Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/3131352e3132342e39332e302f32342d3234203d3e203538353532.roa
File:                     3131352e3132342e39332e302f32342d3234203d3e203538353532.roa (raw, json)
Hash identifier:          99W4tl4z6u1a+ZZxXjG+J/63qEk3/0KpW3LoRg5cVaI=
Subject key identifier:   A0:0C:3B:8D:2A:68:1D:BD:09:C2:58:72:4C:93:83:69:35:4E:6B:04
Certificate issuer:       /CN=9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F
Certificate serial:       304C0609611102327CFC0B74EC19C7585C7387CA
Authority key identifier: 91:69:B9:B6:52:6C:D1:49:84:DD:E3:A4:2E:24:DD:8F:E7:AB:C1:7F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/3131352e3132342e39332e302f32342d3234203d3e203538353532.roa
Signing time:             Sat 25 Sep 2021 23:00:01 +0000
ROA not before:           Sat 25 Sep 2021 22:55:01 +0000
ROA not after:            Sun 25 Sep 2022 23:00:01 +0000
asID:                     58552
IP address blocks:        115.124.93.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:4c:06:09:61:11:02:32:7c:fc:0b:74:ec:19:c7:58:5c:73:87:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F
        Validity
            Not Before: Sep 25 22:55:01 2021 GMT
            Not After : Sep 25 23:00:01 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:0a:89:7e:80:c5:b7:1f:50:58:00:25:3e:c8:
                    fe:32:50:4b:f3:82:91:b5:aa:02:2c:30:79:1a:06:
                    39:65:0d:62:c1:1f:a1:bc:0c:3f:97:f5:c9:54:70:
                    ee:6c:0b:ad:e6:0a:b9:e1:6b:74:13:52:79:e9:32:
                    25:47:d7:1a:68:45:cc:16:91:61:b5:6e:ec:99:d7:
                    e6:c7:71:93:8e:2a:88:b0:e6:d8:ec:a9:a2:f1:85:
                    c1:52:d7:ba:67:f2:86:2f:72:8d:2c:3e:3d:f3:0d:
                    87:d6:c3:f8:42:a0:44:f6:ff:bf:67:0e:30:e7:6b:
                    0f:8c:49:23:cb:6c:f4:73:e7:66:84:bd:fb:02:82:
                    ce:ee:d6:cc:9b:0c:4f:b3:80:96:09:88:5c:ec:7c:
                    09:8f:7b:2c:64:f0:f1:44:a9:70:ce:6a:d9:50:4f:
                    55:99:34:23:e3:c8:84:45:02:fb:e6:5b:13:36:0d:
                    56:3e:b0:d9:a7:9a:7a:ea:05:f8:0f:ed:fc:30:59:
                    05:3d:d0:36:11:9e:6a:b9:b5:2e:d9:21:f6:c0:39:
                    6a:93:7b:15:c9:4f:81:c1:96:7a:a9:b2:42:7a:4e:
                    aa:0c:0e:f3:33:95:cd:d5:70:63:79:7b:88:00:6a:
                    4e:77:d2:c9:0b:bb:b0:c9:6c:c7:b2:b4:d9:2f:b8:
                    e5:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:0C:3B:8D:2A:68:1D:BD:09:C2:58:72:4C:93:83:69:35:4E:6B:04
            X509v3 Authority Key Identifier:
                keyid:91:69:B9:B6:52:6C:D1:49:84:DD:E3:A4:2E:24:DD:8F:E7:AB:C1:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/3131352e3132342e39332e302f32342d3234203d3e203538353532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.124.93.0/24

    Signature Algorithm: sha256WithRSAEncryption
         79:65:b8:b1:12:aa:33:54:46:77:44:6f:f7:8d:69:77:fe:97:
         38:ad:96:30:3c:db:2a:ef:ac:a8:2f:4a:52:9e:9d:6e:84:35:
         0d:f1:91:4c:9d:1d:3c:02:aa:f7:7a:ac:fc:06:a0:6f:5b:99:
         71:5e:78:d2:f9:3c:67:32:f8:90:d8:18:b2:6d:cf:8a:75:cb:
         d4:da:c5:d6:eb:1e:f4:2b:1f:76:9a:f3:fa:c2:81:b5:a9:9e:
         f3:f0:80:49:c7:6c:80:b1:ef:54:ce:ef:6a:2e:80:6c:5a:a5:
         83:d7:ff:a4:e6:4b:4f:0a:65:3e:a7:d7:10:1c:81:65:de:db:
         c3:10:fc:3a:73:e1:86:a2:e4:22:92:33:b2:6c:4c:65:28:15:
         82:c4:64:90:2b:a4:ec:a0:d3:4f:ab:55:9c:5e:b6:11:01:71:
         cb:96:88:d4:86:a4:09:1f:24:26:54:3b:12:88:e6:3c:b5:4d:
         3b:71:2a:8c:05:2c:dd:3a:d9:ed:57:b9:40:2b:67:9d:bd:45:
         52:40:80:aa:bb:ef:f4:89:71:31:05:02:ac:ce:13:fd:57:9e:
         aa:66:34:0d:c6:b0:42:15:c4:9e:c7:c9:71:12:81:ef:80:b7:
         bc:17:75:a5:a0:94:96:fc:22:85:44:e4:7d:ef:0d:08:e2:9a:
         74:59:44:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:48 2023 by rpki-client on console-fra.rpki-client.org