Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/323030313a6466323a6538303a3a2f34382d3438203d3e2030.roa
File:                     323030313a6466323a6538303a3a2f34382d3438203d3e2030.roa (raw, json)
Hash identifier:          gpvgGJKqLyTr4CHTiADMJx2V+D64H2NGYRuX+7+csIQ=
Subject key identifier:   C6:81:43:D8:F9:03:29:BB:2A:BB:9C:AB:2E:4D:88:FC:28:F0:32:E1
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       133BE0C29FB9452298435B0E26E45A4777213B22
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323030313a6466323a6538303a3a2f34382d3438203d3e2030.roa
Signing time:             Wed 02 Feb 2022 06:22:55 +0000
ROA not before:           Wed 02 Feb 2022 06:17:55 +0000
ROA not after:            Thu 02 Feb 2023 06:22:55 +0000
asID:                     0
IP address blocks:        2001:df2:e80::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:3b:e0:c2:9f:b9:45:22:98:43:5b:0e:26:e4:5a:47:77:21:3b:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb  2 06:17:55 2022 GMT
            Not After : Feb  2 06:22:55 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:52:2b:3b:d5:a7:33:f3:f6:cb:24:c2:fd:80:
                    cb:bb:91:c5:e8:44:f5:fb:0f:b5:44:e2:51:9a:8d:
                    5b:a2:cc:e7:c6:e4:64:52:ec:da:93:2f:28:4b:7f:
                    9e:bb:85:77:ed:fc:5d:91:24:91:f6:ba:5f:43:d5:
                    eb:e0:b9:7a:10:5a:79:78:8b:0e:92:4d:a5:71:8c:
                    01:e5:78:5e:74:af:16:16:5e:70:da:d6:89:81:dc:
                    f5:1f:6e:10:a3:74:60:e5:71:55:34:35:80:00:94:
                    e6:6b:2d:49:da:66:36:e6:19:e6:63:74:49:24:b2:
                    77:53:23:12:f6:48:54:40:24:87:1f:b8:12:66:ac:
                    a4:f1:e4:70:8b:b6:21:34:c8:7e:25:99:4c:7d:03:
                    34:d0:43:4c:85:cf:33:e7:83:b8:bf:e1:06:a7:a6:
                    e3:0f:62:08:c7:74:d7:21:52:42:3e:44:6a:d7:f7:
                    f4:7a:0f:53:89:37:3a:ea:fa:39:74:67:71:b9:c7:
                    b5:7d:9b:4e:57:89:b7:3f:ad:3f:0d:59:2c:d9:c2:
                    cb:3d:ee:54:c2:59:20:aa:73:a5:07:68:0f:df:18:
                    db:9c:d3:2f:7e:cf:0b:2e:c2:2a:28:ea:c1:56:eb:
                    e3:31:a3:14:c5:78:20:e1:a6:9f:6f:96:8b:d8:45:
                    0e:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:81:43:D8:F9:03:29:BB:2A:BB:9C:AB:2E:4D:88:FC:28:F0:32:E1
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323030313a6466323a6538303a3a2f34382d3438203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df2:e80::/48

    Signature Algorithm: sha256WithRSAEncryption
         6b:b7:61:a0:c5:95:0f:a0:1d:46:74:29:bf:2f:0b:3d:8f:ee:
         a1:8c:57:dd:90:d1:3b:45:1d:d2:f1:a5:88:db:d8:f4:b5:d1:
         6f:9b:df:12:a5:f4:dc:97:30:42:0c:4f:db:68:48:24:d2:f9:
         64:a9:b0:89:a1:56:5c:ee:5e:60:54:57:dc:8e:74:07:2e:72:
         e2:96:33:03:34:5b:8c:3b:e3:25:4d:9d:d4:38:bb:69:13:f2:
         5f:7f:e3:a7:90:a7:70:05:e4:a4:19:65:be:f5:ba:23:a3:4f:
         55:3c:56:8b:df:5a:12:db:be:fd:79:0e:34:38:d9:8b:10:32:
         72:e3:50:64:de:ac:20:6f:d3:e3:af:fa:65:af:71:e7:57:f4:
         75:21:36:c0:90:c1:b4:c5:d3:f5:f8:09:a9:ff:fc:06:18:4f:
         51:66:10:03:af:24:59:1f:1d:fd:6e:d9:e4:15:17:4a:78:c6:
         d3:6e:e8:59:2c:76:3a:47:25:8b:65:28:16:f2:e5:b8:df:32:
         db:39:be:e8:a3:3c:cb:70:de:82:f4:b3:b7:e5:b9:90:2f:4c:
         7e:b2:9b:7d:08:43:ca:c4:21:99:5d:96:a5:3c:e6:64:5d:4e:
         e5:9b:94:16:5b:4c:28:d2:32:9d:68:93:f7:43:11:b2:b3:6d:
         8a:55:cd:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:12 2024 by rpki-client on console-fra.rpki-client.org