Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/323030313a6466323a623230303a3a2f34382d3438203d3e2030.roa
File:                     323030313a6466323a623230303a3a2f34382d3438203d3e2030.roa (raw, json)
Hash identifier:          Xa8DgoFweGZApdzY1mhHGaF9ccUyFBho+rz2KsZ58ug=
Subject key identifier:   4D:79:8C:34:1C:A3:A4:41:0A:60:CA:9E:0F:B4:1C:24:F1:46:F3:DA
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       4EADB05631C928917F2A635F5788611F022D154E
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323030313a6466323a623230303a3a2f34382d3438203d3e2030.roa
Signing time:             Wed 02 Feb 2022 06:32:06 +0000
ROA not before:           Wed 02 Feb 2022 06:27:06 +0000
ROA not after:            Thu 02 Feb 2023 06:32:06 +0000
asID:                     0
IP address blocks:        2001:df2:b200::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:ad:b0:56:31:c9:28:91:7f:2a:63:5f:57:88:61:1f:02:2d:15:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb  2 06:27:06 2022 GMT
            Not After : Feb  2 06:32:06 2023 GMT
        Subject: CN=3082010A0282010100CCF8B5C1FE3F250DA58ECC667E08282220BA8F5C9FFE473E5F2903A93EED466141724F1A0B788A1B35401415690C069AC7BFBC047AF1504E90DE349BA34CBC782DB9681576A4A3E77345BA8A9CD8334B35164645204F30F4A6B3ADE94D112667332A2A2733CF3B5FC144013E89D50C9952C3710DB8A814D64AC12FAA909397011EFBC5C93E64FA593E6542411F992F64B61F4B2916865257D53E22D2818C3EFA1D3B174BCB96E3D648EC6148D843614FBFA9477B2807E26E5C6C8B6CF0DC572C33D95207035824FA7C9A2F25A077D315C1C838B8FC7BC5ABEAD3E86BCE5192ECCC694AD44E79BE1D78F28A29AF4FA0041FFD6996FCC001B9C18F5FA3956F8CEB0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:f8:b5:c1:fe:3f:25:0d:a5:8e:cc:66:7e:08:
                    28:22:20:ba:8f:5c:9f:fe:47:3e:5f:29:03:a9:3e:
                    ed:46:61:41:72:4f:1a:0b:78:8a:1b:35:40:14:15:
                    69:0c:06:9a:c7:bf:bc:04:7a:f1:50:4e:90:de:34:
                    9b:a3:4c:bc:78:2d:b9:68:15:76:a4:a3:e7:73:45:
                    ba:8a:9c:d8:33:4b:35:16:46:45:20:4f:30:f4:a6:
                    b3:ad:e9:4d:11:26:67:33:2a:2a:27:33:cf:3b:5f:
                    c1:44:01:3e:89:d5:0c:99:52:c3:71:0d:b8:a8:14:
                    d6:4a:c1:2f:aa:90:93:97:01:1e:fb:c5:c9:3e:64:
                    fa:59:3e:65:42:41:1f:99:2f:64:b6:1f:4b:29:16:
                    86:52:57:d5:3e:22:d2:81:8c:3e:fa:1d:3b:17:4b:
                    cb:96:e3:d6:48:ec:61:48:d8:43:61:4f:bf:a9:47:
                    7b:28:07:e2:6e:5c:6c:8b:6c:f0:dc:57:2c:33:d9:
                    52:07:03:58:24:fa:7c:9a:2f:25:a0:77:d3:15:c1:
                    c8:38:b8:fc:7b:c5:ab:ea:d3:e8:6b:ce:51:92:ec:
                    cc:69:4a:d4:4e:79:be:1d:78:f2:8a:29:af:4f:a0:
                    04:1f:fd:69:96:fc:c0:01:b9:c1:8f:5f:a3:95:6f:
                    8c:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:79:8C:34:1C:A3:A4:41:0A:60:CA:9E:0F:B4:1C:24:F1:46:F3:DA
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323030313a6466323a623230303a3a2f34382d3438203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df2:b200::/48

    Signature Algorithm: sha256WithRSAEncryption
         85:c5:66:a5:75:81:8b:f9:85:18:35:9c:73:1f:a0:99:40:e5:
         0d:07:ac:13:83:52:11:35:7d:38:08:30:d5:1b:ff:65:d8:2f:
         b3:f9:aa:e2:9f:f7:e7:03:31:75:4c:af:dc:06:fb:28:ac:fb:
         c4:04:d0:8b:8b:41:ee:3d:5e:c5:34:02:0e:24:47:89:6a:6a:
         72:33:68:9f:31:a1:9f:fd:3c:56:3d:6a:76:60:3f:8e:ea:d4:
         84:cd:37:20:d5:9a:ed:9e:69:ff:61:6c:92:43:85:c0:8f:34:
         29:e3:e1:d2:22:c0:76:fb:be:8f:df:08:61:08:54:74:01:e3:
         aa:3f:01:29:23:cd:56:d2:9b:59:0f:34:81:f5:e6:c0:54:b5:
         9b:68:7f:15:4c:fa:09:66:62:c0:d7:97:07:95:b9:26:c8:8f:
         c5:96:e8:13:4a:78:95:3c:7b:4b:6b:6a:62:93:f7:be:9b:aa:
         67:ae:d9:b6:df:3c:e9:8f:59:df:d9:41:d1:e1:d5:f8:69:df:
         27:db:17:b9:13:7d:e8:b3:db:2c:7b:a8:27:23:6d:2d:4f:d1:
         dd:88:18:2e:f5:c6:15:0d:a9:cf:8c:89:2f:ca:6e:b5:8f:0d:
         30:b2:74:e1:1b:b7:78:87:cf:51:be:5a:c6:fc:1c:4b:a3:b0:
         88:e8:7b:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:12 2024 by rpki-client on console-fra.rpki-client.org