Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/323430333a313738303a3a2f33322d3438203d3e2030.roa
File:                     323430333a313738303a3a2f33322d3438203d3e2030.roa (raw, json)
Hash identifier:          FX/vodal09ioZeIqc1Ie7onQO7y+2YjkXDS5rW/oBpY=
Subject key identifier:   92:A1:71:C6:66:7D:C2:45:C0:FB:E6:4D:70:EE:97:FA:B1:4F:20:53
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       C273AFA1C3EEBE38F5E4889F7D9DF35E9899BD
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323430333a313738303a3a2f33322d3438203d3e2030.roa
Signing time:             Wed 02 Feb 2022 06:34:13 +0000
ROA not before:           Wed 02 Feb 2022 06:29:13 +0000
ROA not after:            Thu 02 Feb 2023 06:34:13 +0000
asID:                     0
IP address blocks:        2403:1780::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            c2:73:af:a1:c3:ee:be:38:f5:e4:88:9f:7d:9d:f3:5e:98:99:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb  2 06:29:13 2022 GMT
            Not After : Feb  2 06:34:13 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:3d:ff:b6:18:29:79:a3:b8:a8:7e:31:5e:a4:
                    3c:4b:23:e6:0c:31:07:42:6f:75:a9:ae:ec:50:cb:
                    84:f5:42:5f:fe:00:3a:00:d6:ec:9e:fd:84:90:35:
                    25:3c:cb:2b:b5:64:f9:07:e9:33:95:3c:43:3b:f0:
                    b7:70:29:f9:f2:38:eb:08:68:cf:9a:0d:87:e3:18:
                    a8:7a:1a:ac:1d:de:4f:99:9a:5b:10:25:44:b1:fe:
                    2f:80:1c:66:1a:10:b3:0c:7c:8c:ea:db:1e:29:44:
                    ae:0e:31:eb:5f:d5:26:0a:02:10:fa:52:db:a7:a6:
                    16:ef:e1:ba:97:13:a9:94:1f:3b:ff:7a:73:49:59:
                    f6:36:2c:90:78:7c:e9:ac:19:94:43:5f:2c:47:38:
                    e0:49:9b:27:72:8e:3d:dd:73:9a:44:56:0c:15:08:
                    43:d5:39:d9:c1:4c:7d:93:3d:ca:b3:20:f6:00:ca:
                    9f:34:54:d8:03:fe:d1:f2:c7:a2:72:a7:9f:0a:35:
                    76:89:0b:83:a0:60:c6:d5:53:c7:3d:2e:a1:63:80:
                    43:a3:2c:72:9e:35:f7:02:8f:91:c5:26:b8:eb:66:
                    03:b9:f6:9b:97:58:58:b6:68:79:c4:b2:68:db:eb:
                    bf:0a:84:8a:86:4d:a8:ab:e4:9f:c6:34:a1:29:7e:
                    86:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:A1:71:C6:66:7D:C2:45:C0:FB:E6:4D:70:EE:97:FA:B1:4F:20:53
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323430333a313738303a3a2f33322d3438203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:1780::/32

    Signature Algorithm: sha256WithRSAEncryption
         7a:a1:fe:d9:ca:e7:9c:87:64:38:66:4a:0f:5b:3f:c7:98:1c:
         4b:c6:ea:be:03:87:a3:5b:bb:f7:e6:e8:8a:3c:4d:27:7d:1d:
         a3:b2:83:c1:9e:0b:05:89:cd:a3:10:dc:4e:97:12:76:9b:c0:
         ad:90:9d:e3:b0:f9:6c:81:d7:5c:f9:29:b8:38:a2:10:ac:41:
         a9:ce:45:8c:9a:a0:dc:e3:41:8e:39:4c:f8:ad:89:2d:d3:e2:
         d1:62:01:39:1c:c6:90:91:49:c2:98:30:ed:25:1e:7e:50:85:
         54:bc:fa:87:d0:1d:aa:aa:8f:70:2a:3d:e9:e8:c6:5f:6d:0b:
         46:48:8a:6f:27:16:d2:e7:f0:41:05:b2:b3:82:1f:54:55:37:
         09:14:44:c9:21:ac:aa:34:d7:76:ec:80:2d:4b:d0:b9:f4:60:
         e5:88:10:da:38:9d:a1:37:41:ba:41:30:4e:98:f8:a6:50:99:
         51:71:57:d0:ec:ca:a7:0c:89:cf:fb:95:95:5b:0b:22:4c:3c:
         14:a2:d7:ff:f8:a6:94:9e:a2:d1:a9:45:fc:49:87:93:a7:28:
         33:9c:d9:8d:08:10:37:5b:2e:b1:31:fd:d5:2f:35:41:cd:38:
         7f:38:9a:98:8b:cb:8a:a6:ae:45:42:a0:28:29:85:5c:3e:49:
         2e:9c:26:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:12 2024 by rpki-client on console-fra.rpki-client.org