Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/3131352e3132342e36362e302f32342d3234203d3e203338353131.roa
File:                     3131352e3132342e36362e302f32342d3234203d3e203338353131.roa (raw, json)
Hash identifier:          UX5I3CjR6kMF45kRZP8fR1eFhatd1TARvDLdVI5UW30=
Subject key identifier:   CB:29:D7:03:74:05:EB:95:A1:10:4B:12:D7:07:55:62:92:92:3F:49
Certificate issuer:       /CN=9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F
Certificate serial:       06BC16F5A978071F332EEF8B9C5C61AEA04BFEE3
Authority key identifier: 91:69:B9:B6:52:6C:D1:49:84:DD:E3:A4:2E:24:DD:8F:E7:AB:C1:7F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/3131352e3132342e36362e302f32342d3234203d3e203338353131.roa
Signing time:             Thu 20 May 2021 12:00:12 +0000
ROA not before:           Thu 20 May 2021 11:55:12 +0000
ROA not after:            Fri 20 May 2022 12:00:12 +0000
asID:                     38511
IP address blocks:        115.124.66.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:bc:16:f5:a9:78:07:1f:33:2e:ef:8b:9c:5c:61:ae:a0:4b:fe:e3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F
        Validity
            Not Before: May 20 11:55:12 2021 GMT
            Not After : May 20 12:00:12 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:cd:da:db:1d:8f:12:a3:2c:5c:f4:b2:25:12:
                    61:46:ed:e3:14:81:7e:ae:64:d4:dd:65:40:ff:34:
                    bf:73:6e:ef:c2:ad:31:c4:f8:3e:b3:8e:a3:8f:31:
                    c8:1d:c4:15:02:7c:4a:90:07:3d:03:7f:5d:c5:b0:
                    27:0c:71:f8:65:cd:54:00:88:bf:a3:cf:0e:49:11:
                    9c:b7:f2:bb:e1:86:77:6c:42:1c:60:f3:e6:d6:3c:
                    c2:80:66:a5:83:11:70:8b:e1:a1:27:28:81:49:2d:
                    a7:45:3d:7c:1a:3f:bc:8a:27:38:b8:f5:80:1e:44:
                    3f:94:ec:b5:14:7e:48:0e:90:7a:9c:fb:fb:04:13:
                    e9:56:af:64:98:05:70:16:58:2a:cd:46:86:e2:6f:
                    b9:9a:47:e8:3b:e8:e1:7e:26:5b:b3:c1:61:fe:f5:
                    f7:e8:35:b3:33:9b:ed:7a:4c:f0:06:60:da:62:61:
                    c3:d5:0b:27:90:f3:79:bf:27:c3:49:98:a0:09:b5:
                    5d:da:80:51:1b:ba:58:5a:b0:5f:b1:24:29:66:94:
                    ae:39:bc:a3:23:f3:be:22:81:76:dc:26:3b:86:24:
                    21:f4:f8:20:15:f3:ac:56:64:cb:12:fa:ad:e8:5a:
                    bc:57:a7:9e:3d:4b:1a:f7:ac:e9:d9:f4:43:ce:00:
                    98:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:29:D7:03:74:05:EB:95:A1:10:4B:12:D7:07:55:62:92:92:3F:49
            X509v3 Authority Key Identifier:
                keyid:91:69:B9:B6:52:6C:D1:49:84:DD:E3:A4:2E:24:DD:8F:E7:AB:C1:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/3131352e3132342e36362e302f32342d3234203d3e203338353131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.124.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:b2:a5:8c:d4:fe:88:3f:f0:c6:ee:05:74:5d:bb:fa:ea:8a:
         89:b1:a0:a5:c6:dc:a2:88:df:98:8a:eb:e6:44:f2:9a:06:96:
         44:90:48:e2:ab:a4:ab:5f:e1:40:a2:2f:8b:56:95:63:72:5e:
         ef:1f:81:ba:d7:88:df:3e:c8:da:bf:9e:b2:09:7a:7f:e8:db:
         df:dd:e1:5e:f8:38:ed:31:a1:18:2c:94:2e:fb:78:1b:48:f2:
         2a:be:4d:af:0f:45:90:fb:6f:2d:45:1d:b7:90:bb:92:b5:54:
         e1:bc:b4:af:d7:b4:da:82:b0:3b:27:6d:b1:18:5a:71:1e:2d:
         8f:f3:4a:6e:e1:ba:6d:f4:24:9d:0c:fe:e3:02:77:a3:ee:58:
         1e:ef:0b:e5:5d:78:30:1f:ff:75:f2:5c:bc:8c:3e:fe:a6:3e:
         b0:08:d8:6c:89:90:e7:ec:40:6c:86:62:9c:01:c2:2a:cd:5b:
         0c:ef:68:78:24:db:91:8a:93:85:5d:41:1c:3b:6b:11:bd:a9:
         e8:79:47:dc:61:1d:f0:4f:31:cb:a2:c8:69:12:a7:b0:89:c7:
         c1:33:a5:32:3f:e6:f5:b4:70:d7:aa:7b:6a:ab:bf:94:10:97:
         35:d4:51:72:23:5b:ae:89:39:54:49:9c:08:e9:12:df:a1:75:
         2c:de:5e:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:41 2024 by rpki-client on console-ams.rpki-client.org