Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/3130312e3235352e302e302f31362d3234203d3e203338353131.roa
File:                     3130312e3235352e302e302f31362d3234203d3e203338353131.roa (raw, json)
Hash identifier:          b5k7++GraNepK5St0UvHh+1TRdH+veSB3EGU63UoF6k=
Subject key identifier:   D5:86:62:EF:07:87:6C:83:FC:73:32:AD:FE:B0:27:54:36:B0:41:F3
Certificate issuer:       /CN=9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F
Certificate serial:       79038AA9DB0ECBB19D41E4BFA3E05329EC79A220
Authority key identifier: 91:69:B9:B6:52:6C:D1:49:84:DD:E3:A4:2E:24:DD:8F:E7:AB:C1:7F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/3130312e3235352e302e302f31362d3234203d3e203338353131.roa
Signing time:             Sat 25 Sep 2021 23:00:00 +0000
ROA not before:           Sat 25 Sep 2021 22:55:00 +0000
ROA not after:            Sun 25 Sep 2022 23:00:00 +0000
asID:                     38511
IP address blocks:        101.255.0.0/16 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:03:8a:a9:db:0e:cb:b1:9d:41:e4:bf:a3:e0:53:29:ec:79:a2:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F
        Validity
            Not Before: Sep 25 22:55:00 2021 GMT
            Not After : Sep 25 23:00:00 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:55:90:c7:bd:7f:48:57:1b:a6:15:50:44:6c:
                    33:29:1c:21:53:f7:57:36:d6:b0:63:5e:db:32:cd:
                    f2:ac:44:81:84:31:3f:a5:3d:17:e9:fc:ea:b1:01:
                    eb:23:82:1b:09:04:fc:80:c3:63:f5:24:2b:88:ba:
                    2d:20:b5:28:62:dc:ad:ec:37:61:3a:61:bf:3e:76:
                    68:75:10:64:75:a9:49:57:f8:64:8f:8e:fc:2c:b9:
                    2c:44:48:62:84:0f:2a:f1:44:16:d8:8b:77:ee:8c:
                    ab:0f:d5:b0:6b:63:20:62:37:79:f4:b0:bc:5a:fb:
                    ed:d7:fa:a7:17:99:13:8c:f3:91:1a:86:70:fa:f8:
                    3d:33:6a:d6:b5:41:42:31:b5:1f:e3:9e:0d:d0:20:
                    49:d4:b2:b2:e7:15:d5:c4:31:a2:18:cd:75:7f:2c:
                    47:4f:8d:c9:96:33:f2:9a:ee:3f:4b:61:e1:8d:1f:
                    bd:10:96:d2:45:2b:00:92:30:8e:dd:9d:54:93:63:
                    ae:49:a5:30:d4:01:97:7a:2d:44:d7:43:68:17:d2:
                    d1:34:54:80:06:16:d1:0f:44:c2:a4:e6:a5:a5:c8:
                    e1:01:94:4f:05:82:9c:a4:7e:68:d2:bd:de:35:e3:
                    f9:76:52:10:eb:1d:46:66:78:ae:e9:1d:49:b9:56:
                    fb:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:86:62:EF:07:87:6C:83:FC:73:32:AD:FE:B0:27:54:36:B0:41:F3
            X509v3 Authority Key Identifier:
                keyid:91:69:B9:B6:52:6C:D1:49:84:DD:E3:A4:2E:24:DD:8F:E7:AB:C1:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/3130312e3235352e302e302f31362d3234203d3e203338353131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.255.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         65:80:f3:00:57:0a:10:62:dc:27:dc:ca:54:30:5a:48:15:26:
         a6:36:f7:14:21:79:21:a0:a0:aa:b7:4d:4a:00:22:05:00:12:
         4e:9f:ad:3b:99:22:7c:03:bc:56:67:9d:46:7a:5c:95:c8:8f:
         be:fa:3b:5b:06:db:b6:96:62:c9:03:02:00:7a:d6:70:7a:ee:
         12:7f:93:ca:e9:76:58:63:58:3b:ac:fc:fe:8b:ef:5c:44:fc:
         ef:52:fd:11:75:2e:c5:fd:f5:d5:60:78:7b:ed:05:76:01:1b:
         f8:28:01:5c:91:8f:63:ff:7f:f2:df:33:40:7d:a9:e5:07:02:
         e2:2b:1a:7e:2a:48:b5:13:25:f4:1e:4f:70:a2:bf:56:d4:dd:
         ae:72:ac:55:29:9f:d9:09:16:13:e5:12:92:c5:d6:87:c0:ed:
         72:39:0c:8d:ac:e9:2e:e2:05:ad:77:2c:95:17:e7:73:08:c1:
         a1:d3:42:e7:5e:55:21:68:92:18:ac:31:1f:a5:82:18:7e:a3:
         bf:60:52:d3:a1:54:cb:09:9e:3b:e3:30:33:28:b3:04:17:84:
         48:66:05:4e:e4:70:97:e3:6e:d2:1e:5b:99:21:a0:9c:cf:0b:
         5a:f3:18:83:bb:ff:1e:4d:8b:7c:79:1c:ba:6e:cd:1a:40:93:
         ab:e9:b5:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:48 2023 by rpki-client on console-fra.rpki-client.org