Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/323030313a6466353a653530303a3a2f34382d3438203d3e2030.roa
File:                     323030313a6466353a653530303a3a2f34382d3438203d3e2030.roa (raw, json)
Hash identifier:          3RKNdVZ1nyqeOc9mUdKdjXeYsyQ+UtHs5FY9jw2GNoU=
Subject key identifier:   90:07:38:2D:25:DB:05:F3:A3:DA:C5:06:CE:F2:2C:71:2C:8F:5E:1F
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       5999A69D98CBEC957D3E7AE632176E2B0FC2E6E7
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323030313a6466353a653530303a3a2f34382d3438203d3e2030.roa
Signing time:             Wed 02 Feb 2022 06:33:13 +0000
ROA not before:           Wed 02 Feb 2022 06:28:13 +0000
ROA not after:            Thu 02 Feb 2023 06:33:13 +0000
asID:                     0
IP address blocks:        2001:df5:e500::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:99:a6:9d:98:cb:ec:95:7d:3e:7a:e6:32:17:6e:2b:0f:c2:e6:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb  2 06:28:13 2022 GMT
            Not After : Feb  2 06:33:13 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:45:3c:5e:7a:62:9f:17:58:b3:54:15:30:78:
                    51:b8:f8:a4:48:9f:5c:f5:6b:bb:d2:df:86:ef:95:
                    31:97:58:d8:e8:4a:44:62:47:7e:87:bf:b7:8a:3d:
                    08:3d:fd:b3:80:db:1b:cd:63:a3:c8:15:a9:87:4b:
                    0d:eb:3f:b3:cd:fc:22:a7:6f:73:97:34:04:82:c8:
                    39:74:4c:40:32:11:09:5e:16:3a:b9:d8:af:12:29:
                    cb:41:e2:40:32:62:df:92:3b:ad:d8:84:99:11:90:
                    c8:0a:4e:39:a7:30:49:ae:43:a1:cc:3a:45:98:ca:
                    90:4e:ae:27:52:55:9a:72:a2:1f:87:89:1f:f1:15:
                    86:1f:76:2f:81:b7:c5:13:36:79:f2:a4:80:ea:b5:
                    84:a1:6a:19:71:eb:cf:4c:71:be:89:2c:2b:4b:cd:
                    c6:1b:aa:55:8e:ea:6c:8b:63:5a:79:97:e7:c3:1f:
                    68:85:e8:c4:42:65:54:ad:07:8d:05:5a:29:9a:1d:
                    83:06:58:47:be:cf:9a:a3:6d:0a:9c:93:80:df:44:
                    cb:09:a4:df:65:f2:92:67:d0:ba:af:78:5b:2c:6d:
                    c7:89:b0:6b:46:a1:f0:b8:38:73:68:6e:10:43:01:
                    15:80:20:28:37:49:ce:85:15:c8:13:8b:a1:7c:1f:
                    15:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:07:38:2D:25:DB:05:F3:A3:DA:C5:06:CE:F2:2C:71:2C:8F:5E:1F
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323030313a6466353a653530303a3a2f34382d3438203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df5:e500::/48

    Signature Algorithm: sha256WithRSAEncryption
         7e:f6:94:df:ed:d2:41:d1:96:07:88:78:49:65:60:9d:3c:6d:
         46:ca:2a:98:c8:7d:25:59:7f:89:79:56:3c:78:55:78:cb:dd:
         35:08:37:fa:f0:11:e7:5a:45:79:46:a2:3d:00:19:21:a2:86:
         73:99:1e:81:05:52:c7:94:4e:04:c5:34:d8:96:e5:b4:72:e3:
         f9:52:0d:8a:e0:c3:d2:d6:ce:83:2c:d8:17:59:27:8b:f9:d6:
         c3:46:90:7e:92:28:6f:f2:11:c8:60:0f:04:85:ff:c7:9e:fd:
         ed:9b:eb:b4:dc:f2:d4:48:42:5a:68:a4:cc:9a:bd:c5:83:bf:
         83:fa:b9:88:0a:19:3f:53:b1:7c:42:9a:cd:fe:dc:5f:00:d0:
         50:59:7d:43:dc:a0:ea:c1:83:ad:5b:c4:05:bf:da:0c:f9:ed:
         51:e6:ab:90:22:fb:19:06:62:64:03:4a:b6:fe:e2:1d:67:95:
         49:36:40:bc:e1:24:ed:b4:aa:99:8b:e2:e0:7e:2a:b5:d5:da:
         4f:29:f2:a7:45:4c:3f:85:3e:9c:73:5f:83:8b:0b:6a:ac:ac:
         7f:39:ec:ad:f4:7f:5f:0e:57:e5:bb:92:b9:1e:81:30:0d:10:
         71:72:71:28:70:8c:c3:fd:85:a2:7d:ea:a0:f4:db:31:11:4c:
         bf:ef:95:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:12 2024 by rpki-client on console-fra.rpki-client.org