Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/323430333a376238303a3a2f33322d3438203d3e2030.roa
File:                     323430333a376238303a3a2f33322d3438203d3e2030.roa (raw, json)
Hash identifier:          GxZ+B2u4W0oXxfmyKaOzEop1wSNZHKQeUuTce1oqHaU=
Subject key identifier:   A7:2C:30:EB:E9:2D:E7:13:1B:A0:52:D1:FE:56:14:15:A7:1A:52:4E
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       49B97EBDB6CC7D07203469F28A22F8EDA597BBD8
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323430333a376238303a3a2f33322d3438203d3e2030.roa
Signing time:             Wed 02 Feb 2022 06:33:56 +0000
ROA not before:           Wed 02 Feb 2022 06:28:56 +0000
ROA not after:            Thu 02 Feb 2023 06:33:56 +0000
asID:                     0
IP address blocks:        2403:7b80::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:b9:7e:bd:b6:cc:7d:07:20:34:69:f2:8a:22:f8:ed:a5:97:bb:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb  2 06:28:56 2022 GMT
            Not After : Feb  2 06:33:56 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:2e:cb:76:42:51:b7:14:db:60:1a:fd:64:66:
                    7e:e0:9f:45:c4:d5:d1:82:e4:90:14:af:34:c7:46:
                    a2:4d:7f:2c:eb:ac:2f:d2:7f:dc:f6:61:10:da:74:
                    c9:b9:2d:7c:95:32:45:18:3b:db:cd:53:f3:7c:db:
                    0e:bb:79:fb:d2:a7:55:cb:cb:6c:fd:e6:73:0c:e6:
                    c7:00:71:b7:f8:bd:a7:3a:7d:9a:18:70:ce:7c:22:
                    3d:d2:fc:79:7f:7a:0b:50:df:bb:ae:f7:48:c8:33:
                    00:e1:a9:fa:4b:88:4f:17:d9:cf:02:22:bd:6d:5e:
                    31:24:9a:cc:b1:3e:96:e9:90:cd:95:b8:ad:61:89:
                    9e:55:34:02:8a:1f:1d:8f:50:df:3f:96:bc:59:1d:
                    be:9a:fc:d7:1f:0c:0f:d1:97:a5:87:d6:40:90:76:
                    07:a2:69:31:23:b3:55:38:e8:24:81:9d:0f:58:13:
                    f1:e3:a8:87:8c:c4:71:ca:2c:5f:75:66:32:11:f4:
                    e2:b4:7a:aa:c9:7c:31:39:42:53:bb:54:27:d2:5d:
                    27:2b:15:ef:e1:f6:4e:8b:b5:52:88:30:74:71:8e:
                    f3:ca:98:ad:2e:93:cb:04:27:09:a0:6b:4b:ee:f5:
                    c7:d3:18:ce:f6:db:a3:16:c9:1c:61:64:27:ba:96:
                    02:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:2C:30:EB:E9:2D:E7:13:1B:A0:52:D1:FE:56:14:15:A7:1A:52:4E
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323430333a376238303a3a2f33322d3438203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2403:7b80::/32

    Signature Algorithm: sha256WithRSAEncryption
         2f:fb:a1:65:b1:d4:c9:d9:e5:e6:53:24:67:34:f9:a7:7a:87:
         14:c9:56:a5:25:b1:61:a6:dc:bb:95:2c:95:d5:b4:5b:44:c5:
         07:ed:8b:f7:cc:74:9e:4b:64:09:d8:84:e5:0e:2f:41:64:29:
         7b:3d:46:00:d5:b0:7d:62:85:53:63:c2:16:c6:8f:97:15:a1:
         fd:44:f3:cb:41:2d:d2:06:1d:59:a4:cf:7e:58:f8:f2:bd:4e:
         89:71:70:7f:f5:49:df:41:0a:4b:18:d3:0c:fd:25:c4:18:65:
         7b:15:5f:70:52:b8:db:bc:c8:ca:fb:42:a0:62:5d:33:be:a8:
         8c:1b:3a:8d:9f:7f:4e:bc:ac:e3:eb:50:61:02:96:fe:95:e1:
         1d:d9:f9:b3:c6:03:f9:1d:be:ba:61:34:91:e9:b4:0f:b5:fb:
         ee:5c:78:47:90:b3:0d:12:76:26:96:00:cb:58:24:2a:bb:73:
         f9:74:83:c0:ea:17:07:da:a6:ce:14:3f:90:1d:7b:e1:ef:81:
         93:c6:56:b0:e4:30:6d:06:60:99:00:3f:da:27:bd:88:b5:c4:
         c2:39:84:d2:3d:92:13:1a:82:ea:18:29:d6:30:cb:ce:fa:a0:
         e8:c5:3f:a5:b9:1e:b5:94:57:0c:8c:36:e2:51:12:e6:ea:93:
         81:76:9e:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:49 2024 by rpki-client on console-ams.rpki-client.org