Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/323430373a3763303a393432323a3a2f34382d3438203d3e2039343232.roa
File:                     323430373a3763303a393432323a3a2f34382d3438203d3e2039343232.roa (raw, json)
Hash identifier:          cMO/JEVvrv3NsRQc8KXLb4UcAislx+efneMDWXDLQ/A=
Subject key identifier:   D7:B9:C4:CC:E4:88:25:D2:C6:F3:48:7A:98:97:76:BA:2A:C5:14:A6
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       1C9D2D6B73EDACEACCA364F1C8B803C059E39244
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323430373a3763303a393432323a3a2f34382d3438203d3e2039343232.roa
Signing time:             Sat 05 Feb 2022 09:00:01 +0000
ROA not before:           Sat 05 Feb 2022 08:55:01 +0000
ROA not after:            Sun 05 Feb 2023 09:00:01 +0000
asID:                     9422
IP address blocks:        2407:7c0:9422::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:9d:2d:6b:73:ed:ac:ea:cc:a3:64:f1:c8:b8:03:c0:59:e3:92:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb  5 08:55:01 2022 GMT
            Not After : Feb  5 09:00:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:61:6b:72:06:5f:4f:46:51:18:15:55:0d:b1:
                    9e:b0:d5:5f:81:e0:79:4d:7e:78:4d:76:0e:9a:78:
                    1b:76:6f:9c:6e:53:ae:57:e2:56:ba:36:3b:85:26:
                    f9:44:9b:11:a2:53:a8:d5:16:db:c6:5d:ab:5f:72:
                    90:99:e2:c1:d8:53:ed:e9:03:2a:74:da:11:23:5f:
                    7e:b1:32:b7:bf:76:c5:6d:e2:bc:bc:7d:54:db:99:
                    69:e4:9c:f0:65:4e:bb:7f:38:79:9d:d2:70:25:27:
                    5e:6b:ed:a3:2f:08:b1:58:cf:03:8f:11:2d:1f:92:
                    2e:19:b1:b7:0c:b1:71:1d:37:77:db:c6:b7:ae:a8:
                    86:f7:14:c6:33:a0:b7:93:89:ba:42:ed:e0:92:de:
                    53:14:67:0b:32:5a:5b:3a:0a:95:eb:8f:26:21:f9:
                    a0:3c:85:b1:05:f5:04:c4:79:ad:27:47:61:e6:35:
                    95:04:6f:59:94:fa:82:93:3a:fa:f6:59:84:35:c9:
                    d6:f3:8e:53:ca:6d:fd:fe:d3:64:b5:37:a1:65:cb:
                    10:2a:0d:0c:cd:58:d2:9f:35:ce:06:04:3c:15:2d:
                    cc:c9:45:d0:1d:f3:fe:ee:09:c1:69:c2:e8:21:7e:
                    ba:46:44:d2:9f:b8:fe:27:fe:09:4b:cb:21:3f:a4:
                    8e:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:B9:C4:CC:E4:88:25:D2:C6:F3:48:7A:98:97:76:BA:2A:C5:14:A6
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323430373a3763303a393432323a3a2f34382d3438203d3e2039343232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:7c0:9422::/48

    Signature Algorithm: sha256WithRSAEncryption
         5d:c9:ea:23:ad:72:7a:0a:12:67:6c:e9:1a:f9:b3:43:0a:4f:
         8b:3a:59:c8:94:e7:27:64:9a:cd:70:8a:1b:d9:59:b5:15:22:
         44:b3:5e:5a:c1:f5:3e:cd:67:fd:16:d9:98:3a:b0:94:09:e2:
         85:79:e5:2c:c9:cd:38:85:80:c1:71:d7:e6:0b:a8:70:e5:7d:
         53:a2:e9:17:b0:72:0c:d0:e0:a3:99:eb:e7:ab:64:d8:f3:f3:
         70:57:0f:c8:be:59:57:ac:5e:56:fe:4f:f9:f8:2c:af:66:46:
         21:b0:78:98:42:7c:47:4a:3b:cb:a4:60:1a:21:be:73:fd:a9:
         87:8b:23:a5:cd:c9:56:b5:9b:1e:3c:12:a7:1d:d4:c4:6b:0a:
         93:77:9f:e0:d8:96:74:d5:46:1a:08:4f:fc:85:8c:9e:45:5f:
         13:2d:20:f5:5e:b3:79:5b:05:9a:84:71:51:e2:ca:8d:d0:0d:
         1a:db:3a:70:e7:6e:3d:b8:73:91:cb:03:55:21:77:03:33:05:
         34:98:51:2c:95:64:f1:de:d1:71:20:61:ba:e8:06:ff:b8:53:
         f2:e7:1e:d4:89:db:e6:a4:b5:70:f7:d6:63:e4:e4:d4:2e:f6:
         a1:34:cc:c5:a8:f2:60:6b:89:d6:bf:1f:c8:96:3f:4b:f0:ae:
         c4:7a:e0:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:12 2024 by rpki-client on console-fra.rpki-client.org