Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/323030313a6466373a613630303a3a2f34382d3438203d3e2030.roa
File:                     323030313a6466373a613630303a3a2f34382d3438203d3e2030.roa (raw, json)
Hash identifier:          jxiWg8OE78YcSHxIe269RuKbYR75j+bqDPPUFDm9W2Q=
Subject key identifier:   95:AF:A4:F4:2F:F5:1C:71:A9:50:6C:98:62:82:C5:7D:53:30:E5:93
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       48BCA462A57600E0177452E6E93EEC33AC090AB0
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323030313a6466373a613630303a3a2f34382d3438203d3e2030.roa
Signing time:             Wed 02 Feb 2022 06:32:33 +0000
ROA not before:           Wed 02 Feb 2022 06:27:33 +0000
ROA not after:            Thu 02 Feb 2023 06:32:33 +0000
asID:                     0
IP address blocks:        2001:df7:a600::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:bc:a4:62:a5:76:00:e0:17:74:52:e6:e9:3e:ec:33:ac:09:0a:b0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb  2 06:27:33 2022 GMT
            Not After : Feb  2 06:32:33 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:bf:93:3e:02:b8:d5:43:c2:07:6b:15:bc:a7:
                    90:b0:93:7b:c2:91:0f:25:11:6f:cd:73:37:e6:55:
                    6c:a3:a1:67:0d:e1:8d:79:74:12:31:fa:a6:2f:9d:
                    8d:89:18:54:82:68:84:d6:26:a2:46:d5:57:8b:2b:
                    2c:36:4c:b5:65:72:66:7a:20:c6:61:c9:4a:b0:20:
                    a9:28:97:d8:bd:56:9e:b7:bd:d9:50:5c:f1:56:ed:
                    ba:b8:aa:83:93:e0:34:b7:0f:46:38:79:df:8c:db:
                    05:30:5d:25:69:e6:1c:7d:f5:68:56:e2:93:bb:cb:
                    75:72:be:ac:89:ed:7b:a6:ae:b9:38:78:d2:c7:85:
                    de:80:bf:ce:83:e8:51:8d:15:f0:d0:8b:b6:3e:31:
                    61:31:2c:25:f9:ef:b4:fa:7d:27:63:82:f6:0f:74:
                    47:be:31:7a:d0:75:c8:0b:0a:78:5f:ea:12:0c:51:
                    ee:84:7f:9f:a9:6a:64:34:03:ce:5f:ef:a6:c1:15:
                    92:ad:08:8a:bd:b0:84:03:d8:5b:18:a5:4e:50:80:
                    35:2c:e9:a6:42:dc:b2:be:6f:93:d3:ca:dc:bc:3e:
                    cf:44:bc:f4:4c:ca:af:ee:94:37:7b:4e:56:a9:41:
                    b1:90:74:f1:43:51:3e:de:eb:9a:4e:76:0d:a2:cf:
                    29:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:AF:A4:F4:2F:F5:1C:71:A9:50:6C:98:62:82:C5:7D:53:30:E5:93
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323030313a6466373a613630303a3a2f34382d3438203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2001:df7:a600::/48

    Signature Algorithm: sha256WithRSAEncryption
         5b:06:01:99:3e:57:d5:04:3f:46:1a:d2:be:bd:16:d7:00:fc:
         01:aa:6b:54:13:9b:9a:40:3d:45:b7:4c:28:67:d4:35:4a:bb:
         0d:d0:dd:27:eb:a8:d3:ca:48:c0:4b:bd:9c:21:99:ea:3c:84:
         e2:38:57:89:39:9c:0c:c0:8e:fb:27:c2:35:b2:7c:ba:71:c2:
         1a:cc:f8:93:5e:73:a4:20:59:82:8d:91:e9:b4:85:3f:ad:25:
         16:f1:2b:fb:3b:9c:a8:00:8d:d3:5a:33:fc:4b:ad:a8:6f:96:
         76:34:f8:44:e7:3d:29:7d:c8:d9:2e:43:f6:4d:2f:ac:e6:20:
         1a:f1:7b:c5:42:b9:f4:df:b1:0f:e8:0e:0c:10:37:2c:1b:89:
         f4:70:8c:01:ab:27:c6:1b:ed:86:c0:57:90:90:27:55:f1:c2:
         95:6e:0a:d3:d5:a5:23:eb:3d:a8:69:9b:a9:ac:a7:8c:e0:9d:
         7f:c3:16:ab:50:fe:4a:ac:a1:b1:33:f2:e7:90:b8:ab:5e:af:
         d3:23:93:f9:23:5f:45:fc:b8:87:66:32:dc:5e:99:62:aa:5b:
         b9:06:09:79:bf:3b:34:bc:eb:a5:f2:8d:1e:b6:b6:8c:6f:3c:
         95:a0:c2:49:ed:6a:51:7e:f3:6e:49:e3:9d:48:f3:4c:59:2c:
         89:20:33:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:12 2024 by rpki-client on console-fra.rpki-client.org