Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/323430333a363963303a3a2f33322d3438203d3e2030.roa
File:                     323430333a363963303a3a2f33322d3438203d3e2030.roa (raw, json)
Hash identifier:          1I7dFu+A/J1Lfx35C84lXfjwk2GHe9nLbs0bgWTiq0I=
Subject key identifier:   EA:FB:81:3F:FD:17:20:B5:15:D7:0B:2C:FB:E9:F0:40:D1:F0:9C:75
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       6A355C59B14B027035BAA908078ECA2BBDC0C976
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323430333a363963303a3a2f33322d3438203d3e2030.roa
Signing time:             Wed 02 Feb 2022 06:35:03 +0000
ROA not before:           Wed 02 Feb 2022 06:30:03 +0000
ROA not after:            Thu 02 Feb 2023 06:35:03 +0000
asID:                     0
IP address blocks:        2403:69c0::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:35:5c:59:b1:4b:02:70:35:ba:a9:08:07:8e:ca:2b:bd:c0:c9:76
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb  2 06:30:03 2022 GMT
            Not After : Feb  2 06:35:03 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:61:0c:42:9e:ae:e6:95:a1:95:29:58:2e:2b:
                    37:15:11:54:5d:d3:9d:9a:80:b8:cd:ca:7f:92:6c:
                    2e:6e:fb:f5:08:46:db:77:ce:64:4b:0b:fd:c2:2e:
                    5e:57:f7:d4:f5:a6:be:3f:b2:ef:b2:19:bd:cf:d2:
                    01:3a:5d:bd:b4:65:bc:a8:d2:55:eb:05:3d:b8:13:
                    07:cb:f5:48:76:1f:d1:a1:f8:e1:1c:78:10:d9:ad:
                    7b:1c:b1:3e:41:9f:62:75:d1:b4:5e:06:0e:8f:1b:
                    ed:52:25:98:ca:b1:04:d2:59:fa:69:98:86:4d:29:
                    17:40:58:dd:28:66:d5:c7:d8:8e:02:53:b6:a1:1a:
                    68:47:a7:87:d3:0d:37:d0:3c:7e:ba:8c:5f:9f:e5:
                    19:93:17:a7:62:08:4d:25:b1:c7:ae:38:42:a9:9b:
                    b5:52:5f:6f:7b:ae:3a:f5:2c:2e:1f:16:1a:0e:ae:
                    f9:3c:02:9a:99:e6:f5:87:87:8b:62:62:c0:1d:b9:
                    71:87:bc:f3:bc:66:6a:70:5a:10:fb:51:76:f9:9b:
                    e2:09:5b:94:e9:ce:1e:26:91:21:cb:ee:d6:04:bb:
                    be:04:fc:12:2c:b8:e7:70:37:3e:a6:98:23:32:63:
                    a4:23:01:d3:74:b1:76:68:1c:5f:c4:09:94:73:f6:
                    4a:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:FB:81:3F:FD:17:20:B5:15:D7:0B:2C:FB:E9:F0:40:D1:F0:9C:75
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323430333a363963303a3a2f33322d3438203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:69c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         39:ff:c8:31:e0:ba:7d:b4:46:b0:26:97:21:27:86:4b:84:ec:
         23:d2:7d:17:0e:f2:89:16:74:6d:65:c3:f6:33:c6:b9:57:09:
         f2:ac:9d:d6:62:58:96:3f:0b:89:c1:06:38:f6:a5:b7:9b:ad:
         d2:93:9a:0a:ee:94:8f:08:65:94:00:37:02:68:1d:5c:4f:e9:
         17:7d:57:fc:bd:76:79:68:7c:94:75:55:94:ad:70:3e:cb:2b:
         98:80:29:6e:43:14:56:ca:00:ca:7d:98:2f:08:80:33:a6:f0:
         e0:ab:0a:ee:d2:9a:b0:c7:33:51:bb:ac:5a:47:af:68:87:b9:
         87:24:52:16:3f:32:18:c6:ec:91:5c:94:89:1b:90:d9:7d:6b:
         74:f9:9f:14:d8:ab:3e:70:9a:39:63:df:23:cf:2d:1f:8a:ef:
         27:23:de:51:a9:e2:92:21:89:81:37:da:0c:41:88:17:bd:57:
         b8:40:b6:2f:61:c4:e5:89:76:57:de:97:2e:b6:97:91:2f:fe:
         9e:c4:44:61:d8:05:10:67:f1:ba:96:11:2c:da:de:5a:1d:da:
         32:23:78:2b:19:98:2e:3d:5e:77:7d:8e:69:66:2a:82:5b:74:
         b7:4d:df:91:87:9a:1b:5e:b2:20:45:0d:ed:5a:4b:34:a6:fd:
         8f:af:fe:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:49 2024 by rpki-client on console-ams.rpki-client.org