Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3230322e38302e3231362e302f32332d3234203d3e203137363730.roa
File:                     3230322e38302e3231362e302f32332d3234203d3e203137363730.roa (raw, json)
Hash identifier:          59FxVUc1HlQk672gjlUANk4Wef//FP7n1ZEyTzwIjqY=
Subject key identifier:   32:3C:2F:91:B1:76:FF:08:47:81:AD:E5:0B:0C:3E:50:8D:2A:B8:95
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       65A258F1DDC6AE22491AF76E0E9A03D593B5AB53
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3230322e38302e3231362e302f32332d3234203d3e203137363730.roa
Signing time:             Fri 07 May 2021 11:21:38 +0000
ROA not before:           Fri 07 May 2021 11:16:38 +0000
ROA not after:            Sat 07 May 2022 11:21:38 +0000
asID:                     17670
IP address blocks:        202.80.216.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:a2:58:f1:dd:c6:ae:22:49:1a:f7:6e:0e:9a:03:d5:93:b5:ab:53
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: May  7 11:16:38 2021 GMT
            Not After : May  7 11:21:38 2022 GMT
        Subject: CN=3082010A0282010100AF9241E86985B04E9264380FD0831A49B8DFD9F4AEB35CDDB37FAB7BC8A9A00DF94ABFDC77EDFF0FCBBE74B8A397BD8E4AAFFE0944CF417EAD8C5608F590479BD69F352C90B3F518F59AA61ACA225D40EC9DE004A6B456E58588C4518FCE8BE2F0760D7381DF9EA3D01946BE868C7EA4890CE7BD10CE156A7030F38F5BFF1599DD5514D59C05236B1C194084E2A68EE2974117CFAF66F0568EFCBA06E5FE555CA5956A8EBD899416AC04D3FC322EAD9CE155F8FCF55C51DCC7AE516C360C09831FA392374178BE5F45A8E99AA55102E57CCAB00B5E6B7F7774F39680122AC09B9C2871D1336B1428880A0EF6FFD7A2AD33A94C123FA477B839D9E205C1E2E46B0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:92:41:e8:69:85:b0:4e:92:64:38:0f:d0:83:
                    1a:49:b8:df:d9:f4:ae:b3:5c:dd:b3:7f:ab:7b:c8:
                    a9:a0:0d:f9:4a:bf:dc:77:ed:ff:0f:cb:be:74:b8:
                    a3:97:bd:8e:4a:af:fe:09:44:cf:41:7e:ad:8c:56:
                    08:f5:90:47:9b:d6:9f:35:2c:90:b3:f5:18:f5:9a:
                    a6:1a:ca:22:5d:40:ec:9d:e0:04:a6:b4:56:e5:85:
                    88:c4:51:8f:ce:8b:e2:f0:76:0d:73:81:df:9e:a3:
                    d0:19:46:be:86:8c:7e:a4:89:0c:e7:bd:10:ce:15:
                    6a:70:30:f3:8f:5b:ff:15:99:dd:55:14:d5:9c:05:
                    23:6b:1c:19:40:84:e2:a6:8e:e2:97:41:17:cf:af:
                    66:f0:56:8e:fc:ba:06:e5:fe:55:5c:a5:95:6a:8e:
                    bd:89:94:16:ac:04:d3:fc:32:2e:ad:9c:e1:55:f8:
                    fc:f5:5c:51:dc:c7:ae:51:6c:36:0c:09:83:1f:a3:
                    92:37:41:78:be:5f:45:a8:e9:9a:a5:51:02:e5:7c:
                    ca:b0:0b:5e:6b:7f:77:74:f3:96:80:12:2a:c0:9b:
                    9c:28:71:d1:33:6b:14:28:88:0a:0e:f6:ff:d7:a2:
                    ad:33:a9:4c:12:3f:a4:77:b8:39:d9:e2:05:c1:e2:
                    e4:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:3C:2F:91:B1:76:FF:08:47:81:AD:E5:0B:0C:3E:50:8D:2A:B8:95
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3230322e38302e3231362e302f32332d3234203d3e203137363730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.80.216.0/23

    Signature Algorithm: sha256WithRSAEncryption
         22:bd:f2:49:3b:e5:98:33:99:f1:a6:1f:a2:f5:38:f8:11:a3:
         45:39:8b:36:db:d3:ed:5b:c4:41:45:6d:fd:2b:a1:e1:96:a8:
         af:dc:dd:43:32:ad:28:cb:14:a7:e0:46:f7:f4:f4:97:1e:c5:
         52:3e:93:bb:c3:b0:26:ff:69:bd:88:72:6e:3b:60:ae:9a:31:
         66:f5:c1:86:fa:f1:48:aa:46:c9:3f:74:8b:1a:28:a9:df:33:
         4a:40:7d:7e:ce:fa:66:fb:3c:68:92:c7:94:71:72:ba:e1:6b:
         2f:d5:64:a9:89:a7:5b:56:5b:4f:5b:72:ce:79:83:5a:6c:39:
         5b:c8:e8:53:30:dc:cd:28:bf:b6:99:75:ef:fb:16:15:6c:77:
         46:7e:bf:ae:86:90:db:7b:68:b8:27:25:5b:34:ab:c5:9f:4c:
         59:56:29:97:88:67:8a:78:0d:40:bf:d0:c5:9d:67:ad:32:4d:
         56:02:02:0b:11:73:62:8c:02:e5:61:2e:3a:b0:72:55:88:7d:
         f0:ff:0f:44:44:30:b9:9e:42:00:4d:28:72:b4:09:7b:0e:2b:
         d0:4e:60:b4:59:7c:15:35:f0:08:01:be:2d:6d:1d:23:18:9a:
         b7:34:3e:9b:e3:64:c6:64:09:fc:c8:63:54:01:09:df:6f:25:
         2c:e3:e5:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:48 2024 by rpki-client on console-ams.rpki-client.org