Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/323430353a333034303a3a2f33322d3438203d3e20313339333730.roa
File:                     323430353a333034303a3a2f33322d3438203d3e20313339333730.roa (raw, json)
Hash identifier:          tQNzjT2jlOX0OXQNHtNdhn10hezjZNYL5DiAqSPuvsM=
Subject key identifier:   2E:94:33:0B:01:AB:50:F6:0F:72:32:F9:90:16:1D:96:38:AF:A4:40
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       37B4C64C1E5827A86366C2D17EA7810184669CC5
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323430353a333034303a3a2f33322d3438203d3e20313339333730.roa
Signing time:             Thu 09 Sep 2021 08:22:54 +0000
ROA not before:           Thu 09 Sep 2021 08:17:54 +0000
ROA not after:            Fri 09 Sep 2022 08:22:54 +0000
asID:                     139370
IP address blocks:        2405:3040::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:b4:c6:4c:1e:58:27:a8:63:66:c2:d1:7e:a7:81:01:84:66:9c:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Sep  9 08:17:54 2021 GMT
            Not After : Sep  9 08:22:54 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:dc:71:0c:51:9e:32:ad:b3:2c:bb:0c:a0:fa:
                    5d:21:e8:a0:a2:ea:e8:22:8b:87:d1:b4:95:2b:f3:
                    00:79:db:59:16:f3:71:99:8b:b2:0a:92:38:df:74:
                    e1:48:58:3c:5a:1c:af:e9:50:4f:7d:bc:a8:2c:88:
                    60:a2:8d:3b:71:d1:74:98:19:cf:cf:23:1e:31:02:
                    0d:f7:55:b5:b4:14:d6:31:2c:ba:32:45:f3:03:77:
                    a9:dd:2c:54:a8:60:f4:13:4b:e7:2b:0e:19:eb:59:
                    a8:a7:30:80:c2:10:46:12:83:96:68:12:e8:bb:4a:
                    a5:d1:fa:3a:a7:5d:02:bf:ed:eb:e0:48:6c:3b:73:
                    a0:6a:d5:4c:de:27:aa:67:c4:a4:79:ab:b4:74:e8:
                    e8:f8:03:42:58:34:83:9a:1b:41:29:67:83:b1:19:
                    17:0a:ca:62:47:ab:c6:52:e2:58:6b:20:3b:c6:c4:
                    1a:b1:7a:cd:fa:27:6f:d5:5d:f6:1b:f5:05:e5:0e:
                    05:4a:a3:f0:f2:16:1e:f4:83:e8:32:45:f8:47:aa:
                    f4:64:74:e7:4a:5f:63:30:45:dc:b0:cd:1f:63:3c:
                    f3:2b:1c:b5:54:99:6f:02:91:c9:96:93:76:8d:92:
                    3d:be:76:f7:c9:86:f3:b2:bb:ff:dc:d0:8c:30:c4:
                    5d:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:94:33:0B:01:AB:50:F6:0F:72:32:F9:90:16:1D:96:38:AF:A4:40
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323430353a333034303a3a2f33322d3438203d3e20313339333730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:3040::/32

    Signature Algorithm: sha256WithRSAEncryption
         2f:9a:4c:bc:35:f2:a2:24:70:cc:df:2c:03:f2:f9:40:19:de:
         5e:77:bd:0a:c4:d1:a5:5d:3d:d4:9b:d4:1c:30:2b:37:ae:f8:
         3c:b6:5c:de:76:3f:29:52:5b:b8:c1:fa:be:f5:30:15:1f:4d:
         4c:19:0b:5b:82:a2:5b:7d:c9:e8:ae:62:b6:4c:89:0f:b9:b9:
         45:d9:73:58:99:b6:11:81:9d:1a:19:28:49:23:ec:a6:46:5e:
         fc:72:6b:8a:96:d5:d1:ed:28:6c:2c:54:22:dc:b8:cb:e1:87:
         91:d9:2c:82:28:71:b8:f4:31:01:f9:ee:f5:d9:e8:6e:73:db:
         60:1a:09:67:dd:84:b4:3e:fc:3e:5b:62:e0:dc:bd:9e:79:3a:
         29:9d:21:72:21:91:0b:75:a2:5b:8d:6b:7a:a7:d9:e8:36:41:
         df:4a:e0:5f:f1:0b:a9:04:bd:b5:c9:a2:f8:92:05:3a:23:61:
         aa:27:99:a5:76:21:d9:e4:b7:c5:af:cf:ba:71:21:b5:c2:f4:
         ac:d2:a9:dd:52:2e:84:76:a4:4b:ba:d9:3a:bf:d1:fa:e5:3d:
         7b:2d:c5:2a:55:c1:4c:02:2b:ab:31:91:d0:45:66:39:8a:93:
         b8:0c:80:bf:bd:ee:fa:a3:98:a0:43:76:2e:3f:91:14:8d:ff:
         aa:1a:ae:7d
-----BEGIN CERTIFICATE-----
MIIHCTCCBfGgAwIBAgIUN7TGTB5YJ6hjZsLRfqeBAYRmnMUwDQYJKoZIhvcNAQEL
BQAwSjEVMBMGA1UEAxMMQTkxODYyMTQwMDAwMTEwLwYDVQQFEyhCQThGNzdEMjFF
NThGRTlDOTM5QTZCNzBFMjU4NTYxN0UxODMzNzZCMB4XDTIxMDkwOTA4MTc1NFoX
DTIyMDkwOTA4MjI1NFowggItMYICKTCCAiUGA1UEAxOCAhwzMDgyMDEwQTAyODIw
MTAxMDBBQURDNzEwQzUxOUUzMkFEQjMyQ0JCMENBMEZBNUQyMUU4QTBBMkVBRTgy
MjhCODdEMUI0OTUyQkYzMDA3OURCNTkxNkYzNzE5OThCQjIwQTkyMzhERjc0RTE0
ODU4M0M1QTFDQUZFOTUwNEY3REJDQTgyQzg4NjBBMjhEM0I3MUQxNzQ5ODE5Q0ZD
RjIzMUUzMTAyMERGNzU1QjVCNDE0RDYzMTJDQkEzMjQ1RjMwMzc3QTlERDJDNTRB
ODYwRjQxMzRCRTcyQjBFMTlFQjU5QThBNzMwODBDMjEwNDYxMjgzOTY2ODEyRThC
QjRBQTVEMUZBM0FBNzVEMDJCRkVERUJFMDQ4NkMzQjczQTA2QUQ1NENERTI3QUE2
N0M0QTQ3OUFCQjQ3NEU4RThGODAzNDI1ODM0ODM5QTFCNDEyOTY3ODNCMTE5MTcw
QUNBNjI0N0FCQzY1MkUyNTg2QjIwM0JDNkM0MUFCMTdBQ0RGQTI3NkZENTVERjYx
QkY1MDVFNTBFMDU0QUEzRjBGMjE2MUVGNDgzRTgzMjQ1Rjg0N0FBRjQ2NDc0RTc0
QTVGNjMzMDQ1RENCMENEMUY2MzNDRjMyQjFDQjU1NDk5NkYwMjkxQzk5NjkzNzY4
RDkyM0RCRTc2RjdDOTg2RjNCMkJCRkZEQ0QwOEMzMEM0NURDRjAyMDMwMTAwMDEw
ggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCq3HEMUZ4yrbMsuwyg+l0h
6KCi6ugii4fRtJUr8wB521kW83GZi7IKkjjfdOFIWDxaHK/pUE99vKgsiGCijTtx
0XSYGc/PIx4xAg33VbW0FNYxLLoyRfMDd6ndLFSoYPQTS+crDhnrWainMIDCEEYS
g5ZoEui7SqXR+jqnXQK/7evgSGw7c6Bq1UzeJ6pnxKR5q7R06Oj4A0JYNIOaG0Ep
Z4OxGRcKymJHq8ZS4lhrIDvGxBqxes36J2/VXfYb9QXlDgVKo/DyFh70g+gyRfhH
qvRkdOdKX2MwRdywzR9jPPMrHLVUmW8CkcmWk3aNkj2+dvfJhvOyu//c0IwwxF3P
AgMBAAGjggIAMIIB/DAdBgNVHQ4EFgQULpQzCwGrUPYPcjL5kBYdljivpEAwHwYD
VR0jBBgwFoAUuo930h5Y/pyTmmtw4lhWF+GDN2swDgYDVR0PAQH/BAQDAgeAMGkG
A1UdHwRiMGAwXqBcoFqGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvQkE4Rjc3RDIxRTU4RkU5QzkzOUE2QjcwRTI1ODU2MTdFMTgz
Mzc2Qi5jcmwwfgYIKwYBBQUHAQEEcjBwMG4GCCsGAQUFBzAChmJyc3luYzovL3Jw
a2kuYXBuaWMubmV0L3JlcG9zaXRvcnkvQjUyN0VGNTgxRDY2MTFFMkJCNDY4RjdD
NzJGRDFGRjIvdW85MzBoNVlfcHlUbW10dzRsaFdGLUdETjJzLmNlcjCBggYIKwYB
BQUHAQsEdjB0MHIGCCsGAQUFBzALhmZyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby9JRE5JQy1JRC8yLzMyMzQzMDM1M2EzMzMwMzQzMDNhM2EyZjMzMzIy
ZDM0MzgyMDNkM2UyMDMxMzMzOTMzMzczMC5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAgBggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACQFMEAwDQYJKoZI
hvcNAQELBQADggEBAC+aTLw18qIkcMzfLAPy+UAZ3l53vQrE0aVdPdSb1BwwKzeu
+Dy2XN52PylSW7jB+r71MBUfTUwZC1uColt9yeiuYrZMiQ+5uUXZc1iZthGBnRoZ
KEkj7KZGXvxya4qW1dHtKGwsVCLcuMvhh5HZLIIocbj0MQH57vXZ6G5z22AaCWfd
hLQ+/D5bYuDcvZ55OimdIXIhkQt1oluNa3qn2eg2Qd9K4F/xC6kEvbXJoviSBToj
YaonmaV2Idnkt8Wvz7pxIbXC9KzSqd1SLoR2pEu62Tq/0frlPXstxSpVwUwCK6sx
kdBFZjmKk7gMgL+97vqjmKBDdi4/kRSN/6oarn0=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:12 2024 by rpki-client on console-fra.rpki-client.org