Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/323430373a656434303a3a2f33322d3438203d3e20313437303739.roa
File:                     323430373a656434303a3a2f33322d3438203d3e20313437303739.roa (raw, json)
Hash identifier:          PIPis69Hb8H7lgLSZwl9IeDJhROC4g9ONdQK/CL/r1g=
Subject key identifier:   88:F5:AB:BF:37:AA:83:19:9E:A0:B8:70:13:EB:E4:CE:A9:E3:27:A6
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       6D4DD08DB1668ECE932B9BA1AC04BEE26EC35F29
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323430373a656434303a3a2f33322d3438203d3e20313437303739.roa
Signing time:             Fri 01 Oct 2021 08:09:02 +0000
ROA not before:           Fri 01 Oct 2021 08:04:02 +0000
ROA not after:            Sat 01 Oct 2022 08:09:02 +0000
asID:                     147079
IP address blocks:        2407:ed40::/32 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:4d:d0:8d:b1:66:8e:ce:93:2b:9b:a1:ac:04:be:e2:6e:c3:5f:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Oct  1 08:04:02 2021 GMT
            Not After : Oct  1 08:09:02 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:48:4c:68:6a:19:fd:39:d7:4c:34:66:49:4b:
                    16:4f:98:59:cc:10:b5:a2:7f:db:84:da:8c:20:a6:
                    ea:1e:5c:45:d9:a9:bd:3f:d5:29:03:10:1e:3f:1c:
                    4b:be:6d:ff:46:4a:ee:93:4f:ac:f8:52:3d:a3:63:
                    1f:f7:11:11:67:2e:cd:36:d3:a3:90:81:72:6f:12:
                    9d:a1:e1:5e:3c:23:fd:e9:72:07:3b:ba:82:e1:5d:
                    6f:93:8a:89:fc:c9:bb:fe:24:5c:f6:db:5c:ba:08:
                    1c:23:1b:d9:fc:5e:b9:2f:84:46:43:1a:2f:98:c2:
                    48:2a:6a:20:d9:92:53:f2:53:26:65:ee:bd:4a:6c:
                    a7:cd:7e:ff:e0:26:22:e4:2b:8a:f5:97:f3:da:22:
                    6f:f3:d1:ff:c7:d6:b5:bd:0a:f0:e8:bf:be:ef:b6:
                    66:cc:5d:a5:86:12:3e:36:52:ff:88:f7:58:cd:23:
                    af:2b:d5:99:c7:f7:8f:5f:cc:e2:f7:41:bb:7e:38:
                    f1:7f:2f:3b:7d:63:0f:0b:ea:33:35:36:0f:af:67:
                    e2:86:61:5c:8b:7c:d0:4e:36:3d:9e:95:84:c4:bb:
                    4a:1e:e5:fa:df:c3:fe:f5:c4:f3:ef:dc:d1:35:14:
                    85:5f:da:3d:82:00:aa:f3:79:82:4b:5f:75:f5:2d:
                    40:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:F5:AB:BF:37:AA:83:19:9E:A0:B8:70:13:EB:E4:CE:A9:E3:27:A6
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323430373a656434303a3a2f33322d3438203d3e20313437303739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2407:ed40::/32

    Signature Algorithm: sha256WithRSAEncryption
         1c:5b:9e:ea:1b:cc:6b:b3:0b:23:fb:b3:f7:2c:89:9d:a5:55:
         48:bf:61:61:1f:1f:ae:53:34:cb:55:15:40:ef:0b:f6:76:54:
         07:9a:c4:c1:3b:18:7a:37:80:c7:1c:4a:1b:3d:8a:30:c8:c9:
         b3:15:42:0e:02:f4:05:9c:4c:a9:55:7b:64:6b:ad:00:5c:e8:
         49:4c:4c:19:ac:02:bd:b9:ed:90:a1:66:b7:96:d0:33:19:6c:
         23:1d:b2:9c:91:6b:cd:f4:61:4c:a4:97:4d:c5:49:8a:06:2b:
         fb:9a:3b:71:b1:92:d4:f9:b3:99:fb:a4:d9:c3:da:de:3b:ab:
         79:9a:cf:06:88:b3:5c:9a:28:a5:96:60:db:18:ca:f4:e4:ad:
         03:4b:70:5e:e4:28:f6:76:59:0d:2f:4b:c9:de:93:58:36:2f:
         e4:e1:f8:9b:63:d6:c5:25:d0:41:2b:8d:37:61:d8:74:8e:2b:
         13:ac:da:31:9e:af:e3:4e:7a:dc:e8:1c:16:41:0e:8d:26:d9:
         2a:8e:7a:36:a8:f1:a3:ba:8b:d9:9e:27:6a:52:e8:9e:8b:86:
         9e:f2:a8:ba:9d:76:a6:7a:2f:a1:ef:02:bf:7b:16:79:a1:c3:
         6e:c8:92:ef:8d:9e:d0:80:51:8d:d6:f3:b2:2a:7d:16:13:ec:
         dd:ca:8d:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:12 2024 by rpki-client on console-fra.rpki-client.org