Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/3131352e3132342e36372e302f32342d3234203d3e203338353131.roa
File:                     3131352e3132342e36372e302f32342d3234203d3e203338353131.roa (raw, json)
Hash identifier:          KnoVR5k7Z5iC0/f22ljelxls3e0PE6mzt4YJOgxjsfg=
Subject key identifier:   09:EA:98:DF:58:3C:01:90:36:6B:D1:62:9D:A2:A4:E6:09:0D:A7:DC
Certificate issuer:       /CN=9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F
Certificate serial:       5869692885E44E571293649F1962DC84061997C2
Authority key identifier: 91:69:B9:B6:52:6C:D1:49:84:DD:E3:A4:2E:24:DD:8F:E7:AB:C1:7F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/3131352e3132342e36372e302f32342d3234203d3e203338353131.roa
Signing time:             Thu 20 May 2021 12:00:31 +0000
ROA not before:           Thu 20 May 2021 11:55:31 +0000
ROA not after:            Fri 20 May 2022 12:00:31 +0000
asID:                     38511
IP address blocks:        115.124.67.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:69:69:28:85:e4:4e:57:12:93:64:9f:19:62:dc:84:06:19:97:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F
        Validity
            Not Before: May 20 11:55:31 2021 GMT
            Not After : May 20 12:00:31 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:9d:dd:e7:6b:db:c7:92:52:58:e5:bc:86:59:
                    79:14:4b:b7:c8:c4:01:cd:a1:d7:00:29:d8:fb:f3:
                    6d:17:ea:3a:68:ed:ba:84:49:2c:28:dd:0c:1f:ac:
                    56:a0:9c:53:b7:cd:68:8f:47:ff:e1:31:cb:6c:5b:
                    59:c3:e0:b1:5b:9c:a4:5a:e5:d7:8d:74:47:c4:12:
                    a4:53:bb:22:fd:04:f9:ed:74:06:09:db:f8:1b:e1:
                    2a:aa:82:e1:1c:06:57:5f:b0:ae:89:65:97:54:d5:
                    26:33:89:3b:3b:e4:fc:af:89:6c:08:1b:8e:83:08:
                    5a:e4:8c:5d:43:03:e9:de:9e:41:ea:12:b3:f6:c3:
                    c5:14:eb:60:51:60:17:0f:57:d5:ab:9c:87:da:42:
                    95:7a:f9:19:60:3c:db:de:75:58:b2:04:2b:a1:cb:
                    b2:40:71:b5:4f:34:30:1c:5c:84:7b:ac:ca:78:1c:
                    1c:a2:5a:93:46:e4:bf:a2:e7:40:b8:05:7d:2d:1b:
                    35:33:8f:25:f6:81:7d:51:84:3f:48:80:ef:bd:03:
                    26:da:28:7d:51:98:b7:30:53:5a:36:8b:65:43:18:
                    75:5c:d5:94:ad:d1:35:33:29:1a:de:99:8b:9a:4c:
                    f5:99:e1:d9:f4:bc:bc:5b:4c:92:39:52:d1:39:61:
                    d0:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:EA:98:DF:58:3C:01:90:36:6B:D1:62:9D:A2:A4:E6:09:0D:A7:DC
            X509v3 Authority Key Identifier:
                keyid:91:69:B9:B6:52:6C:D1:49:84:DD:E3:A4:2E:24:DD:8F:E7:AB:C1:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/3131352e3132342e36372e302f32342d3234203d3e203338353131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.124.67.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:34:26:e8:df:02:5e:d4:31:33:83:46:9e:12:96:4a:3f:b6:
         61:ab:4e:6e:e7:b9:75:c8:72:fa:50:0c:42:e2:20:e7:6d:5f:
         d1:02:5e:12:2d:78:d8:94:f3:75:8b:89:d9:65:1d:af:07:4f:
         04:58:37:10:99:ea:5b:13:be:26:ea:dd:0f:c0:52:22:12:08:
         f8:ab:e8:ae:82:57:c6:8e:5c:7c:4f:ab:7e:28:f4:d6:eb:06:
         f0:85:9a:cc:81:9a:75:0e:57:10:79:40:65:8b:f0:a3:dc:ac:
         fd:0d:e1:e6:d5:9a:82:aa:fa:6e:e3:55:1c:5c:48:57:2d:78:
         07:19:f6:1c:53:76:11:15:3f:63:aa:0a:28:60:90:60:85:76:
         d9:48:27:30:e3:cb:5a:b6:32:21:61:26:8b:4e:2a:3b:65:23:
         04:5f:75:97:09:5e:2a:f3:16:d8:9f:41:5e:2e:ae:5b:47:56:
         75:ac:68:03:4a:d2:07:16:d3:de:2d:c7:e2:c1:9c:f9:8a:f5:
         56:ba:57:11:15:93:e0:ef:57:26:e5:f7:6c:fc:d2:e5:a7:7b:
         e8:77:50:dc:43:f8:ac:94:1a:f7:a3:27:b6:ae:b1:f5:85:b2:
         f1:30:fa:20:0c:9d:6f:83:42:8f:79:55:ea:48:fd:b8:af:51:
         1d:74:b2:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:41 2024 by rpki-client on console-ams.rpki-client.org