Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS147144.roa
File:                     AS147144.roa (raw, json)
Hash identifier:          ql7uNPEumTHUWHmWRQ9vFda2ltjzI8VPgbaaS6BppVE=
Subject key identifier:   DC:3F:99:C7:4D:77:6A:AE:50:FE:5C:D5:E6:5B:20:E2:3A:A5:73:DF
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       12C65ED5A6D5D8C0463F7C12DF96E7C7B89FB283
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS147144.roa
Signing time:             Mon 11 Jul 2022 04:26:29 +0000
ROA not before:           Mon 11 Jul 2022 04:21:29 +0000
ROA not after:            Mon 10 Jul 2023 04:26:29 +0000
asID:                     147144
IP address blocks:        103.175.87.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:c6:5e:d5:a6:d5:d8:c0:46:3f:7c:12:df:96:e7:c7:b8:9f:b2:83
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jul 11 04:21:29 2022 GMT
            Not After : Jul 10 04:26:29 2023 GMT
        Subject: CN=DC3F99C74D776AAE50FE5CD5E65B20E23AA573DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:52:2b:69:ae:ca:52:27:38:36:c7:50:1f:77:
                    73:8c:96:36:13:3b:cd:32:5a:25:27:db:cf:74:2e:
                    e8:13:99:99:06:d6:2b:7f:9e:63:46:f2:72:fe:e0:
                    4c:47:e6:58:df:1f:bd:b2:6d:ab:eb:70:ab:ca:bc:
                    4b:19:43:18:74:68:af:5c:8f:ea:e4:c8:7f:f7:20:
                    09:a3:43:e9:72:80:40:ab:46:c6:5b:63:7e:f8:b9:
                    d3:63:97:0e:c7:60:ee:92:3e:51:51:ea:d2:d1:98:
                    4f:c0:54:a8:6d:c9:0f:cf:8d:92:33:cc:44:47:09:
                    7e:41:9f:43:6d:d9:c2:28:26:3e:06:46:c4:e1:87:
                    54:27:bc:f7:9a:03:23:f3:dd:47:e4:4e:a9:53:71:
                    c4:e1:74:e2:c9:10:37:8c:8d:f4:92:9c:7c:4b:9d:
                    46:49:91:a4:0a:02:9a:bb:88:88:10:3e:7a:c6:46:
                    da:56:f1:8b:c3:e6:62:1b:80:bd:b4:7d:73:24:fc:
                    3d:11:60:f2:9c:d3:87:7f:c2:ca:ae:e5:21:e9:02:
                    0a:41:68:88:5b:ea:c7:7a:21:17:c3:5c:25:03:0d:
                    04:78:1e:ba:07:b6:48:39:6c:8c:e5:dc:d7:70:41:
                    7c:e2:cd:3d:38:38:3e:6b:70:9a:a8:58:36:74:dd:
                    1d:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:3F:99:C7:4D:77:6A:AE:50:FE:5C:D5:E6:5B:20:E2:3A:A5:73:DF
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS147144.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.175.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:3b:45:72:8b:70:95:3e:83:22:31:87:2e:89:5d:fd:13:8e:
         b3:79:bf:ba:29:0d:81:c1:70:91:ef:f5:05:d7:49:ee:1e:d6:
         d9:48:a3:e4:23:e5:41:67:f3:55:13:cc:94:c7:f8:00:a2:dc:
         46:c7:31:66:e0:b7:0c:20:aa:74:4d:25:8b:2c:5e:39:f0:96:
         4f:41:05:9a:39:49:2d:cc:9b:fa:ad:20:8b:e7:77:4c:0d:9e:
         b9:19:c1:02:e9:09:c7:88:9b:c0:37:76:c9:e5:8f:c6:e3:0d:
         85:a3:be:aa:f5:36:2a:e9:39:11:2c:9d:13:04:2a:c3:8a:1c:
         b8:ce:79:fc:cb:bb:9a:63:4a:4e:ee:64:09:f9:fb:81:31:cc:
         c5:2f:f1:70:78:51:96:2e:d7:f7:ac:a1:ab:7a:2f:86:ea:a2:
         7b:36:b6:1c:83:81:73:ec:be:c8:e5:4c:e3:cd:57:76:63:48:
         e9:52:e4:ea:d1:50:fe:f0:5e:cf:7e:eb:78:12:61:3f:34:2b:
         06:ec:35:8c:cc:85:5c:6e:8f:8e:12:d3:21:64:01:ce:4f:63:
         2c:24:55:1d:54:05:84:8f:bf:27:52:c0:0c:03:88:3b:4a:a7:
         dd:46:0c:25:31:ea:f2:59:7b:05:3c:5b:c0:f5:7c:a6:2f:6b:
         4d:a5:c4:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:49 2024 by rpki-client on console-ams.rpki-client.org