Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/323030313a6466313a616238303a3a2f34382d3438203d3e2030.roa
File:                     323030313a6466313a616238303a3a2f34382d3438203d3e2030.roa (raw, json)
Hash identifier:          FDEIdeDFVsJa8ai5PYkWt6C69Lk0dflWnLHTHoUnIAs=
Subject key identifier:   06:2A:D1:26:95:32:A6:B4:7A:63:EA:0C:62:4B:6F:09:50:23:81:33
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       4BEE8BE24410A3922A9A6A8C521B69BE58B71405
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323030313a6466313a616238303a3a2f34382d3438203d3e2030.roa
Signing time:             Wed 02 Feb 2022 06:22:23 +0000
ROA not before:           Wed 02 Feb 2022 06:17:23 +0000
ROA not after:            Thu 02 Feb 2023 06:22:23 +0000
asID:                     0
IP address blocks:        2001:df1:ab80::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:ee:8b:e2:44:10:a3:92:2a:9a:6a:8c:52:1b:69:be:58:b7:14:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb  2 06:17:23 2022 GMT
            Not After : Feb  2 06:22:23 2023 GMT
        Subject: CN=3082010A0282010100BBF6483C240A762ED27F401162D16083897305F73478A27618DD8F5C1D1F39A9325252A21E192CB24FC24F629132A63EA3608B8EA44FC1CDA7251B903A1B7968D2FEA8AA899376D80C7CFCE8D51DF7EE53F1B3CBEEDA6CCB68E9ED2C0D6183255B40B7D3291882D7135FB5BF6ABC95334A85BCF186A588B23E35CF3C7847CCFC4E6BB5314F966D09640232CDF8AD2E79CA7C486E9C2C27AEBEEEBCE29BF66717B458C5DDDEE60EC39426287D96161AB0C216D234F31ABDE0C9CB17982E5FCB33C25D836CF3B5FA8A070F4D969D56E63A93A2A70CA5752C11EE4A6C9FA1E518261C04B76CAF2BF4812318957431E6703ECFDC3C2D5CF65B523AC00897FC358B7D0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:f6:48:3c:24:0a:76:2e:d2:7f:40:11:62:d1:
                    60:83:89:73:05:f7:34:78:a2:76:18:dd:8f:5c:1d:
                    1f:39:a9:32:52:52:a2:1e:19:2c:b2:4f:c2:4f:62:
                    91:32:a6:3e:a3:60:8b:8e:a4:4f:c1:cd:a7:25:1b:
                    90:3a:1b:79:68:d2:fe:a8:aa:89:93:76:d8:0c:7c:
                    fc:e8:d5:1d:f7:ee:53:f1:b3:cb:ee:da:6c:cb:68:
                    e9:ed:2c:0d:61:83:25:5b:40:b7:d3:29:18:82:d7:
                    13:5f:b5:bf:6a:bc:95:33:4a:85:bc:f1:86:a5:88:
                    b2:3e:35:cf:3c:78:47:cc:fc:4e:6b:b5:31:4f:96:
                    6d:09:64:02:32:cd:f8:ad:2e:79:ca:7c:48:6e:9c:
                    2c:27:ae:be:ee:bc:e2:9b:f6:67:17:b4:58:c5:dd:
                    de:e6:0e:c3:94:26:28:7d:96:16:1a:b0:c2:16:d2:
                    34:f3:1a:bd:e0:c9:cb:17:98:2e:5f:cb:33:c2:5d:
                    83:6c:f3:b5:fa:8a:07:0f:4d:96:9d:56:e6:3a:93:
                    a2:a7:0c:a5:75:2c:11:ee:4a:6c:9f:a1:e5:18:26:
                    1c:04:b7:6c:af:2b:f4:81:23:18:95:74:31:e6:70:
                    3e:cf:dc:3c:2d:5c:f6:5b:52:3a:c0:08:97:fc:35:
                    8b:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:2A:D1:26:95:32:A6:B4:7A:63:EA:0C:62:4B:6F:09:50:23:81:33
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323030313a6466313a616238303a3a2f34382d3438203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df1:ab80::/48

    Signature Algorithm: sha256WithRSAEncryption
         0c:d6:ff:19:38:95:c9:b5:69:2c:72:0a:04:cd:54:f4:2b:65:
         33:ad:fc:7c:79:92:bc:16:3e:e4:1b:17:4c:d2:84:ff:f3:f8:
         a7:3c:4a:22:74:7d:84:9a:83:5f:2f:cc:d6:6f:5c:a1:21:ca:
         b7:f8:32:ce:1a:08:6c:75:ad:57:72:23:53:db:79:af:4a:43:
         c0:d5:ab:cb:27:78:d4:c7:b8:23:c8:32:ec:35:f3:84:a1:35:
         fd:39:ef:19:a8:5f:8f:ca:39:f0:ac:9e:c3:51:15:b9:3a:50:
         d2:0d:e2:27:22:06:0c:7c:ae:5c:ed:9a:8d:75:79:59:5d:1a:
         11:15:27:6e:77:86:c2:2e:5b:10:e6:55:86:f9:f7:7f:c3:47:
         3c:34:3c:7a:09:51:5d:f8:47:bd:dc:be:17:ea:46:2c:90:dd:
         d4:a5:a8:23:77:7f:37:1b:3e:72:63:e8:dd:bd:65:c9:08:fb:
         8a:39:a8:f3:34:46:45:54:a6:c8:fc:31:6e:65:76:c7:44:47:
         c4:2d:51:bc:09:95:4f:fa:85:86:e7:9e:13:25:73:db:8c:97:
         a1:69:7b:2c:74:75:04:0d:c1:9d:e8:5c:22:22:ea:a7:66:28:
         e5:1c:12:68:9c:f5:9d:d4:6b:21:a2:24:d3:98:f7:b2:1b:ca:
         70:7d:4b:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:12 2024 by rpki-client on console-fra.rpki-client.org