Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/323030313a6466303a663830303a3a2f34382d3438203d3e2030.roa
File:                     323030313a6466303a663830303a3a2f34382d3438203d3e2030.roa (raw, json)
Hash identifier:          QwkpyZo9k4e+3Qs7j5UQjIg2nB4xq9IgZJ4nB8xwEbw=
Subject key identifier:   A4:05:9D:53:99:DE:E3:B9:CC:B6:16:1A:44:D6:64:E3:78:5F:A2:DE
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       3793F65CC9BF028B9EFBAEA4013B42F29BE53AF9
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323030313a6466303a663830303a3a2f34382d3438203d3e2030.roa
Signing time:             Wed 02 Feb 2022 06:20:23 +0000
ROA not before:           Wed 02 Feb 2022 06:15:23 +0000
ROA not after:            Thu 02 Feb 2023 06:20:23 +0000
asID:                     0
IP address blocks:        2001:df0:f800::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:93:f6:5c:c9:bf:02:8b:9e:fb:ae:a4:01:3b:42:f2:9b:e5:3a:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb  2 06:15:23 2022 GMT
            Not After : Feb  2 06:20:23 2023 GMT
        Subject: CN=3082010A0282010100BAEC3CE3E1168D1CE7DFAB9560BB75FC723D8CE8A02F3CF48D211ED7B0D37CCEF343004AA02BE600B68D0F20DB17CA72292F3E466B06BF9464C6AEDD9CB50D99F1E56B0C777C31283A7E3CAE8B40C283B13835746916EE6A6941A371125CD77AD4369DAD6F4340E7F3F4A253F6BC0772F574525553F63DBD0CF464F52D4934FC04543A75AB7059BD38F72059F46618401E11551A25075709EA90F4BFD37C9E98E76B252428BDE1D8F55572B933C4778D3CE7CEDAEDC4935062BC3F869BF31F7E7930B297CE32A3C1DF8230943003862185FB9BCF7ED6A1A141878DB44A39032258651478E618ADABF2004F8FFE44EBADEEC121CD0A30F6F4D36836D3EEBF69930203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ec:3c:e3:e1:16:8d:1c:e7:df:ab:95:60:bb:
                    75:fc:72:3d:8c:e8:a0:2f:3c:f4:8d:21:1e:d7:b0:
                    d3:7c:ce:f3:43:00:4a:a0:2b:e6:00:b6:8d:0f:20:
                    db:17:ca:72:29:2f:3e:46:6b:06:bf:94:64:c6:ae:
                    dd:9c:b5:0d:99:f1:e5:6b:0c:77:7c:31:28:3a:7e:
                    3c:ae:8b:40:c2:83:b1:38:35:74:69:16:ee:6a:69:
                    41:a3:71:12:5c:d7:7a:d4:36:9d:ad:6f:43:40:e7:
                    f3:f4:a2:53:f6:bc:07:72:f5:74:52:55:53:f6:3d:
                    bd:0c:f4:64:f5:2d:49:34:fc:04:54:3a:75:ab:70:
                    59:bd:38:f7:20:59:f4:66:18:40:1e:11:55:1a:25:
                    07:57:09:ea:90:f4:bf:d3:7c:9e:98:e7:6b:25:24:
                    28:bd:e1:d8:f5:55:72:b9:33:c4:77:8d:3c:e7:ce:
                    da:ed:c4:93:50:62:bc:3f:86:9b:f3:1f:7e:79:30:
                    b2:97:ce:32:a3:c1:df:82:30:94:30:03:86:21:85:
                    fb:9b:cf:7e:d6:a1:a1:41:87:8d:b4:4a:39:03:22:
                    58:65:14:78:e6:18:ad:ab:f2:00:4f:8f:fe:44:eb:
                    ad:ee:c1:21:cd:0a:30:f6:f4:d3:68:36:d3:ee:bf:
                    69:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:05:9D:53:99:DE:E3:B9:CC:B6:16:1A:44:D6:64:E3:78:5F:A2:DE
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323030313a6466303a663830303a3a2f34382d3438203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df0:f800::/48

    Signature Algorithm: sha256WithRSAEncryption
         28:9b:f0:37:03:0c:3c:df:94:d9:35:9b:91:c1:21:bd:11:0d:
         2d:b0:c4:02:04:d7:7d:bb:2b:27:fb:d7:62:5f:4c:d2:aa:d1:
         d8:b4:8a:9e:46:ab:25:09:bf:c2:c9:48:d4:20:d7:63:57:34:
         ec:0b:a4:1f:46:ce:8d:7f:df:fc:d7:f7:7a:53:77:0d:6d:ff:
         13:4c:b8:25:4b:57:d3:99:fd:07:c8:65:e4:02:87:c0:2d:f5:
         7a:8e:db:e9:e8:52:0d:78:19:40:49:49:66:2e:81:6e:d9:12:
         67:3d:87:57:5f:a3:29:7a:80:4e:40:53:9b:28:e1:79:9c:e1:
         2d:3b:90:81:21:f9:d2:b1:b1:5b:20:26:ef:7e:93:d9:0b:e8:
         45:7c:5d:8f:78:52:b8:da:68:58:e1:f1:40:ac:ce:45:31:a6:
         25:96:46:51:04:81:98:31:82:cb:da:90:b5:f4:ee:04:a8:fe:
         a4:fd:71:af:25:42:9b:44:63:6f:29:b9:19:85:6e:58:cf:7f:
         59:8e:c5:65:1d:82:ab:bc:fd:14:3c:36:a3:bf:86:46:21:07:
         7f:34:c5:d6:ec:27:73:f6:30:f0:26:87:34:89:c3:08:9c:68:
         fa:c0:ac:7d:ae:db:62:09:92:2b:14:02:fb:91:0d:9b:d2:9a:
         73:4d:df:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:48 2024 by rpki-client on console-ams.rpki-client.org