Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/323030313a6466313a393438303a3a2f34382d3438203d3e2030.roa
File:                     323030313a6466313a393438303a3a2f34382d3438203d3e2030.roa (raw, json)
Hash identifier:          EOI98A8EUTWJszeGNWE8lV8gPW5H/H69dcw4qScErqc=
Subject key identifier:   BC:BE:DD:24:A4:CC:29:9C:3C:34:60:57:0F:DE:CF:A7:AE:12:6E:C3
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       6BD0264F62BE1AE74DE1E2472A6825BE67A36270
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323030313a6466313a393438303a3a2f34382d3438203d3e2030.roa
Signing time:             Wed 02 Feb 2022 06:24:57 +0000
ROA not before:           Wed 02 Feb 2022 06:19:57 +0000
ROA not after:            Thu 02 Feb 2023 06:24:57 +0000
asID:                     0
IP address blocks:        2001:df1:9480::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:d0:26:4f:62:be:1a:e7:4d:e1:e2:47:2a:68:25:be:67:a3:62:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb  2 06:19:57 2022 GMT
            Not After : Feb  2 06:24:57 2023 GMT
        Subject: CN=3082010A0282010100CF19EDB65EABE5C8645CB39F2E42FCE1AE78DF13A3F583F1410ACE7B1721D0896ECD98A5FE0A8AED3B35CD8649B7C0DCFAD6CAF24656538F687BFDB6D61ADA6D280A1B79259462F77A9DD866F0906E37E3AEB3AC0B2F9F78EFEE9559B4A09E48218E28A876F2651CD483C4779A66EAE1905E4520EF0A028EF261C6A93DAD5BFB053C8116EBC228363189B9AC15EF5D524970B2D9E68839FB4DC835D930797AED366A8DAACA02CDED24DBAA9603BEB6F40C6F1022155C0ED70DD08A0DD10502F32E0CB3C146D01C7CC53A2648D19A7FED6278C85C0052161EAD674BD1630A3984374AA9067F06ACEDDF0832BE00504AF479E53A0DBA6A2367D178596DA56A31B50203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:19:ed:b6:5e:ab:e5:c8:64:5c:b3:9f:2e:42:
                    fc:e1:ae:78:df:13:a3:f5:83:f1:41:0a:ce:7b:17:
                    21:d0:89:6e:cd:98:a5:fe:0a:8a:ed:3b:35:cd:86:
                    49:b7:c0:dc:fa:d6:ca:f2:46:56:53:8f:68:7b:fd:
                    b6:d6:1a:da:6d:28:0a:1b:79:25:94:62:f7:7a:9d:
                    d8:66:f0:90:6e:37:e3:ae:b3:ac:0b:2f:9f:78:ef:
                    ee:95:59:b4:a0:9e:48:21:8e:28:a8:76:f2:65:1c:
                    d4:83:c4:77:9a:66:ea:e1:90:5e:45:20:ef:0a:02:
                    8e:f2:61:c6:a9:3d:ad:5b:fb:05:3c:81:16:eb:c2:
                    28:36:31:89:b9:ac:15:ef:5d:52:49:70:b2:d9:e6:
                    88:39:fb:4d:c8:35:d9:30:79:7a:ed:36:6a:8d:aa:
                    ca:02:cd:ed:24:db:aa:96:03:be:b6:f4:0c:6f:10:
                    22:15:5c:0e:d7:0d:d0:8a:0d:d1:05:02:f3:2e:0c:
                    b3:c1:46:d0:1c:7c:c5:3a:26:48:d1:9a:7f:ed:62:
                    78:c8:5c:00:52:16:1e:ad:67:4b:d1:63:0a:39:84:
                    37:4a:a9:06:7f:06:ac:ed:df:08:32:be:00:50:4a:
                    f4:79:e5:3a:0d:ba:6a:23:67:d1:78:59:6d:a5:6a:
                    31:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:BE:DD:24:A4:CC:29:9C:3C:34:60:57:0F:DE:CF:A7:AE:12:6E:C3
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323030313a6466313a393438303a3a2f34382d3438203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df1:9480::/48

    Signature Algorithm: sha256WithRSAEncryption
         53:29:ad:e2:c4:11:e6:4f:f1:bf:3f:3f:d0:f8:7c:d1:9c:82:
         b7:9f:2a:42:82:e2:7c:5f:8a:e2:16:74:18:56:d2:18:6b:64:
         3f:29:b2:45:c7:00:f9:18:7f:1c:4b:1e:eb:12:b3:7c:13:ea:
         61:1b:1d:95:e0:e9:8e:a6:03:b2:31:06:48:07:71:78:ed:03:
         da:ee:46:4c:0d:f2:80:26:47:fd:23:d6:d3:79:c5:18:6b:42:
         84:7f:35:b3:74:af:5f:82:dd:9e:dd:64:68:e6:f3:d0:a3:b6:
         a3:cd:10:fb:35:bb:19:6b:69:57:6b:28:64:2c:40:7c:a0:37:
         c3:c1:b3:60:0c:9a:c5:84:90:05:cc:a8:46:d4:00:e4:b8:8b:
         b6:f7:fe:2e:16:bc:00:99:39:a3:59:0e:7f:e1:b7:74:70:c9:
         39:68:99:c7:33:05:9a:89:e6:2c:c8:ee:99:28:c0:c0:46:b4:
         92:70:97:05:a0:4e:35:a5:08:19:9b:70:e0:13:6a:72:b6:d8:
         29:84:79:af:1b:21:d4:6a:ed:7c:94:81:99:1b:87:4c:66:a1:
         4c:50:9d:c8:a6:5f:6c:50:75:3d:93:54:8f:d1:bf:03:8b:55:
         aa:bc:64:57:6c:fb:bf:09:c2:d3:88:fa:74:90:d0:14:e9:93:
         42:c7:f7:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:48 2024 by rpki-client on console-ams.rpki-client.org