Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/32372e3131322e37372e302f32342d3234203d3e20313430343832.roa
File:                     32372e3131322e37372e302f32342d3234203d3e20313430343832.roa (raw, json)
Hash identifier:          mNJdyzhp//rDzfNHlb10lMqe4dZzMAmJLLXJMiA/QoA=
Subject key identifier:   92:E5:7A:A6:9B:94:63:8F:96:B6:C5:76:57:DD:E2:3A:0C:1E:2C:58
Certificate issuer:       /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial:       66C550A5CF77EA1F418E43511DF4C918BB1E9B74
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/32372e3131322e37372e302f32342d3234203d3e20313430343832.roa
Signing time:             Tue 08 Feb 2022 02:00:04 +0000
ROA not before:           Tue 08 Feb 2022 01:55:04 +0000
ROA not after:            Wed 08 Feb 2023 02:00:04 +0000
asID:                     140482
IP address blocks:        27.112.77.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:c5:50:a5:cf:77:ea:1f:41:8e:43:51:1d:f4:c9:18:bb:1e:9b:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
        Validity
            Not Before: Feb  8 01:55:04 2022 GMT
            Not After : Feb  8 02:00:04 2023 GMT
        Subject: CN=3082010A0282010100D75D8CECB156D1B6F6D23F8EE3C4716467CE3579DF6DB8F52F987C16899D39D3D95AA830C026011187245715EFD9867C251D6123881007D58336A3D29BA24B7A22B669A22F18758284AF494557DE0F3EBD0EDD1C25E61B32350125E0C49DCE94EC0F36FE19B0A4C4C96F2307A0E2E594F22C8DF63937549725C9E0898D9D914D3CA440F81483A7746E99F7F6A9AB133694B00ABEDAAF3E5A0E3ECD66A5E4435AF944E3E6796CA49893BBD9194B93540EF9550DB92712A8ACB134FCC26BAA10BEFFF15FF49CEAF10FAA5EDFC8ADA3FB2A5B549368FEAA99913485519CCEA54EACB2D391B47138A0819E94216EB34BFFAFAC049774B2D5FE6B9219463FE8740E930203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:5d:8c:ec:b1:56:d1:b6:f6:d2:3f:8e:e3:c4:
                    71:64:67:ce:35:79:df:6d:b8:f5:2f:98:7c:16:89:
                    9d:39:d3:d9:5a:a8:30:c0:26:01:11:87:24:57:15:
                    ef:d9:86:7c:25:1d:61:23:88:10:07:d5:83:36:a3:
                    d2:9b:a2:4b:7a:22:b6:69:a2:2f:18:75:82:84:af:
                    49:45:57:de:0f:3e:bd:0e:dd:1c:25:e6:1b:32:35:
                    01:25:e0:c4:9d:ce:94:ec:0f:36:fe:19:b0:a4:c4:
                    c9:6f:23:07:a0:e2:e5:94:f2:2c:8d:f6:39:37:54:
                    97:25:c9:e0:89:8d:9d:91:4d:3c:a4:40:f8:14:83:
                    a7:74:6e:99:f7:f6:a9:ab:13:36:94:b0:0a:be:da:
                    af:3e:5a:0e:3e:cd:66:a5:e4:43:5a:f9:44:e3:e6:
                    79:6c:a4:98:93:bb:d9:19:4b:93:54:0e:f9:55:0d:
                    b9:27:12:a8:ac:b1:34:fc:c2:6b:aa:10:be:ff:f1:
                    5f:f4:9c:ea:f1:0f:aa:5e:df:c8:ad:a3:fb:2a:5b:
                    54:93:68:fe:aa:99:91:34:85:51:9c:ce:a5:4e:ac:
                    b2:d3:91:b4:71:38:a0:81:9e:94:21:6e:b3:4b:ff:
                    af:ac:04:97:74:b2:d5:fe:6b:92:19:46:3f:e8:74:
                    0e:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:E5:7A:A6:9B:94:63:8F:96:B6:C5:76:57:DD:E2:3A:0C:1E:2C:58
            X509v3 Authority Key Identifier:
                keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/32372e3131322e37372e302f32342d3234203d3e20313430343832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.112.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         78:25:1f:31:c7:4d:58:fe:77:02:1f:7d:86:ab:01:d9:74:1b:
         7f:c0:1e:4f:01:08:9b:12:f1:85:8a:3c:ca:f2:2d:1f:66:02:
         83:3f:c5:d8:8c:1c:91:7f:8d:0c:af:28:fc:a6:16:88:e8:d9:
         f1:84:55:85:6a:36:91:5e:bc:82:b0:4d:6b:14:bf:ba:df:6e:
         03:bc:d5:7e:cf:32:34:f3:13:a6:02:c7:e8:72:12:4b:16:4b:
         ea:cb:0c:b2:a9:04:95:80:7c:5c:99:89:cc:24:eb:d6:fe:ac:
         9d:6e:a7:20:7d:a6:6a:ef:11:ef:63:69:1d:f6:c3:2a:34:cc:
         cb:c7:d3:70:9f:87:13:e7:c4:a8:7c:3b:83:bb:19:5a:0b:3d:
         63:59:b9:bb:38:c4:22:e1:65:37:60:fb:29:07:db:c1:e1:5c:
         ee:f9:ff:1c:62:49:64:88:f4:7a:4f:27:6b:e9:71:a0:78:65:
         7f:00:cb:e2:b4:3c:a7:d8:17:19:3c:57:60:d7:d8:af:45:8b:
         cd:67:e2:c7:8c:ae:5d:44:9d:ee:91:af:7f:f0:97:6c:51:9d:
         d1:01:5d:57:a0:b9:5f:d2:4a:ae:20:d0:26:af:17:1f:19:0f:
         03:de:69:29:90:4f:e5:4a:7d:50:8c:2e:27:42:6c:99:80:68:
         14:b3:c5:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:49 2024 by rpki-client on console-ams.rpki-client.org