Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3230322e38302e3231302e302f32332d3234203d3e203137363730.roa
File:                     3230322e38302e3231302e302f32332d3234203d3e203137363730.roa (raw, json)
Hash identifier:          7FxGgDhfXrkQ3b5v2wy+qI/+LiCyskfEuHKQPlHfEIk=
Subject key identifier:   3B:AF:C3:80:9E:82:D9:E0:CB:E9:31:62:F7:97:CC:D2:E5:70:38:BB
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       7812A9E6486377C50BF95B261F0FBC8DBAA5C5C3
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3230322e38302e3231302e302f32332d3234203d3e203137363730.roa
Signing time:             Fri 07 May 2021 11:20:37 +0000
ROA not before:           Fri 07 May 2021 11:15:37 +0000
ROA not after:            Sat 07 May 2022 11:20:37 +0000
asID:                     17670
IP address blocks:        202.80.210.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:12:a9:e6:48:63:77:c5:0b:f9:5b:26:1f:0f:bc:8d:ba:a5:c5:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: May  7 11:15:37 2021 GMT
            Not After : May  7 11:20:37 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:37:9b:f1:6c:78:93:d3:42:ba:f9:aa:16:b9:
                    b8:c3:18:11:ea:8c:47:1b:99:ed:21:b2:7d:4e:aa:
                    e5:43:18:55:07:5e:dc:4a:5e:e4:f4:74:b4:9c:61:
                    1c:24:20:a6:b6:20:e4:d3:b8:0a:f3:c9:ae:98:02:
                    50:b8:f6:1f:5e:a0:d3:6e:4d:73:ca:18:c2:2d:82:
                    e6:1c:7c:c9:e6:18:a1:b0:12:be:27:bb:3a:8f:12:
                    ff:a0:2b:c9:5c:72:7e:a4:e4:bc:1d:67:31:50:9a:
                    12:ad:d9:c9:ce:91:b7:40:a5:d0:53:4c:32:9a:0e:
                    4f:44:fa:ce:e0:44:26:46:d2:e5:54:c1:58:b0:c6:
                    c4:6c:a7:4a:ff:5d:5c:e1:ce:cf:fb:26:19:fb:38:
                    6d:67:3c:c2:09:23:34:58:f4:f9:9a:0e:49:99:34:
                    74:61:ba:ea:13:4f:46:78:f7:d9:29:e9:79:fc:89:
                    5f:7b:f5:12:4d:d6:1d:21:0a:be:33:bb:5d:fc:9f:
                    e7:94:41:57:e9:e1:e8:16:28:16:93:a7:29:d0:7c:
                    ac:89:46:b2:d9:ca:fc:a6:ab:4e:cd:dd:53:e6:37:
                    38:f3:69:05:9b:2a:a1:07:15:f0:6a:02:8a:8f:3b:
                    ee:8b:a8:19:c0:cf:a4:a8:4a:7d:b2:4c:54:e0:26:
                    fc:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:AF:C3:80:9E:82:D9:E0:CB:E9:31:62:F7:97:CC:D2:E5:70:38:BB
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3230322e38302e3231302e302f32332d3234203d3e203137363730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.80.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         99:fa:28:50:36:44:63:3c:91:ad:9a:2b:bc:b3:a1:1e:01:c5:
         46:14:16:98:ea:83:f3:a4:8e:eb:a1:3e:45:e3:73:a3:4b:24:
         eb:95:93:eb:fa:70:22:66:ee:5b:1a:a6:48:6a:53:f9:b6:92:
         c2:ed:5e:6e:2c:cd:7a:e9:46:bb:bb:a3:49:02:0a:e2:52:31:
         f8:3b:01:d0:0b:95:48:e4:85:e8:91:18:de:83:6c:c8:f7:5c:
         28:8a:77:59:2d:61:5b:c6:fb:cd:99:cc:c3:d8:c0:37:31:47:
         88:7d:61:f7:9a:6a:64:a6:7b:90:9b:2c:a4:0e:ad:a4:cd:3c:
         38:c6:c3:72:d9:eb:76:e8:c5:99:09:8e:46:f5:9e:b7:90:61:
         dd:d9:be:d0:6c:9e:e6:9d:ed:62:ce:61:3c:c2:4a:ec:cf:86:
         37:c2:e6:fd:3b:9f:d3:ff:8b:3a:22:f5:78:84:f0:67:09:cf:
         fa:aa:c3:bc:58:50:9a:af:4b:eb:43:f5:ca:3d:05:84:1c:76:
         34:ef:dd:00:83:94:32:b6:6c:4e:99:ab:ba:a8:83:30:c6:33:
         f9:59:98:65:ad:b0:84:4f:64:c0:81:53:11:92:75:39:e8:e8:
         68:2f:72:3c:3d:b7:cb:7b:e4:9c:b8:ec:98:38:be:d5:9b:c5:
         95:3a:99:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:48 2024 by rpki-client on console-ams.rpki-client.org