Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150551.roa
File:                     AS150551.roa (raw, json)
Hash identifier:          NMJkbGgv/sPSYFzLLrACAWfvWOn9bL3tWgeBWtx4vww=
Subject key identifier:   16:60:51:15:1D:F2:43:BE:5D:21:7C:EA:3A:7C:79:3D:47:61:DE:5F
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       1C98BA358418C7DE1FC94BCE53F8FDEF5FF008DE
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150551.roa
Signing time:             Mon 27 Feb 2023 03:28:27 +0000
ROA not before:           Mon 27 Feb 2023 03:23:27 +0000
ROA not after:            Mon 26 Feb 2024 03:28:27 +0000
asID:                     150551
IP address blocks:        103.190.94.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:98:ba:35:84:18:c7:de:1f:c9:4b:ce:53:f8:fd:ef:5f:f0:08:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb 27 03:23:27 2023 GMT
            Not After : Feb 26 03:28:27 2024 GMT
        Subject: CN=166051151DF243BE5D217CEA3A7C793D4761DE5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:22:90:2a:e7:81:5a:04:1d:65:81:4e:2b:19:
                    3c:f8:57:02:54:57:ca:21:b5:20:6a:6a:e0:c0:b0:
                    39:d4:ec:89:d9:63:6e:37:a5:55:e1:30:c1:e7:1e:
                    11:86:42:9f:e3:37:de:85:3a:d5:4a:31:28:82:99:
                    d8:f3:29:7c:ad:b7:76:2a:64:ee:f8:9f:11:30:75:
                    3e:0e:c3:9d:a6:e5:3f:bf:7f:4a:ef:dd:54:e4:9e:
                    40:a7:46:9b:a7:e0:36:5a:3f:39:89:89:e6:07:ea:
                    99:99:e5:3e:f2:f7:6f:f0:97:a2:e2:38:78:ec:21:
                    f3:d4:98:39:f3:1d:1a:ef:3c:a2:98:b7:bc:c4:65:
                    4b:f6:7c:87:3c:f7:30:76:c8:fe:df:24:b2:38:8d:
                    dc:53:98:ed:11:c8:14:5e:01:c1:0a:a4:1a:45:1f:
                    dd:01:27:b4:e7:70:bb:07:35:fb:37:14:ff:7c:e0:
                    d3:3a:e4:96:ba:06:52:7e:0d:77:a3:df:fd:6c:9d:
                    30:58:d9:1e:f8:9e:5f:d7:63:50:66:9c:a8:aa:c8:
                    98:c0:36:fa:ad:ed:95:c9:e8:4d:07:3e:27:7e:68:
                    4c:8f:7d:b6:4e:08:7c:cf:5c:ba:1c:d0:79:10:79:
                    41:98:cf:be:15:74:f6:59:2e:9b:0d:b0:89:ca:0a:
                    41:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:60:51:15:1D:F2:43:BE:5D:21:7C:EA:3A:7C:79:3D:47:61:DE:5F
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS150551.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.190.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:ef:f6:58:98:9a:ac:cf:a7:9b:97:35:65:e9:10:87:d7:fa:
         3a:ac:83:6a:27:75:62:05:c2:a6:1f:69:72:81:a4:95:be:e7:
         ed:be:ce:76:c9:be:87:c4:14:b6:ff:5c:0e:a6:48:7b:f2:a7:
         80:ef:bb:d8:3a:7b:84:f8:9c:bd:8b:c0:38:df:5a:00:75:ed:
         c2:86:d2:5a:f5:3b:b0:95:8e:c7:18:50:35:ca:e4:21:77:87:
         a2:4b:7d:b5:4f:93:a6:a0:78:a8:61:59:f5:ac:c3:80:b3:a8:
         d9:7f:7f:63:2c:3c:97:86:ae:ab:ca:06:aa:22:80:0e:4e:dd:
         79:dd:2c:40:82:0b:6a:f3:96:85:ef:e7:4f:0d:6f:13:37:b8:
         ae:5e:00:e6:61:20:a6:4b:a0:0c:46:3a:97:b8:b9:e4:50:db:
         21:7f:71:01:de:0d:f8:43:a0:93:b6:05:21:50:bd:53:d4:f5:
         45:97:97:bb:60:2c:f7:49:67:71:7e:54:77:23:fb:07:13:13:
         71:d5:f5:ea:4b:e4:2f:3e:b0:cc:b9:ff:95:95:3c:1a:53:68:
         c9:04:29:b2:a9:92:7d:22:28:6c:c7:6b:70:7a:c2:df:16:5f:
         b5:cf:50:a2:a9:10:2e:95:fe:d3:95:d2:26:73:01:c0:49:84:
         8d:32:58:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:49 2024 by rpki-client on console-ams.rpki-client.org