:3e:02:94:84:15:db:dd:2d:89:40:a2:9a:97:b8:e4:b0:95:
         8f:3a:3d:80:8b:ee:3f:37:c0:4d:0b:b5:df:c4:bc:4b:04:83:
         f1:ba:8e:81:fb:9d:52:37:00:6c:38:8f:83:59:2c:59:cc:ee:
         6b:5b:52:e7:4c:ec:54:2a:24:88:70:cd:79:89:af:b4:5b:41:
         8f:b4:55:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:48 2024 by rpki-client on console-ams.rpki-client.org