Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/323430353a616234303a3a2f33322d3438203d3e2030.roa
File:                     323430353a616234303a3a2f33322d3438203d3e2030.roa (raw, json)
Hash identifier:          H5OwhKEERfnYOiVr8sOskgUqOgFBmxg/A1MOQCH/VR4=
Subject key identifier:   47:7D:5A:A9:29:48:2A:9D:58:FC:59:87:0D:A9:E3:02:77:C4:86:3B
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       156A46017BD367ACC55244F6DD2BB61CB58EA510
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323430353a616234303a3a2f33322d3438203d3e2030.roa
Signing time:             Wed 02 Feb 2022 06:19:01 +0000
ROA not before:           Wed 02 Feb 2022 06:14:01 +0000
ROA not after:            Thu 02 Feb 2023 06:19:01 +0000
asID:                     0
IP address blocks:        2405:ab40::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:6a:46:01:7b:d3:67:ac:c5:52:44:f6:dd:2b:b6:1c:b5:8e:a5:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb  2 06:14:01 2022 GMT
            Not After : Feb  2 06:19:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:8a:2f:eb:3f:67:73:49:97:c2:b9:5e:2d:50:
                    08:78:e3:bf:c8:0a:3b:09:d1:d7:84:d1:5f:6e:95:
                    84:20:82:b4:ff:34:e1:96:e0:d6:38:0f:24:97:d2:
                    be:7c:61:3d:c3:67:5f:4e:8e:0d:18:32:9d:41:ba:
                    db:89:2b:ed:0c:dc:cc:a6:b8:25:7c:73:a9:39:0c:
                    b9:48:81:98:6b:06:06:0e:3b:91:cb:99:28:a4:db:
                    df:3b:49:93:8e:11:ed:56:91:8e:47:9a:bb:fc:40:
                    3c:20:3a:44:13:c9:20:da:9f:c8:8d:82:dc:8f:7a:
                    ba:a1:e6:2c:a3:ae:c7:6a:be:43:57:02:f4:ed:64:
                    ed:f5:1c:80:16:09:93:8e:49:cc:28:5f:2a:59:6f:
                    17:dd:aa:8c:a4:69:89:b5:a3:ad:65:da:72:bd:6d:
                    12:fc:27:02:ee:74:61:b1:b7:3d:ad:60:b9:3e:fe:
                    e5:cb:4a:48:7c:7d:e5:a4:98:06:67:b4:df:ac:c5:
                    cb:48:17:cc:fc:cf:e9:64:02:26:ba:ea:07:66:2e:
                    bd:5a:10:35:6c:17:19:e5:3f:8a:11:ce:81:68:cb:
                    e0:3b:5e:90:75:78:63:98:b4:8d:91:7a:24:8b:14:
                    84:fe:ce:7e:6f:ae:e3:8c:3a:24:18:75:72:53:76:
                    b0:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:7D:5A:A9:29:48:2A:9D:58:FC:59:87:0D:A9:E3:02:77:C4:86:3B
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323430353a616234303a3a2f33322d3438203d3e2030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2405:ab40::/32

    Signature Algorithm: sha256WithRSAEncryption
         65:57:7f:8b:cf:67:fd:bd:bb:ed:96:95:d1:e6:f2:bc:e1:78:
         7b:1a:03:b7:6a:ad:f9:c1:d2:fc:dc:a5:02:b9:65:cf:85:ff:
         f3:48:8b:bf:5d:65:e0:cb:a0:3f:92:02:18:62:68:d7:f1:c6:
         9b:0a:f4:74:7e:83:f9:7b:21:1b:55:6c:ce:8c:45:d0:0a:61:
         42:a5:79:8f:cb:84:dc:9a:0a:ad:40:90:cf:b4:ee:6f:13:bd:
         94:aa:ce:56:4c:a5:69:b8:e7:79:d9:b5:00:19:28:61:ee:45:
         bc:31:b2:40:af:76:de:04:cc:fb:ee:c8:c2:0b:a5:45:d4:23:
         09:f4:ef:39:85:58:03:7d:ec:e5:0f:68:0c:ad:ee:37:2b:47:
         2f:33:9c:58:8a:f7:e1:f7:65:de:10:e1:39:fa:44:50:80:fc:
         8f:97:37:6b:70:61:b7:84:5a:60:9d:74:9c:7c:ee:7c:13:8c:
         17:d6:c2:c8:85:8e:9e:90:1f:0d:f7:e8:69:22:9d:51:fe:b6:
         0d:c4:59:d0:9c:5e:ee:41:a0:5f:1a:7f:48:68:09:35:77:5d:
         67:b9:da:2c:d9:17:7d:8b:63:e4:a3:de:f4:fb:08:68:d8:fb:
         32:72:e8:04:e0:d7:71:53:c0:d7:84:ff:88:f6:68:68:0a:8a:
         72:11:60:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:49 2024 by rpki-client on console-ams.rpki-client.org