Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/13fa7d5c-368d-4af3-b8e7-1786246dd62f/0/323030313a6466323a383163303a3a2f34382d3438203d3e20313432333839.roa
File:                     323030313a6466323a383163303a3a2f34382d3438203d3e20313432333839.roa (raw, json)
Hash identifier:          HI3t6nO0ndCIBFVBJ55gBslmOqlq+RX0mB3O2XthWfc=
Subject key identifier:   DE:16:E2:1B:F8:7D:77:47:18:E4:4D:60:71:A3:14:20:A7:30:95:C1
Certificate issuer:       /CN=0690815B5E9C2228263F17C9B3F5F99DD6882F9C
Certificate serial:       092D92EFDABA919D1D03A23608B282FFF665F51A
Authority key identifier: 06:90:81:5B:5E:9C:22:28:26:3F:17:C9:B3:F5:F9:9D:D6:88:2F:9C
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0690815B5E9C2228263F17C9B3F5F99DD6882F9C.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/13fa7d5c-368d-4af3-b8e7-1786246dd62f/0/323030313a6466323a383163303a3a2f34382d3438203d3e20313432333839.roa
Signing time:             Mon 29 May 2023 10:44:21 +0000
ROA not before:           Mon 29 May 2023 10:39:21 +0000
ROA not after:            Mon 27 May 2024 10:44:21 +0000
asID:                     142389
IP address blocks:        2001:df2:81c0::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:2d:92:ef:da:ba:91:9d:1d:03:a2:36:08:b2:82:ff:f6:65:f5:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0690815B5E9C2228263F17C9B3F5F99DD6882F9C
        Validity
            Not Before: May 29 10:39:21 2023 GMT
            Not After : May 27 10:44:21 2024 GMT
        Subject: CN=DE16E21BF87D774718E44D6071A31420A73095C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:92:c2:ba:a0:c4:18:a8:95:19:84:96:28:1b:
                    ac:af:85:97:59:2e:f3:af:24:d8:47:27:53:63:79:
                    08:53:ee:ef:be:71:14:68:d3:37:82:40:87:b7:f3:
                    2c:b8:44:fd:aa:61:fc:12:86:3d:02:24:ff:fc:28:
                    d9:d1:74:51:d9:ee:46:66:ea:9f:4b:5a:7c:c5:01:
                    e6:86:c4:5c:65:58:1c:c2:db:17:83:c1:cc:82:5f:
                    b7:c8:85:50:a2:2f:a7:93:ad:5e:88:e5:01:f0:f5:
                    d7:68:e2:34:62:09:d5:65:e2:60:a7:81:9c:53:2b:
                    46:a6:32:7e:98:4b:ec:8a:ad:67:24:54:50:e6:aa:
                    8f:34:4f:b4:ae:b1:eb:8a:5a:5c:bc:ef:cb:68:1a:
                    fe:98:42:42:a8:05:b8:51:25:b4:e1:2b:b5:37:d0:
                    94:6d:57:a6:74:7c:c4:c7:f9:32:41:ba:49:94:bc:
                    c7:37:02:20:d7:aa:f2:43:71:c6:42:41:ee:ac:58:
                    18:fc:60:cb:fa:df:6f:38:c0:fe:eb:58:c0:3a:b8:
                    ee:aa:39:14:a4:e6:e4:ca:48:99:41:cb:85:f6:21:
                    bc:d4:6c:b6:7c:38:25:f4:31:a1:4a:18:31:4d:d8:
                    9c:24:14:aa:66:38:18:76:2d:0d:98:31:f5:82:ba:
                    94:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:16:E2:1B:F8:7D:77:47:18:E4:4D:60:71:A3:14:20:A7:30:95:C1
            X509v3 Authority Key Identifier:
                keyid:06:90:81:5B:5E:9C:22:28:26:3F:17:C9:B3:F5:F9:9D:D6:88:2F:9C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/13fa7d5c-368d-4af3-b8e7-1786246dd62f/0/0690815B5E9C2228263F17C9B3F5F99DD6882F9C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0690815B5E9C2228263F17C9B3F5F99DD6882F9C.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/13fa7d5c-368d-4af3-b8e7-1786246dd62f/0/323030313a6466323a383163303a3a2f34382d3438203d3e20313432333839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df2:81c0::/48

    Signature Algorithm: sha256WithRSAEncryption
         31:24:95:22:03:1a:d8:a1:69:cf:c3:d3:7c:33:e3:94:eb:f1:
         ac:1a:5e:5d:c8:2e:63:b5:80:c6:4d:9f:6c:c3:cc:d8:52:76:
         ae:76:f6:c0:c6:cc:c3:f9:b6:a8:1d:af:6c:25:dd:7e:3c:40:
         7d:6c:b3:ba:3b:e6:a0:5b:4f:80:25:e8:31:d0:66:d2:47:a3:
         94:16:66:d4:85:ab:03:50:c9:5a:3f:3e:85:88:15:d1:7f:ef:
         8d:b2:d4:4b:89:d6:83:b6:50:9b:66:2b:f9:2a:bd:5d:ab:17:
         18:b5:07:92:28:92:1d:72:06:79:e9:0d:61:63:d0:a3:64:0c:
         82:7a:e6:0c:a8:5e:e3:9d:6c:d8:c3:6c:f9:7d:ac:d1:8e:09:
         45:56:92:59:99:83:48:da:bc:1e:2f:0b:56:f6:da:96:47:43:
         a0:2d:df:cb:fb:fb:dc:67:d4:ff:ec:b0:92:90:85:48:93:1e:
         52:44:b4:c2:4f:e8:3c:23:e6:87:e5:7d:af:eb:7e:a8:c5:9b:
         54:98:15:b8:64:64:9f:bb:86:29:31:3b:22:f6:60:43:9d:b9:
         c8:42:85:e5:e0:c5:dd:f9:72:86:aa:16:65:e7:64:fb:4e:6b:
         14:28:6d:07:85:87:16:22:3a:66:6f:ca:eb:18:86:39:f3:cc:
         7d:ff:bb:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:01 2024 by rpki-client on console-fra.rpki-client.org