Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/3131352e3132342e36342e302f32322d3232203d3e203338353131.roa
File:                     3131352e3132342e36342e302f32322d3232203d3e203338353131.roa (raw, json)
Hash identifier:          9x2gNvG60af4HmnjiTKHNE8KZlfRqk6Kz36SRVTtFRc=
Subject key identifier:   B6:A3:C8:C8:FF:47:18:4B:C0:5A:AE:7E:49:45:C9:A0:8C:17:71:6C
Certificate issuer:       /CN=9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F
Certificate serial:       6FA8EFB8511463C61DA7585F3FB68A5232116569
Authority key identifier: 91:69:B9:B6:52:6C:D1:49:84:DD:E3:A4:2E:24:DD:8F:E7:AB:C1:7F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/3131352e3132342e36342e302f32322d3232203d3e203338353131.roa
Signing time:             Wed 23 Feb 2022 02:00:01 +0000
ROA not before:           Wed 23 Feb 2022 01:55:01 +0000
ROA not after:            Thu 23 Feb 2023 02:00:01 +0000
asID:                     38511
IP address blocks:        115.124.64.0/22 maxlen: 22

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:a8:ef:b8:51:14:63:c6:1d:a7:58:5f:3f:b6:8a:52:32:11:65:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F
        Validity
            Not Before: Feb 23 01:55:01 2022 GMT
            Not After : Feb 23 02:00:01 2023 GMT
        Subject: CN=3082010A0282010100A407871A0E275F39AC8C8B4F7C38A0358AECA9BF85372D348AC1AFEC4112A66F9344F2EC6AA785592C2BC6714FBA699FB4CB642E2693A1FD506D2A4D7C5D198C56AEF18D21357F0667989403203D2495FC8B2D636A3C39D0DE3BCD82BCE5A84B2DB54F0CECF8EB85BBD930A428618CEF65B0E803E34C6B5AB9ABD05F66463C164785D0165F904ABF3190ADF4C3D813DA098EF6A914012D041BC73D005B57599BD6D63C0A6007760CE19979F0A1CCF88EA83C0CB6ED9CAA0F305D714DC4FFCF35A7CF918534729075CFCE9014E0AB96EA7E87459C9B04A602E57EC967670AAA56DB6B807F339D08E642FE0C10DEDC8B8246A15A604C01C831E3D9F634EF29C2490203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:07:87:1a:0e:27:5f:39:ac:8c:8b:4f:7c:38:
                    a0:35:8a:ec:a9:bf:85:37:2d:34:8a:c1:af:ec:41:
                    12:a6:6f:93:44:f2:ec:6a:a7:85:59:2c:2b:c6:71:
                    4f:ba:69:9f:b4:cb:64:2e:26:93:a1:fd:50:6d:2a:
                    4d:7c:5d:19:8c:56:ae:f1:8d:21:35:7f:06:67:98:
                    94:03:20:3d:24:95:fc:8b:2d:63:6a:3c:39:d0:de:
                    3b:cd:82:bc:e5:a8:4b:2d:b5:4f:0c:ec:f8:eb:85:
                    bb:d9:30:a4:28:61:8c:ef:65:b0:e8:03:e3:4c:6b:
                    5a:b9:ab:d0:5f:66:46:3c:16:47:85:d0:16:5f:90:
                    4a:bf:31:90:ad:f4:c3:d8:13:da:09:8e:f6:a9:14:
                    01:2d:04:1b:c7:3d:00:5b:57:59:9b:d6:d6:3c:0a:
                    60:07:76:0c:e1:99:79:f0:a1:cc:f8:8e:a8:3c:0c:
                    b6:ed:9c:aa:0f:30:5d:71:4d:c4:ff:cf:35:a7:cf:
                    91:85:34:72:90:75:cf:ce:90:14:e0:ab:96:ea:7e:
                    87:45:9c:9b:04:a6:02:e5:7e:c9:67:67:0a:aa:56:
                    db:6b:80:7f:33:9d:08:e6:42:fe:0c:10:de:dc:8b:
                    82:46:a1:5a:60:4c:01:c8:31:e3:d9:f6:34:ef:29:
                    c2:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:A3:C8:C8:FF:47:18:4B:C0:5A:AE:7E:49:45:C9:A0:8C:17:71:6C
            X509v3 Authority Key Identifier:
                keyid:91:69:B9:B6:52:6C:D1:49:84:DD:E3:A4:2E:24:DD:8F:E7:AB:C1:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/3131352e3132342e36342e302f32322d3232203d3e203338353131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.124.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         49:7a:41:cf:dc:dc:0e:97:e7:9d:83:83:14:f8:50:08:ad:06:
         37:46:73:6d:b5:40:75:56:a8:bb:e6:f7:52:a9:33:0e:d0:9b:
         95:00:76:02:bf:cd:05:12:57:62:8a:54:fd:cc:5b:cb:43:3c:
         5a:e2:37:77:1c:74:4b:b6:be:98:4b:5b:05:4e:95:d9:80:f8:
         b9:75:5a:ee:b8:b4:30:a3:53:6d:22:ef:1a:47:6f:4e:0c:4f:
         fd:12:8d:8c:29:f8:cc:17:c3:d8:bd:21:54:56:2b:2b:84:53:
         d1:1b:72:8f:43:25:0d:25:05:2c:d6:97:45:2e:58:20:ef:c6:
         09:46:80:0b:a4:bf:ba:1c:58:a3:a3:be:0a:99:71:16:e1:ac:
         0b:c2:98:43:69:a2:ac:5e:b6:79:83:cc:3f:a1:47:e1:be:0b:
         2a:98:fc:c1:cb:43:75:2b:ae:97:62:46:fe:e9:7d:9e:49:ae:
         f4:29:a8:0d:43:95:ee:bd:d3:b0:0a:70:46:83:1e:0e:d3:a1:
         85:53:5d:39:a7:09:d2:e2:e1:69:e0:bf:f8:8f:1e:2a:87:8b:
         4a:5b:64:4e:4d:64:a8:6d:e1:10:99:18:cd:82:ad:d2:f7:15:
         e2:c4:3c:d3:02:d2:30:d2:08:5d:fe:f9:4a:63:cd:40:06:d1:
         bf:51:ed:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:08 2024 by rpki-client on console-fra.rpki-client.org