Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/323030313a6466313a396138303a3a2f34382d3438203d3e2030.roa
File:                     323030313a6466313a396138303a3a2f34382d3438203d3e2030.roa (raw, json)
Hash identifier:          /g1t+fekrlQfgiY11HuJXS6QdcugPnIi8SDIikrCw5E=
Subject key identifier:   7D:D1:F6:0F:24:FC:75:CB:05:78:7D:40:1C:19:81:CB:00:83:E4:36
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       31CABFAA2A69AEFFAACAD23B4CD035418710A6AF
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323030313a6466313a396138303a3a2f34382d3438203d3e2030.roa
Signing time:             Fri 01 Oct 2021 01:36:56 +0000
ROA not before:           Fri 01 Oct 2021 01:31:56 +0000
ROA not after:            Sat 01 Oct 2022 01:36:56 +0000
asID:                     0
IP address blocks:        2001:df1:9a80::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:ca:bf:aa:2a:69:ae:ff:aa:ca:d2:3b:4c:d0:35:41:87:10:a6:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Oct  1 01:31:56 2021 GMT
            Not After : Oct  1 01:36:56 2022 GMT
        Subject: CN=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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:9b:e0:fa:cf:72:70:b5:71:78:8f:44:4e:68:
                    4b:2d:ee:cb:33:8b:df:3f:21:17:a3:b3:b6:7c:02:
                    eb:61:71:5a:ff:4b:2a:6e:77:73:71:03:50:ce:c7:
                    27:39:82:88:b6:52:5a:38:b6:98:b3:ce:32:f3:e6:
                    b1:0a:85:ee:44:46:b5:c3:4d:77:24:89:50:43:37:
                    15:60:d4:37:01:84:0f:ec:01:27:ea:c1:91:b5:42:
                    92:43:99:61:01:37:ed:fc:95:23:f5:3b:61:6e:b1:
                    f2:00:32:d0:1e:1b:25:6f:46:ae:b7:71:a4:b4:fe:
                    b2:f6:d5:50:01:f8:ec:f0:06:96:53:f3:14:18:55:
                    71:fa:d5:c4:15:72:63:f4:61:c7:57:5c:e6:f9:68:
                    6f:8d:4d:f8:db:09:29:fe:2a:5a:cd:7f:0b:07:18:
                    14:38:11:91:bc:56:b8:5b:69:ad:22:6f:8b:2c:46:
                    10:1a:44:d0:ac:e7:c3:0a:4b:03:b4:47:20:d8:34:
                    cb:d9:2d:e1:8c:a6:f7:90:5f:4f:0e:de:1f:a8:4a:
                    18:91:8d:87:58:5f:91:43:cf:6f:5b:c4:11:4a:e0:
                    9a:f3:10:70:a9:ec:71:68:bf:31:a4:4f:0a:b1:10:
                    76:63:b5:31:a2:37:ab:f0:1e:9a:0f:4c:81:83:e1:
                    18:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:D1:F6:0F:24:FC:75:CB:05:78:7D:40:1C:19:81:CB:00:83:E4:36
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323030313a6466313a396138303a3a2f34382d3438203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df1:9a80::/48

    Signature Algorithm: sha256WithRSAEncryption
         08:0e:a5:dc:1f:c4:7d:a6:45:f1:0c:59:a3:18:77:7d:e4:9a:
         36:a3:db:6d:38:9f:92:5a:cf:a6:75:96:5e:69:8f:d0:dd:d4:
         fa:8a:76:52:f4:fc:9a:45:b4:e6:db:08:63:3a:fd:8d:e9:b5:
         bd:13:da:83:c4:69:28:9d:a4:6e:5a:b7:bc:64:46:01:14:5d:
         07:08:6c:c6:f6:ec:9b:fd:b2:f8:52:26:c0:ab:7d:90:04:03:
         53:98:3c:0e:33:85:f2:12:fd:d0:e2:60:a1:90:3a:d1:75:03:
         21:4f:92:98:fe:20:53:ff:44:c0:38:77:2b:16:55:7b:3e:0f:
         1a:0e:e0:e8:72:89:06:da:75:8c:b9:0a:24:bf:2b:c4:27:78:
         db:de:69:e3:c9:94:3b:86:b7:f7:91:5b:a5:6e:a7:db:68:b5:
         64:4b:6c:62:f7:1c:21:9a:4d:29:eb:b0:74:0c:17:1f:52:b1:
         36:9b:9c:c5:c8:56:c6:22:d3:8d:f7:8d:78:1a:5f:6b:1a:b6:
         f8:2c:95:ff:84:e8:5c:ee:56:cd:a4:df:16:6c:13:19:23:3a:
         a0:68:07:e5:63:2d:3b:cb:87:53:69:a1:30:57:9a:fb:5e:7a:
         64:58:bc:2a:71:06:54:ae:99:2d:e4:11:56:c0:1e:af:7a:d3:
         63:f0:ea:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:48 2024 by rpki-client on console-ams.rpki-client.org