Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3230322e38302e3232312e302f32342d3234203d3e203137363730.roa
File:                     3230322e38302e3232312e302f32342d3234203d3e203137363730.roa (raw, json)
Hash identifier:          c3W0qzjpLQb5zkwko/FS/7BKLpM5s2FfuXjBGjRUcGA=
Subject key identifier:   25:C2:B4:22:41:48:01:C1:1C:9E:C7:05:D5:CC:F4:1E:E7:24:BD:9C
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       54C93911BC7962ABB3C3C3E009A68BD39EAB02DC
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3230322e38302e3232312e302f32342d3234203d3e203137363730.roa
Signing time:             Fri 07 May 2021 11:22:27 +0000
ROA not before:           Fri 07 May 2021 11:17:27 +0000
ROA not after:            Sat 07 May 2022 11:22:27 +0000
asID:                     17670
IP address blocks:        202.80.221.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:c9:39:11:bc:79:62:ab:b3:c3:c3:e0:09:a6:8b:d3:9e:ab:02:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: May  7 11:17:27 2021 GMT
            Not After : May  7 11:22:27 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:fc:9d:e2:2e:e6:a0:bd:9f:9a:71:b7:81:99:
                    a2:10:5a:2d:6f:38:4b:04:f8:6f:2f:3e:27:7c:b5:
                    f1:35:10:95:64:fd:3f:71:d2:c1:d1:3d:ce:42:12:
                    4e:81:a6:7c:e4:40:a4:9c:61:3f:9c:8a:4c:5a:9a:
                    73:2e:c5:ba:c0:86:3f:30:63:e2:f5:49:60:b1:91:
                    10:a0:04:6b:5c:1a:8f:09:ea:f2:23:73:98:2d:3e:
                    9f:e9:5e:6d:82:fa:bc:30:4d:a5:53:72:0d:3f:ff:
                    3d:c9:f9:45:34:1f:80:1b:ea:a8:d1:84:2d:fc:c0:
                    86:b9:f7:e2:19:30:ea:2c:34:15:ae:9e:b7:ca:a6:
                    88:ac:95:5c:f6:9b:3e:59:c9:04:c6:31:5e:0a:dc:
                    c4:4e:9a:bd:5a:e7:24:9a:7d:ab:e9:41:52:54:a4:
                    a6:c7:6b:e3:1d:41:21:27:67:a6:dd:14:5d:e2:ff:
                    70:a5:c5:6f:0c:74:e6:6b:52:5b:19:26:d8:7b:4e:
                    86:2b:06:bc:c4:c9:74:35:48:54:e1:42:02:46:2b:
                    ce:69:e0:b5:d7:00:3f:b1:a0:e5:ff:37:ed:73:2d:
                    9d:9f:4c:c5:7b:18:d6:97:18:00:01:69:6b:52:fd:
                    dd:f9:f7:65:ac:e8:34:fe:e8:d9:98:bb:21:9e:15:
                    73:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:C2:B4:22:41:48:01:C1:1C:9E:C7:05:D5:CC:F4:1E:E7:24:BD:9C
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3230322e38302e3232312e302f32342d3234203d3e203137363730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.80.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:12:1e:48:63:95:29:a6:c6:0c:fe:40:30:83:6e:75:50:43:
         e5:5c:73:59:d0:0b:d9:89:51:0e:5e:66:02:02:ad:bb:8b:f1:
         7a:de:d9:47:7a:12:f0:ee:c1:51:05:8c:7b:ea:2a:dc:6d:14:
         40:b0:61:98:0d:e2:30:06:c2:43:d5:48:03:13:a0:15:4d:df:
         94:67:d1:7d:44:ce:c2:6c:7b:55:b6:42:93:a3:12:77:eb:9d:
         9d:70:aa:51:68:94:9e:6f:10:b4:bf:95:f4:86:23:f4:2f:c2:
         c7:9d:df:2b:6b:1c:68:84:90:ff:03:e6:13:f4:22:0c:27:93:
         7a:48:04:fd:16:8c:2f:44:97:89:df:77:8a:eb:8e:d1:18:8c:
         5a:1b:bd:e7:dd:89:d1:67:12:b8:91:06:2b:85:02:77:c1:f7:
         98:bb:94:2e:93:a0:a6:4b:a1:18:38:7c:f6:a5:b3:d2:37:3a:
         59:64:71:06:71:a9:28:6b:e1:46:f0:e0:4e:39:4e:cb:24:3b:
         f4:7d:1d:54:f7:5b:d7:97:92:50:a7:90:0d:e0:de:85:cd:6a:
         c5:41:4b:d0:75:77:0b:3b:8f:ed:fb:bd:d5:e0:90:c5:97:69:
         5d:11:a0:d0:a7:12:8f:97:91:9e:6b:a9:3e:46:84:80:cd:97:
         7c:d4:f5:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:48 2024 by rpki-client on console-ams.rpki-client.org