Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/323030313a6466363a356630303a3a2f34382d3438203d3e2030.roa
File:                     323030313a6466363a356630303a3a2f34382d3438203d3e2030.roa (raw, json)
Hash identifier:          3+s1en77XWXeJ0tz10rHa8hdewt0SqE1bkk+g9XPc54=
Subject key identifier:   4F:DA:F4:B9:D6:C0:A3:97:97:C8:B4:28:88:B3:BB:6C:14:9B:51:89
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       12837A17882E934CB5F95A8A48E5BA772F61D23B
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323030313a6466363a356630303a3a2f34382d3438203d3e2030.roa
Signing time:             Wed 02 Mar 2022 08:30:06 +0000
ROA not before:           Wed 02 Mar 2022 08:25:06 +0000
ROA not after:            Thu 02 Mar 2023 08:30:06 +0000
asID:                     0
IP address blocks:        2001:df6:5f00::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:83:7a:17:88:2e:93:4c:b5:f9:5a:8a:48:e5:ba:77:2f:61:d2:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Mar  2 08:25:06 2022 GMT
            Not After : Mar  2 08:30:06 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:b1:93:81:75:36:67:b1:cb:f3:cf:7a:d1:14:
                    a2:7f:94:a3:a0:23:52:0e:9a:39:e1:aa:9f:66:e9:
                    0d:18:5d:f5:dd:53:35:29:57:08:41:82:8d:98:19:
                    84:d2:3f:e7:fa:12:65:47:51:b6:17:c5:b7:2c:4b:
                    3a:2e:23:36:50:e8:63:7f:c4:46:fe:bd:15:2c:a5:
                    02:bd:83:f9:0a:12:e3:5e:45:89:33:08:12:70:17:
                    3a:9d:56:87:8b:f9:5c:84:dd:8e:d7:21:cd:19:3b:
                    25:b5:71:75:2a:8a:08:f3:c2:ee:a5:e0:63:80:6d:
                    03:c8:93:6a:86:4b:ca:a4:dd:6a:ca:36:1a:29:63:
                    6c:31:72:cf:23:41:34:40:c2:3f:71:ee:4e:f8:aa:
                    2a:de:15:a7:02:1d:fb:b0:c9:83:bd:33:29:94:ef:
                    5f:a8:a8:f4:7d:b7:c8:1f:10:f3:ea:7b:1c:c2:57:
                    e4:9b:fd:b6:8e:0e:80:bd:8b:8c:36:3a:9a:02:92:
                    44:33:20:ff:c1:f9:a9:f0:14:77:ea:72:78:1d:50:
                    f5:46:f4:ef:d8:66:36:67:c6:57:ee:74:05:ce:f6:
                    b9:c3:e2:de:a4:0d:eb:05:5d:ee:ef:7f:71:6f:58:
                    f7:b5:8c:0a:e0:81:03:88:83:09:70:7e:c0:bd:b4:
                    f2:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:DA:F4:B9:D6:C0:A3:97:97:C8:B4:28:88:B3:BB:6C:14:9B:51:89
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323030313a6466363a356630303a3a2f34382d3438203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df6:5f00::/48

    Signature Algorithm: sha256WithRSAEncryption
         89:e6:c0:09:ee:42:ef:82:9e:66:f0:e9:d3:ec:9a:81:d1:d2:
         3e:10:ca:23:37:34:0f:f2:ae:a9:41:58:65:80:74:51:eb:80:
         cb:23:85:cd:de:25:cd:40:a2:70:dc:a3:dc:c5:b0:03:f9:40:
         64:ed:2e:82:81:eb:16:61:e0:03:25:73:c6:7a:41:39:16:c3:
         2f:3d:af:50:b7:37:35:bc:7d:db:6e:35:5c:45:05:73:61:73:
         d6:68:21:8d:ef:d5:ff:15:44:66:78:81:49:01:78:d4:d6:19:
         90:50:48:b2:ce:0e:60:13:c6:13:cf:ad:ee:f9:37:29:4b:9e:
         2e:8f:d2:83:3e:10:a6:1f:c6:1a:6b:72:24:93:45:99:6f:47:
         47:f0:b4:65:c9:89:78:6d:8c:56:5c:c3:b1:a3:ec:a9:82:03:
         e1:8d:30:a1:6d:76:a3:98:e7:9b:f1:a3:22:4e:0a:c9:5e:51:
         95:fd:c2:1b:84:fa:85:4e:f8:15:20:3d:71:5e:0e:24:b7:f8:
         b4:6e:08:8a:b2:d4:86:88:c3:21:97:dd:01:ee:3b:8d:bb:7b:
         b5:f3:4f:1d:ef:4d:8c:2d:ca:3a:7c:6e:54:17:41:e9:0f:df:
         df:21:16:5c:3b:61:a4:2e:77:2b:64:ac:d5:3c:6c:a0:81:c8:
         b9:10:c3:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:48 2024 by rpki-client on console-ams.rpki-client.org