Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/323430353a616134303a3a2f33322d3438203d3e2030.roa
File:                     323430353a616134303a3a2f33322d3438203d3e2030.roa (raw, json)
Hash identifier:          X/19iZF3HRzp4biiWIgz0pMqlyElij06Dzj0Lh0GO2w=
Subject key identifier:   28:B5:26:91:18:87:A4:E3:41:C5:4E:38:10:EF:E1:54:63:3B:51:7E
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       35B2E33D4DFD66C138B4A24F94586DDBF408F80B
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323430353a616134303a3a2f33322d3438203d3e2030.roa
Signing time:             Wed 02 Feb 2022 06:35:39 +0000
ROA not before:           Wed 02 Feb 2022 06:30:39 +0000
ROA not after:            Thu 02 Feb 2023 06:35:39 +0000
asID:                     0
IP address blocks:        2405:aa40::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:b2:e3:3d:4d:fd:66:c1:38:b4:a2:4f:94:58:6d:db:f4:08:f8:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb  2 06:30:39 2022 GMT
            Not After : Feb  2 06:35:39 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:56:8e:fd:3c:d2:83:d3:12:4a:af:8a:2b:73:
                    e4:68:66:64:6a:b0:30:24:ec:21:37:87:28:77:4c:
                    01:78:01:24:f7:62:25:09:fa:ab:28:ed:a1:b1:a9:
                    e2:24:45:19:9a:21:37:52:54:00:51:c5:f4:ba:0b:
                    21:02:0e:b2:ed:4c:23:2c:c9:b0:6c:e9:8c:3a:7f:
                    38:51:f0:2b:70:1a:04:e6:e7:5a:0a:2d:eb:10:4f:
                    05:a4:75:bd:78:60:b1:1d:6f:0c:92:d3:b2:87:4d:
                    8f:ce:55:8b:59:72:aa:ee:5a:bc:90:cc:99:44:3f:
                    27:77:b7:e2:44:e0:95:4b:f5:78:03:b9:ba:a7:b2:
                    cd:37:ff:f3:82:69:7c:72:67:77:d9:6c:bf:1d:d8:
                    15:4e:f3:7a:a0:db:b6:7f:00:48:82:cd:04:aa:8b:
                    64:60:85:a5:fd:af:2a:0e:5a:b7:a0:6a:48:16:79:
                    12:11:0d:d4:7a:8d:91:6e:bb:8c:e3:01:0d:21:c2:
                    a3:04:78:24:d5:8a:7d:57:97:b6:13:5e:fd:99:69:
                    23:fc:0d:e9:bd:b5:76:fa:7b:b3:72:3e:7c:e1:97:
                    15:cc:89:53:cd:0c:cb:d1:ab:f9:ee:62:8d:12:b1:
                    a7:c1:b3:6e:b4:03:70:8d:01:47:04:96:7f:92:eb:
                    bc:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:B5:26:91:18:87:A4:E3:41:C5:4E:38:10:EF:E1:54:63:3B:51:7E
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323430353a616134303a3a2f33322d3438203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:aa40::/32

    Signature Algorithm: sha256WithRSAEncryption
         49:45:52:43:5d:a4:79:9b:ba:54:5e:01:3e:c4:96:c6:bf:5f:
         8c:71:f9:81:74:4b:52:23:7c:4f:21:79:4b:ff:22:b1:95:fc:
         97:96:c3:bf:20:d3:6d:91:94:ed:4c:96:1c:c2:6c:63:04:53:
         17:1c:20:0f:16:b9:96:31:b5:71:97:8a:9a:1b:00:f1:a0:9e:
         cd:99:df:a9:6f:8e:95:e4:26:c5:f7:aa:f9:e5:a7:2c:05:a7:
         b6:84:2b:ed:b9:e1:b7:32:f3:1e:cc:30:15:56:59:59:f8:e2:
         60:a8:c1:a4:9a:69:9b:7b:c5:dc:02:55:b6:8c:2c:df:44:80:
         3e:25:25:29:65:0b:c2:7a:4a:11:34:f4:79:8f:ff:aa:54:03:
         87:2b:23:df:36:ec:61:51:3a:75:3e:14:c5:f1:bd:6f:8e:4c:
         fe:c7:bd:6e:08:f5:e0:57:a8:42:30:b7:75:62:01:8a:47:d4:
         61:05:ac:04:92:3e:6c:08:40:7f:b0:66:4a:65:2a:cc:45:96:
         6c:09:94:e8:0f:ac:11:8b:e0:38:f9:49:5c:a6:e7:11:d6:dd:
         2d:1f:c6:1f:f9:11:1f:50:f5:4f:e1:e9:49:5e:38:1d:e6:13:
         8e:c8:d2:8e:44:46:2c:b8:11:53:3b:b7:a9:ea:38:eb:f3:95:
         0b:70:66:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:12 2024 by rpki-client on console-fra.rpki-client.org