Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/323030313a6466323a653538303a3a2f34382d3438203d3e20313339393935.roa
File:                     323030313a6466323a653538303a3a2f34382d3438203d3e20313339393935.roa (raw, json)
Hash identifier:          6UUIT/KHRj4yI2LCzhdbaE7/IbZUDrqhWG/9M0X50s8=
Subject key identifier:   80:4D:EC:EB:B2:B9:18:5F:4D:D0:21:C1:04:A5:93:85:C2:F8:EB:F8
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       33373CE104DC4AEC136CA4E71AE5A5C9E1C0BC98
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323030313a6466323a653538303a3a2f34382d3438203d3e20313339393935.roa
Signing time:             Mon 06 Dec 2021 06:59:49 +0000
ROA not before:           Mon 06 Dec 2021 06:54:49 +0000
ROA not after:            Tue 06 Dec 2022 06:59:49 +0000
asID:                     139995
IP address blocks:        2001:df2:e580::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:37:3c:e1:04:dc:4a:ec:13:6c:a4:e7:1a:e5:a5:c9:e1:c0:bc:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Dec  6 06:54:49 2021 GMT
            Not After : Dec  6 06:59:49 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:7d:3c:d1:d4:81:21:3b:8e:3a:07:55:5f:88:
                    99:21:92:4a:30:17:5c:35:f5:62:7d:5a:1a:13:af:
                    0a:ab:0f:75:c3:52:93:7d:d0:1f:40:4b:61:92:ab:
                    70:37:52:cf:10:2c:79:e1:67:96:a7:85:e8:02:db:
                    84:6b:93:c6:b0:6e:a7:9c:bb:48:90:ca:9b:d5:0e:
                    ad:ae:ee:c1:b2:87:b4:55:f4:06:55:b2:70:11:96:
                    d3:a3:62:fc:d7:ce:72:64:8d:5f:ca:d0:98:24:7a:
                    7e:e2:ff:f2:3b:6f:e1:4f:00:c3:16:d3:11:20:f0:
                    f0:d5:e5:cb:36:96:78:b9:83:f6:22:87:38:be:80:
                    bb:cf:41:8b:c2:7f:24:9b:74:53:5a:e5:4e:b8:69:
                    c9:cb:46:c7:f9:29:d8:70:a3:e0:8b:36:9d:9f:32:
                    f5:4c:7d:6f:9c:40:ac:e1:0e:7a:10:d0:62:44:5b:
                    01:2a:55:a3:e4:27:d6:d5:89:ab:da:f2:42:9b:56:
                    15:14:a1:2f:69:1e:ef:8d:c8:14:ec:9f:21:a6:db:
                    42:d0:53:f7:a9:a0:be:b7:ac:e5:6e:c7:13:ea:03:
                    11:e1:6b:6f:a8:a0:6e:53:53:a4:0f:1f:49:b0:5c:
                    cc:76:ff:1c:87:93:3c:63:0f:38:19:06:db:40:31:
                    29:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:4D:EC:EB:B2:B9:18:5F:4D:D0:21:C1:04:A5:93:85:C2:F8:EB:F8
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323030313a6466323a653538303a3a2f34382d3438203d3e20313339393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df2:e580::/48

    Signature Algorithm: sha256WithRSAEncryption
         2f:11:83:70:f7:67:47:a1:f8:e4:b1:35:61:c3:4e:03:ff:0f:
         98:fe:fd:35:46:35:39:c8:52:6d:2f:18:0d:6f:af:d4:6c:d3:
         b4:11:45:76:67:75:a0:e5:c7:39:f5:6a:6d:84:ee:a7:d5:c8:
         8c:53:63:b4:f2:b7:1d:e4:d5:de:9d:08:78:14:e8:25:4d:e7:
         e6:a3:0f:7a:29:fb:a1:64:ca:a6:85:c4:c5:4a:ee:af:da:7d:
         ca:72:51:44:0f:11:27:b1:02:18:5e:23:52:99:9b:b4:cc:17:
         ee:a0:c1:85:39:41:7d:14:a5:09:13:3e:44:f7:14:44:4e:c9:
         11:90:e6:ec:3a:35:d4:14:94:8b:85:40:5d:36:72:ee:97:f3:
         e3:a4:d0:8f:51:15:a9:a7:81:ba:a9:5d:4f:fd:42:1a:8d:23:
         c0:13:3d:71:a1:49:e7:19:62:02:bb:d6:11:71:25:38:21:f0:
         66:cc:96:c9:64:e1:c5:38:54:1c:49:3a:6f:9f:7f:50:75:b8:
         7b:fd:31:92:e0:53:00:30:a0:6c:f0:38:9b:d8:d0:57:41:7b:
         67:ae:01:86:e7:f9:83:a2:75:a4:cc:59:66:e3:11:71:9c:21:
         aa:66:15:8d:ee:a9:03:2f:dc:6a:a6:2d:0b:1c:97:94:6d:a4:
         c2:e8:c2:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:48 2024 by rpki-client on console-ams.rpki-client.org