Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/323430343a333538303a3a2f33322d3438203d3e2030.roa
File:                     323430343a333538303a3a2f33322d3438203d3e2030.roa (raw, json)
Hash identifier:          Bu/jH06yR39gPFcQM6DSYDRpQ5C/gKg0SPS7Uso1O6Y=
Subject key identifier:   36:F6:36:43:83:2E:CE:34:FF:AB:82:F3:22:2B:08:88:9E:A2:8B:5D
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       70CCAB258B1B54C47B54D4F17A11531F8678322A
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323430343a333538303a3a2f33322d3438203d3e2030.roa
Signing time:             Wed 02 Feb 2022 06:34:31 +0000
ROA not before:           Wed 02 Feb 2022 06:29:31 +0000
ROA not after:            Thu 02 Feb 2023 06:34:31 +0000
asID:                     0
IP address blocks:        2404:3580::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:cc:ab:25:8b:1b:54:c4:7b:54:d4:f1:7a:11:53:1f:86:78:32:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb  2 06:29:31 2022 GMT
            Not After : Feb  2 06:34:31 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:50:65:db:f1:f0:cb:c4:ed:cd:70:c9:ae:bc:
                    0b:d2:35:4a:bb:77:5b:47:a6:d3:84:8b:1b:13:68:
                    87:3b:6d:b7:d9:f2:d2:6f:a1:d5:aa:28:23:c5:f2:
                    1b:68:09:1f:f7:ac:63:90:76:7b:c1:8d:02:f1:86:
                    04:dd:05:e1:b3:f3:87:7e:a5:a1:4b:08:3e:31:55:
                    3a:44:51:04:be:aa:e3:93:05:a8:0b:93:8b:cf:6c:
                    67:cc:66:24:97:4e:31:36:38:48:d1:21:7b:ee:01:
                    13:20:51:d0:4c:44:95:52:a3:ae:45:ba:db:65:57:
                    3b:a6:e5:84:cf:b5:a3:38:5a:16:e6:19:c3:fd:fe:
                    80:dd:65:ce:65:69:9c:55:57:5e:5b:59:27:ba:71:
                    0a:01:99:dd:c3:1f:01:70:85:3b:0f:a1:45:f1:58:
                    be:dd:fd:c1:55:ab:94:58:71:ae:e0:31:2c:d8:04:
                    c9:65:9d:06:01:fe:37:67:8d:fc:85:17:f9:cb:d9:
                    c2:24:d7:35:11:67:59:d4:9a:e8:02:12:fc:97:dd:
                    79:0e:2c:59:05:0f:65:cf:81:21:bc:33:b8:34:9f:
                    9d:3e:f2:c0:44:4e:bd:59:5d:f3:00:9c:63:03:23:
                    74:75:14:4a:b8:9d:19:3e:53:36:d0:8a:39:26:35:
                    69:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:F6:36:43:83:2E:CE:34:FF:AB:82:F3:22:2B:08:88:9E:A2:8B:5D
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323430343a333538303a3a2f33322d3438203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:3580::/32

    Signature Algorithm: sha256WithRSAEncryption
         10:9c:2f:08:0a:c3:f7:f4:a8:e7:66:42:48:51:ee:ef:98:27:
         e7:86:2b:e0:c5:c5:42:ad:c7:09:eb:d0:c6:a4:00:af:75:03:
         b5:d6:77:25:04:32:32:44:25:f0:c8:4f:3c:09:7c:b8:67:ad:
         81:da:bd:cb:3d:26:6c:cf:dc:d8:86:67:65:1e:88:c8:b1:e1:
         d9:68:06:05:3b:34:48:31:19:cb:6e:f8:8c:b9:13:b7:3a:6d:
         dc:f1:71:28:7c:1d:6d:22:b2:79:83:4e:59:5c:48:e9:13:62:
         e2:5f:4c:bd:ea:ea:e3:af:f4:43:07:e9:e5:7c:26:ae:b9:31:
         31:55:57:91:1b:02:c8:65:32:51:f5:f2:f9:43:a5:5c:83:69:
         ad:21:fd:9c:f9:be:e6:a4:b4:66:f9:45:c9:9c:2e:87:e7:89:
         dd:5f:64:32:13:61:44:8d:92:23:a5:37:e4:d5:8e:42:ba:9e:
         b8:bf:38:d8:24:0f:f0:f3:1c:1f:b5:d2:a6:fc:04:93:e9:52:
         e5:16:db:c9:c6:1f:ff:54:84:36:33:d4:30:d7:04:02:a7:c8:
         ff:99:50:b0:47:a5:62:21:43:32:42:37:0e:77:e4:3b:56:7e:
         34:c0:4f:7d:51:d9:bf:60:24:80:43:21:f0:11:da:fe:02:1c:
         6f:8d:45:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:12 2024 by rpki-client on console-fra.rpki-client.org