Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/323030313a6466303a313734303a3a2f34382d3438203d3e20313432333639.roa
File:                     323030313a6466303a313734303a3a2f34382d3438203d3e20313432333639.roa (raw, json)
Hash identifier:          MNlMV21abtUEdaa2K3SEd+dby5V5Nm4hdI1Ylbs8cuU=
Subject key identifier:   82:7D:E5:54:24:8A:CD:14:92:7B:5A:A6:B2:E9:C7:85:EC:F7:58:C4
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       539E65AA4D5B671BE91E2710EC1896BAE0E3C564
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323030313a6466303a313734303a3a2f34382d3438203d3e20313432333639.roa
Signing time:             Wed 01 Dec 2021 03:07:04 +0000
ROA not before:           Wed 01 Dec 2021 03:02:04 +0000
ROA not after:            Thu 01 Dec 2022 03:07:04 +0000
asID:                     142369
IP address blocks:        2001:df0:1740::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:9e:65:aa:4d:5b:67:1b:e9:1e:27:10:ec:18:96:ba:e0:e3:c5:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Dec  1 03:02:04 2021 GMT
            Not After : Dec  1 03:07:04 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:a7:9c:41:4c:6b:cf:91:3a:42:e4:3a:a2:35:
                    36:95:49:1e:4c:2d:d3:3a:c6:74:3f:f2:4d:f1:c1:
                    8e:b9:aa:bc:49:ee:b4:4f:33:b2:86:e9:c9:34:02:
                    a5:6a:cb:f1:b9:72:7f:b2:39:8e:01:04:b0:d7:e4:
                    74:c4:a0:6e:72:bd:33:30:31:bd:ba:b5:05:59:27:
                    ba:83:15:0a:5f:0f:f8:23:76:08:16:ed:d4:1e:fd:
                    9c:a3:fd:72:ad:8b:4d:3c:97:59:9e:0c:be:5e:aa:
                    22:2a:50:f7:f7:77:88:32:7d:01:ea:43:30:fe:50:
                    1b:11:84:05:0d:ae:8d:81:8b:cd:26:61:5d:15:cf:
                    0b:9f:7a:f8:5e:cc:a4:1c:c3:50:96:cd:b6:cd:bc:
                    5d:ce:f4:65:f9:65:35:d6:d8:8d:09:cb:58:84:72:
                    b5:d3:56:88:ae:13:8a:e5:b1:43:ba:2d:65:46:79:
                    27:54:56:ae:32:2f:47:bd:92:a2:2e:34:74:14:33:
                    a7:d8:ff:4e:6a:9e:13:63:ea:af:45:39:2c:6a:36:
                    30:e5:50:0f:f8:88:45:b1:f4:4d:88:07:00:b7:3d:
                    40:98:89:48:94:74:85:6f:4a:6b:6e:e7:c8:a9:71:
                    e5:a1:aa:11:e9:78:c8:a6:72:3c:67:0b:43:6f:b3:
                    ff:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:7D:E5:54:24:8A:CD:14:92:7B:5A:A6:B2:E9:C7:85:EC:F7:58:C4
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323030313a6466303a313734303a3a2f34382d3438203d3e20313432333639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df0:1740::/48

    Signature Algorithm: sha256WithRSAEncryption
         07:88:19:01:5b:9c:ae:3a:af:d3:88:4a:55:fd:a2:eb:8f:ec:
         5f:07:4e:ef:7c:9c:52:3c:88:2c:a6:90:fe:c1:44:9b:0f:a4:
         fb:f5:e1:89:b1:1a:0c:3c:0e:c8:dd:86:a0:7f:3c:39:ff:9d:
         96:f7:da:25:d0:95:6c:57:75:54:65:b3:a9:95:fa:87:34:b3:
         14:ee:ce:59:e4:23:af:dd:26:11:2b:ff:f2:bd:45:18:6e:10:
         99:4e:6f:0f:6f:93:4f:81:d8:e7:07:18:73:93:c2:e4:f5:08:
         fb:e3:a4:79:78:50:9c:b6:57:40:8a:68:3e:9e:40:84:a9:48:
         32:9d:fe:56:9c:c0:d9:53:23:bd:8a:e8:03:5d:46:1a:e1:4f:
         8f:44:5c:0a:6c:67:81:42:08:a8:27:99:6d:7c:f2:a1:18:5d:
         22:51:41:b3:c1:4e:0f:2d:ac:fe:fd:c2:bb:ce:91:91:ce:31:
         e6:3e:db:2e:b1:b6:28:99:22:8f:fc:43:79:96:3a:3f:0d:81:
         85:6c:06:ae:6b:41:b8:bf:5c:ab:a4:6d:15:52:83:c1:e5:47:
         c1:e8:3f:71:aa:25:68:e2:cd:f0:75:69:76:1f:29:d3:e6:db:
         46:55:cd:30:cb:0b:a4:0e:01:61:25:ee:5c:a6:19:ff:bb:ea:
         19:13:25:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:12 2024 by rpki-client on console-fra.rpki-client.org