Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/323430323a323930303a3a2f33322d3438203d3e203435373031.roa
File:                     323430323a323930303a3a2f33322d3438203d3e203435373031.roa (raw, json)
Hash identifier:          3bL5Wjrqqs5IOdYIPGoYYMKi/DFBrpf9AYHwja2Vfh0=
Subject key identifier:   E4:C8:3B:93:1D:79:FF:7C:89:12:49:96:65:1F:63:51:23:9A:AC:7B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       4D0DB736789E400B0ED29460D48023242B19FE95
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323430323a323930303a3a2f33322d3438203d3e203435373031.roa
Signing time:             Wed 09 Jun 2021 04:22:23 +0000
ROA not before:           Wed 09 Jun 2021 04:17:23 +0000
ROA not after:            Thu 09 Jun 2022 04:22:23 +0000
asID:                     45701
IP address blocks:        2402:2900::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:0d:b7:36:78:9e:40:0b:0e:d2:94:60:d4:80:23:24:2b:19:fe:95
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jun  9 04:17:23 2021 GMT
            Not After : Jun  9 04:22:23 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:3b:90:aa:c5:55:47:64:dd:27:bf:b2:cc:f0:
                    d2:68:47:cd:80:2a:bf:82:4f:7b:5e:86:65:a0:92:
                    ba:9b:16:25:fa:51:88:29:60:f5:36:6e:af:c8:25:
                    df:a8:f5:ea:4d:17:99:95:50:5e:53:8a:aa:1b:a1:
                    ca:be:f2:56:8b:78:9e:e8:b8:33:8f:b8:11:af:14:
                    82:8e:58:d6:51:66:2d:9d:07:d8:41:7c:a7:5e:a1:
                    35:ec:85:09:21:80:fe:e3:37:4e:ca:da:30:1d:25:
                    cf:3d:cb:96:69:c7:5c:e6:57:fb:ac:f3:2c:63:36:
                    8d:cd:0c:31:22:10:b8:5b:2b:74:3c:08:ff:bf:0a:
                    59:08:3e:19:bb:cd:dc:5b:5a:89:e0:9c:8d:7c:a1:
                    68:c1:6d:c3:66:de:4f:2a:16:7d:5c:ce:fe:ce:9f:
                    1e:b3:45:8a:c8:e8:f6:b0:9c:9e:76:82:fd:b9:04:
                    0b:70:87:77:a0:b5:7e:17:e5:51:35:05:4e:18:21:
                    08:f8:f9:6a:de:10:80:aa:5c:f3:38:3d:e6:34:da:
                    82:66:ca:17:46:1c:55:36:e5:b5:12:af:e7:1e:f5:
                    7f:4f:dd:de:6e:ec:bd:1b:70:07:65:47:5a:0f:91:
                    68:53:75:82:26:17:44:3d:81:ef:5d:76:00:81:4d:
                    b7:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:C8:3B:93:1D:79:FF:7C:89:12:49:96:65:1F:63:51:23:9A:AC:7B
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323430323a323930303a3a2f33322d3438203d3e203435373031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2402:2900::/32

    Signature Algorithm: sha256WithRSAEncryption
         41:c8:81:42:28:a8:37:b9:24:db:12:dd:c1:41:13:e7:58:36:
         9d:51:af:60:af:70:31:3e:63:23:4c:7b:06:da:80:71:12:41:
         00:c3:67:26:5e:89:7f:2e:76:f2:02:7e:74:de:d0:60:de:e9:
         ab:6a:96:bf:6c:c4:fe:61:2f:d4:da:a7:8a:f2:79:1d:27:dd:
         36:e9:43:a0:37:35:cc:27:15:12:2f:78:7e:97:68:c6:a2:80:
         47:3e:d2:ae:b3:a0:b2:75:78:65:6f:7c:c0:64:cb:1f:f0:b7:
         7f:0e:29:92:41:1d:99:ed:ac:f8:04:1b:55:2a:76:3c:74:e9:
         2b:94:c1:f2:6c:b6:01:7a:90:cd:07:ef:a7:35:8f:60:ae:11:
         c7:d2:34:e4:f3:9b:a0:db:6e:cb:f5:0e:a2:7a:d3:e1:6b:40:
         c9:59:4c:e8:ef:f1:3e:2f:20:4d:00:43:cb:21:d0:05:a2:b7:
         19:05:72:e7:c2:37:fa:9f:55:8b:a6:41:e6:8b:2d:23:2c:33:
         94:37:78:37:53:9a:9f:5a:5d:90:00:d7:7d:f0:1f:e3:a9:83:
         82:49:57:31:63:20:01:a0:18:fe:1e:bc:15:ce:17:3b:84:5e:
         d3:05:f2:bc:46:49:d2:9e:aa:58:75:74:5c:ec:e4:b3:c0:29:
         f9:cd:2c:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:12 2024 by rpki-client on console-fra.rpki-client.org