Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/3131352e3132342e36342e302f32342d3234203d3e203338353131.roa
File:                     3131352e3132342e36342e302f32342d3234203d3e203338353131.roa (raw, json)
Hash identifier:          Wqu0YubXP7w0CDWD/hj54fnQiT2zKapvW6o4U2J8RGU=
Subject key identifier:   05:93:50:C9:0F:F4:EA:8A:2F:35:86:49:44:EF:E9:42:E6:69:C1:7F
Certificate issuer:       /CN=9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F
Certificate serial:       4CE5732F64337A11613D16896DE101A28F85C355
Authority key identifier: 91:69:B9:B6:52:6C:D1:49:84:DD:E3:A4:2E:24:DD:8F:E7:AB:C1:7F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/3131352e3132342e36342e302f32342d3234203d3e203338353131.roa
Signing time:             Thu 20 May 2021 11:59:10 +0000
ROA not before:           Thu 20 May 2021 11:54:10 +0000
ROA not after:            Fri 20 May 2022 11:59:10 +0000
asID:                     38511
IP address blocks:        115.124.64.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:e5:73:2f:64:33:7a:11:61:3d:16:89:6d:e1:01:a2:8f:85:c3:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F
        Validity
            Not Before: May 20 11:54:10 2021 GMT
            Not After : May 20 11:59:10 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:1b:2e:dd:d3:9b:bf:33:20:a0:79:ad:2b:5a:
                    7b:c4:cd:86:16:7c:a7:82:a8:41:90:41:05:41:c4:
                    14:7a:17:dc:4f:15:e0:06:c9:41:b0:ff:b9:1a:38:
                    dd:f1:0a:6f:ca:3a:99:20:41:7e:d1:c7:11:c7:e9:
                    ab:b4:78:7f:c6:9a:89:6c:19:cc:f2:1f:91:b9:47:
                    47:f0:2a:23:2c:ad:33:16:77:e6:ad:58:35:59:15:
                    1d:b3:b1:05:39:97:7c:2f:5e:44:03:45:a9:07:8b:
                    0b:1f:e3:57:59:ac:66:47:2b:60:8a:fb:a7:35:f8:
                    66:d5:80:df:fd:a4:41:c8:f4:fb:77:9f:8e:9e:b5:
                    a6:0b:ab:7c:99:87:6a:68:37:09:d0:a0:65:33:83:
                    3b:b2:11:0d:0a:f8:b4:f4:7e:a6:3f:c6:dd:a0:47:
                    09:a4:f0:b3:86:22:e4:a6:90:cd:b1:bf:bf:bd:4f:
                    2d:e0:db:ff:7c:f6:ef:22:10:98:09:ec:cc:ad:8f:
                    79:0a:ad:58:10:25:46:78:81:22:05:0b:2b:77:a0:
                    6a:73:cd:11:53:e3:20:9e:23:a5:47:77:38:e2:cf:
                    82:84:7a:ef:04:2d:8c:8e:b7:e6:cc:bb:8c:19:29:
                    89:1d:59:9c:cb:53:42:d1:02:e2:e5:5a:7e:2e:91:
                    00:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:93:50:C9:0F:F4:EA:8A:2F:35:86:49:44:EF:E9:42:E6:69:C1:7F
            X509v3 Authority Key Identifier:
                keyid:91:69:B9:B6:52:6C:D1:49:84:DD:E3:A4:2E:24:DD:8F:E7:AB:C1:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/3131352e3132342e36342e302f32342d3234203d3e203338353131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.124.64.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:4b:3d:e2:e4:34:6b:ce:63:b5:fd:83:db:78:f6:9d:01:78:
         0b:77:04:b9:d6:f9:33:d8:59:18:ed:69:92:42:86:7c:9c:71:
         94:c3:c4:36:48:15:29:d4:e6:5a:f2:b9:9a:1d:88:ee:4a:72:
         be:9e:ae:79:49:17:3a:ff:fd:7f:5d:56:8c:16:31:59:90:0a:
         25:ce:b9:ac:07:08:ff:0d:fd:6c:14:32:54:90:df:c7:99:fd:
         ab:14:2b:ba:67:5e:ce:b6:6b:4f:16:85:44:29:28:ac:05:3b:
         f1:f2:3c:72:0a:f4:be:a4:cb:a1:48:94:ee:9f:aa:cc:b9:49:
         f6:c5:1c:af:16:1d:b2:cd:f7:c1:7b:0a:6e:eb:b8:1b:b0:01:
         37:fb:48:27:32:5e:db:51:81:b7:30:93:9e:cd:c0:b8:41:aa:
         7b:3e:e3:ae:1f:a7:e5:97:de:bb:37:da:7a:07:18:a3:73:40:
         c3:d8:0d:46:f1:92:2f:70:bc:d8:eb:27:07:91:b7:a0:08:c5:
         9e:5d:dc:4c:b5:b3:12:bd:cc:18:57:d9:cf:d1:07:85:e8:36:
         84:df:66:c6:8d:80:2a:01:85:18:9f:83:94:c7:d5:3f:98:7d:
         c4:90:96:19:9f:8c:f3:70:e1:fc:46:b7:23:26:c4:5c:2f:20:
         0b:ea:31:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:08 2024 by rpki-client on console-fra.rpki-client.org