Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/323030313a6466333a323938303a3a2f34382d3438203d3e20313331373133.roa
File:                     323030313a6466333a323938303a3a2f34382d3438203d3e20313331373133.roa (raw, json)
Hash identifier:          p9ScWJbDWzyxvQKR7FAHeZyTdR7PETRC0WeIE6CpMiY=
Subject key identifier:   ED:BB:88:C5:AF:D8:F7:52:9C:DF:28:DB:D7:72:1B:60:74:FA:7E:88
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       2685DEC2F46FEE249DBE95F3B3FFCC1D19DCFB3F
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323030313a6466333a323938303a3a2f34382d3438203d3e20313331373133.roa
Signing time:             Thu 18 Nov 2021 08:52:48 +0000
ROA not before:           Thu 18 Nov 2021 08:47:48 +0000
ROA not after:            Fri 18 Nov 2022 08:52:48 +0000
asID:                     131713
IP address blocks:        2001:df3:2980::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:85:de:c2:f4:6f:ee:24:9d:be:95:f3:b3:ff:cc:1d:19:dc:fb:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Nov 18 08:47:48 2021 GMT
            Not After : Nov 18 08:52:48 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:34:28:ec:76:1f:0a:0a:e7:62:1b:98:5e:3d:
                    19:4f:b6:06:29:4c:5f:62:57:9b:9f:f1:37:b9:97:
                    7e:52:32:9b:35:83:6c:47:ec:be:e4:e1:fa:9b:b2:
                    09:92:09:1a:45:63:d1:54:54:e1:32:ce:be:c2:a6:
                    de:26:40:64:ea:b0:fa:d4:d8:8d:4a:61:5d:d8:3b:
                    4d:35:39:22:0f:04:99:7c:53:a9:52:fb:6b:64:fe:
                    1a:0b:3f:22:56:49:3a:4f:fe:83:3e:a8:c0:1c:75:
                    c5:41:c9:1c:92:b2:f8:4d:ea:bc:f1:05:a1:4f:2b:
                    b8:1d:b8:82:75:4a:5a:76:59:ac:6a:2d:c0:34:4a:
                    36:c3:5f:99:3e:89:63:7b:d4:90:6d:d2:66:34:c3:
                    b6:05:d3:b4:db:0d:93:d2:b4:2e:1f:ea:06:51:9d:
                    74:b8:08:67:6c:a5:4f:18:fb:07:d5:2a:6b:e3:5d:
                    da:1b:2e:b7:97:6d:ed:2e:5b:43:53:50:18:7d:57:
                    13:60:c3:b0:a9:25:6b:27:88:02:12:5b:96:83:5d:
                    e3:7d:69:d4:e6:29:0f:2a:15:14:54:47:ad:95:5f:
                    8b:dc:4d:74:4d:b3:d1:2c:c0:03:c8:5c:b3:7c:23:
                    b4:4e:ea:01:fa:66:eb:ca:83:5e:49:75:2e:07:d4:
                    4c:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:BB:88:C5:AF:D8:F7:52:9C:DF:28:DB:D7:72:1B:60:74:FA:7E:88
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323030313a6466333a323938303a3a2f34382d3438203d3e20313331373133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df3:2980::/48

    Signature Algorithm: sha256WithRSAEncryption
         85:a3:d2:9e:03:d0:06:e0:7a:e5:04:61:30:dc:9d:72:01:68:
         51:37:21:91:5c:79:a4:aa:b2:be:c4:d2:9d:83:12:9c:ba:86:
         95:94:23:b8:b5:52:e4:87:be:41:1e:b4:8e:dd:e7:89:3a:15:
         60:79:00:9f:59:06:5e:79:34:d5:f5:9a:66:11:24:91:0d:2c:
         23:80:23:88:b5:77:88:59:95:5f:91:4a:7b:85:4b:e1:57:23:
         3a:49:55:99:f9:67:77:b7:6c:89:e3:a4:0a:fc:4a:d5:ee:6e:
         1f:63:2a:19:2c:09:be:73:e7:ac:a9:01:46:9a:ac:1e:d4:8b:
         a6:bd:8c:70:67:41:40:7d:6d:7b:e4:50:5e:23:d2:4d:59:9e:
         62:4a:b0:b2:51:dc:fb:8d:b4:4e:52:fa:4f:50:5a:a3:ab:35:
         f2:c5:d5:cb:45:be:ec:4e:f3:c5:0b:06:f5:e3:15:97:cc:d3:
         90:db:3c:5e:f6:91:f4:74:49:7d:a8:2a:d0:5d:4d:5c:79:c3:
         67:13:b2:ea:be:d2:64:f9:05:97:90:77:2b:3a:76:76:c3:93:
         44:7a:45:07:b2:b0:64:f7:bc:fb:48:ac:23:df:b1:09:4e:b0:
         98:99:a1:17:79:51:a0:d6:86:53:37:c1:48:5e:8c:ec:b0:70:
         ac:df:bf:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:12 2024 by rpki-client on console-fra.rpki-client.org