Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/323430373a393434303a3a2f33322d3438203d3e20313431363236.roa
File:                     323430373a393434303a3a2f33322d3438203d3e20313431363236.roa (raw, json)
Hash identifier:          XjQaCMALSUBIPwVF4bN/eV8nZ5In/XjFcl0zGDeI+7k=
Subject key identifier:   02:2D:64:41:EE:F2:7C:C1:21:A1:EA:3B:3E:54:CC:49:D1:36:FE:88
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       788F18157239DA18B30A3666D439074B6A8B4629
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323430373a393434303a3a2f33322d3438203d3e20313431363236.roa
Signing time:             Thu 08 Jul 2021 08:14:14 +0000
ROA not before:           Thu 08 Jul 2021 08:09:14 +0000
ROA not after:            Fri 08 Jul 2022 08:14:14 +0000
asID:                     141626
IP address blocks:        2407:9440::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:8f:18:15:72:39:da:18:b3:0a:36:66:d4:39:07:4b:6a:8b:46:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Jul  8 08:09:14 2021 GMT
            Not After : Jul  8 08:14:14 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:56:3c:2b:91:d2:fa:b9:58:36:e9:e0:eb:2a:
                    54:22:0e:fc:05:3c:8f:82:de:cf:1d:6f:d2:4a:43:
                    fc:23:9f:3c:8c:54:49:1b:7c:e5:5d:87:f7:9a:ee:
                    47:13:a4:46:e6:94:ad:3c:bb:bf:af:84:04:95:ef:
                    84:e3:7b:04:84:b1:62:28:c8:81:72:72:f1:e6:c6:
                    3f:0b:0b:e1:f0:13:04:73:6c:eb:46:f8:9c:4f:13:
                    0e:d0:8d:cc:f0:7d:fc:df:d3:52:80:a7:9f:d4:40:
                    57:80:bf:69:96:37:f1:51:dc:c8:6d:0e:16:53:b3:
                    48:b3:26:f6:18:9e:16:da:0b:f1:68:d2:de:4c:d1:
                    4b:62:13:e9:8c:94:61:a2:93:2c:1f:67:77:e9:2c:
                    7e:4b:a6:5a:c3:fd:c5:fc:80:89:6e:04:77:17:30:
                    96:09:72:ec:2c:6e:da:fd:5d:46:85:17:b9:cd:ec:
                    84:d2:7f:69:90:5b:8c:f7:41:b7:76:98:39:ba:2c:
                    bb:18:21:82:74:61:b6:59:c1:16:1a:8f:dd:32:d6:
                    d3:43:10:76:f3:2f:bd:5a:a6:26:8e:f9:59:53:5e:
                    dc:72:8a:43:81:8e:27:b7:6c:db:12:f1:c7:81:8d:
                    08:cc:ef:d6:77:1d:3f:77:1e:73:40:ae:6b:e1:a3:
                    b5:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                02:2D:64:41:EE:F2:7C:C1:21:A1:EA:3B:3E:54:CC:49:D1:36:FE:88
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323430373a393434303a3a2f33322d3438203d3e20313431363236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:9440::/32

    Signature Algorithm: sha256WithRSAEncryption
         57:9a:82:26:3f:ab:bb:f8:cc:87:8f:6a:e4:1d:e4:03:2a:bf:
         65:3d:16:62:06:66:15:90:f5:00:22:76:2c:9e:ba:c5:6d:35:
         66:77:bb:4d:0f:02:50:69:8c:68:08:6d:37:ac:68:59:90:01:
         f2:59:3d:ba:24:19:39:28:a0:ff:b6:a9:91:74:60:51:ed:98:
         3e:a5:78:45:18:e9:fc:15:3b:35:28:f8:09:cf:1f:7c:c1:ec:
         90:ef:19:1d:65:29:78:17:b1:9c:b8:6b:1c:54:c4:1f:6e:03:
         99:3f:4c:d2:4b:61:b2:3b:78:f3:77:cd:1c:66:98:56:ca:a2:
         e6:26:e2:09:0a:d9:03:bd:d4:f8:fd:d7:da:f7:9e:7f:ff:9d:
         3f:fe:18:c6:2b:4e:ce:79:62:81:f7:ff:84:6c:ad:1c:29:08:
         f3:ed:54:00:99:97:f6:16:29:5c:5b:57:fe:2b:67:8f:dc:02:
         fc:bd:05:4e:4e:f7:0a:5d:e7:cd:07:38:cf:13:da:66:3d:21:
         cc:87:94:38:e6:5e:1d:c1:0b:c4:10:c4:69:a0:1b:21:02:99:
         25:94:73:87:24:3f:f3:35:9a:77:93:87:a2:b3:b8:0a:a5:70:
         f6:f3:b2:29:02:b9:2c:63:39:84:56:d9:91:ec:60:99:f6:c6:
         cc:bd:76:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:12 2024 by rpki-client on console-fra.rpki-client.org