Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/323030313a6466323a633838303a3a2f34382d3438203d3e20313430343136.roa
File:                     323030313a6466323a633838303a3a2f34382d3438203d3e20313430343136.roa (raw, json)
Hash identifier:          0uEWF267nzh0VSA8It4kDLZRV8Sy+ZTzFz4YMU3pEsU=
Subject key identifier:   72:B8:27:9B:4A:1D:02:8E:EE:02:13:5A:0D:F4:BF:C8:6C:B4:AB:40
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       24BFAB11837F34158094365412112AE8C7B25985
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323030313a6466323a633838303a3a2f34382d3438203d3e20313430343136.roa
Signing time:             Fri 08 Oct 2021 08:00:01 +0000
ROA not before:           Fri 08 Oct 2021 07:55:01 +0000
ROA not after:            Sat 08 Oct 2022 08:00:01 +0000
asID:                     140416
IP address blocks:        2001:df2:c880::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:bf:ab:11:83:7f:34:15:80:94:36:54:12:11:2a:e8:c7:b2:59:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Oct  8 07:55:01 2021 GMT
            Not After : Oct  8 08:00:01 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:0d:89:2c:62:26:ff:5b:16:7d:85:87:16:97:
                    d2:99:f1:c6:7c:72:fd:2a:f4:aa:f2:9f:2c:88:b2:
                    6c:c1:02:cc:80:97:3f:e8:01:e5:77:fa:81:96:4d:
                    2d:bf:d4:1e:39:61:10:8d:8b:29:3a:4d:a2:71:c0:
                    27:10:f7:f1:7c:a6:5b:4c:e8:30:c1:ac:f8:1c:8a:
                    43:ce:f9:68:5f:2a:9b:fe:94:be:54:b1:41:64:d8:
                    02:1d:88:3b:8b:43:86:8f:88:44:68:bd:72:b1:c9:
                    e3:a1:31:11:f2:74:2c:e1:70:a8:36:e5:0e:1a:31:
                    78:12:33:74:f7:58:22:9c:5c:e1:c1:79:93:16:1d:
                    8b:61:d2:c2:0e:3a:78:53:ac:6a:b5:9d:f3:12:e8:
                    5d:f9:00:a4:08:e9:d9:63:be:78:64:ab:e7:b3:ca:
                    5d:2a:92:aa:84:f2:02:7c:9b:ce:c2:7e:38:10:43:
                    9c:ad:d9:a0:ac:34:3b:2c:94:fd:85:fe:a2:f7:69:
                    df:90:38:bb:0c:b1:95:8c:e3:1e:24:af:ab:50:b5:
                    cd:7c:a5:c9:ed:c5:09:8e:e5:b3:cd:0f:e8:0c:fd:
                    6a:82:58:18:8c:5c:52:63:51:90:37:19:bb:98:dc:
                    0b:24:8a:39:46:94:fb:2c:f0:60:38:9a:1c:0c:ad:
                    1d:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:B8:27:9B:4A:1D:02:8E:EE:02:13:5A:0D:F4:BF:C8:6C:B4:AB:40
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323030313a6466323a633838303a3a2f34382d3438203d3e20313430343136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df2:c880::/48

    Signature Algorithm: sha256WithRSAEncryption
         70:97:2b:d0:26:72:f1:e9:de:a0:09:05:b7:c9:fd:d4:15:a8:
         60:f0:05:30:a6:08:96:e7:42:40:74:6c:57:58:0c:91:6a:e5:
         98:a7:cd:cf:2b:d8:cf:99:ba:bc:44:65:af:4b:47:78:46:95:
         84:78:36:62:9b:68:ad:ee:95:de:63:d6:cb:49:fc:7b:4e:cb:
         46:12:ce:95:2b:77:c9:0e:72:82:36:fe:dc:e3:ce:40:3f:cc:
         2b:9b:bb:07:32:bb:b9:69:77:e9:98:50:ca:43:86:78:f8:60:
         8a:f9:fe:97:f6:a6:fb:f9:bf:32:2f:a1:88:18:a9:ec:3b:2c:
         1f:e8:c5:07:89:b0:18:aa:59:11:be:77:59:f1:7b:66:87:62:
         9f:76:d6:89:a7:4e:ea:c8:c0:1e:31:80:af:39:dd:be:aa:4e:
         e2:73:fb:79:0f:bc:fd:25:da:b7:31:6f:63:26:28:01:67:2a:
         fd:f4:5a:3a:39:2b:00:79:89:ee:60:56:3f:74:41:d5:99:0c:
         7b:48:16:ef:cb:2b:6a:4d:2b:d1:83:84:bb:d1:97:16:6d:3d:
         07:ca:99:0b:3f:cd:cc:02:f5:3e:2f:c0:bf:6c:0c:44:9f:8e:
         30:16:00:98:c8:18:5a:e4:93:56:5b:bb:63:8c:c7:57:c7:a2:
         ff:9b:1f:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:48 2024 by rpki-client on console-ams.rpki-client.org