Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3230322e38302e3232322e302f32332d3234203d3e203137363730.roa
File:                     3230322e38302e3232322e302f32332d3234203d3e203137363730.roa (raw, json)
Hash identifier:          2Cuu4F/0b3R9MZX51XSKrNQF/znkL3j+SG4WPnF2qvI=
Subject key identifier:   8A:BA:08:82:AD:80:87:41:92:F1:65:56:8A:B4:3F:F5:B3:A0:1E:42
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       2C1D0F1BAAE2D9044EB5FC203F8A826F199D4DB4
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3230322e38302e3232322e302f32332d3234203d3e203137363730.roa
Signing time:             Fri 07 May 2021 11:24:44 +0000
ROA not before:           Fri 07 May 2021 11:19:44 +0000
ROA not after:            Sat 07 May 2022 11:24:44 +0000
asID:                     17670
IP address blocks:        202.80.222.0/23 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:1d:0f:1b:aa:e2:d9:04:4e:b5:fc:20:3f:8a:82:6f:19:9d:4d:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: May  7 11:19:44 2021 GMT
            Not After : May  7 11:24:44 2022 GMT
        Subject: CN=3082010A0282010100C09B1B66EBA79AF21C236F842D386398B640D9AEBC6FCC5120F684C494DD079E00073FE388DD92870F050ECB34D4AD9072F722AEFBF2BB785A0A38D321E2040C539F0794AA5619B439D0A8EF9CB7F58E5E55B3220BD85F4E46319FC922D18E220DD810B311633BCF3A662295BF5A089C951403AAC39B204D9D93E4F5121B0CF1818858FC17A8884F61A88977839ACD49CDFEAFB6DB08CF694A985BDA29D04F92F7BDA92DEAD4C05304B6FC29F6A08ACA7D66C63D59544FEB4FECB21DF0CD7A8B7EB7E54B30C7574C026B3DCA10E6873D88CB1E7B5E4E58BC3C834CD1706C8D4F5E3B99940D94D291C39C8AAB431A1F5E63015E36078269098505446FCB19CD7B0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:9b:1b:66:eb:a7:9a:f2:1c:23:6f:84:2d:38:
                    63:98:b6:40:d9:ae:bc:6f:cc:51:20:f6:84:c4:94:
                    dd:07:9e:00:07:3f:e3:88:dd:92:87:0f:05:0e:cb:
                    34:d4:ad:90:72:f7:22:ae:fb:f2:bb:78:5a:0a:38:
                    d3:21:e2:04:0c:53:9f:07:94:aa:56:19:b4:39:d0:
                    a8:ef:9c:b7:f5:8e:5e:55:b3:22:0b:d8:5f:4e:46:
                    31:9f:c9:22:d1:8e:22:0d:d8:10:b3:11:63:3b:cf:
                    3a:66:22:95:bf:5a:08:9c:95:14:03:aa:c3:9b:20:
                    4d:9d:93:e4:f5:12:1b:0c:f1:81:88:58:fc:17:a8:
                    88:4f:61:a8:89:77:83:9a:cd:49:cd:fe:af:b6:db:
                    08:cf:69:4a:98:5b:da:29:d0:4f:92:f7:bd:a9:2d:
                    ea:d4:c0:53:04:b6:fc:29:f6:a0:8a:ca:7d:66:c6:
                    3d:59:54:4f:eb:4f:ec:b2:1d:f0:cd:7a:8b:7e:b7:
                    e5:4b:30:c7:57:4c:02:6b:3d:ca:10:e6:87:3d:88:
                    cb:1e:7b:5e:4e:58:bc:3c:83:4c:d1:70:6c:8d:4f:
                    5e:3b:99:94:0d:94:d2:91:c3:9c:8a:ab:43:1a:1f:
                    5e:63:01:5e:36:07:82:69:09:85:05:44:6f:cb:19:
                    cd:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:BA:08:82:AD:80:87:41:92:F1:65:56:8A:B4:3F:F5:B3:A0:1E:42
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3230322e38302e3232322e302f32332d3234203d3e203137363730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.80.222.0/23

    Signature Algorithm: sha256WithRSAEncryption
         67:13:e8:3e:0f:f2:1a:e3:c8:66:d3:92:c9:17:c6:bc:07:3e:
         d6:73:82:50:ae:76:31:2e:6d:3e:be:83:19:df:c6:51:ca:a3:
         c0:67:17:a1:f9:e6:80:f6:c2:87:df:11:d8:99:81:e5:42:2e:
         97:1f:f6:1e:76:1f:1a:a5:ae:c7:06:8f:dc:ca:c0:9f:52:8e:
         93:0d:07:40:c7:8c:94:63:91:af:56:20:32:65:f1:4b:0f:74:
         8d:47:80:16:71:a9:34:01:ef:e9:ca:7c:5e:a2:57:d3:a3:aa:
         06:2c:6b:31:8c:52:2d:88:c8:c3:32:f9:07:cd:fe:28:28:ff:
         b8:17:3a:9c:7a:f9:c5:86:4a:33:43:ba:a4:8b:69:b3:bc:05:
         66:5a:1c:0e:22:a2:d2:05:34:09:44:08:58:8c:da:6e:c8:80:
         43:d0:40:77:24:2a:15:bf:08:26:2a:2e:b8:10:34:0b:45:1b:
         ea:9e:3a:ff:62:ee:2c:83:bb:86:4c:72:e1:5e:21:01:47:ff:
         7b:11:60:5b:83:d4:2c:4e:04:5f:fb:c0:fc:4e:a1:2b:71:fd:
         ac:8d:15:5b:7e:2f:c3:83:ae:33:c1:36:5c:54:ee:af:bc:c5:
         9a:02:ea:57:3c:c7:1f:fe:43:d6:34:50:f6:7f:d4:32:b3:c5:
         61:17:70:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:12 2024 by rpki-client on console-fra.rpki-client.org