Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/3131352e3132342e36382e302f32332d3233203d3e203338353131.roa
File:                     3131352e3132342e36382e302f32332d3233203d3e203338353131.roa (raw, json)
Hash identifier:          qDvwwNnYEDMqap5AUic+7EvquxS53idMzwp0C1nY5O0=
Subject key identifier:   96:45:8D:74:43:9A:81:CA:F1:13:3D:70:32:21:B6:CF:1A:2D:8F:99
Certificate issuer:       /CN=9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F
Certificate serial:       51869A77355AF80B3D279905727930AE020A9C21
Authority key identifier: 91:69:B9:B6:52:6C:D1:49:84:DD:E3:A4:2E:24:DD:8F:E7:AB:C1:7F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/3131352e3132342e36382e302f32332d3233203d3e203338353131.roa
Signing time:             Wed 23 Feb 2022 02:00:01 +0000
ROA not before:           Wed 23 Feb 2022 01:55:01 +0000
ROA not after:            Thu 23 Feb 2023 02:00:01 +0000
asID:                     38511
IP address blocks:        115.124.68.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:86:9a:77:35:5a:f8:0b:3d:27:99:05:72:79:30:ae:02:0a:9c:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F
        Validity
            Not Before: Feb 23 01:55:01 2022 GMT
            Not After : Feb 23 02:00:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e6:e5:11:14:cc:cf:75:50:28:4e:a8:15:d8:
                    ec:e8:8e:7a:bd:8a:e4:d9:72:63:45:e1:b0:97:b7:
                    40:80:ad:4b:09:20:f2:06:ed:58:13:38:0a:79:d1:
                    31:48:43:46:3b:4c:e3:c0:2a:db:13:9b:c7:7b:d3:
                    7f:ad:57:9d:c5:1f:83:fb:45:42:ea:09:20:b6:f2:
                    b6:b0:45:f1:92:20:fe:12:a6:bf:67:28:81:1d:0c:
                    16:20:e6:1e:73:15:4f:2b:17:69:3c:34:a5:22:3d:
                    61:0a:60:26:c7:6e:a5:37:64:4e:3b:b7:d7:ca:72:
                    ed:9f:b3:a5:13:5d:00:fd:56:fc:15:bb:2c:47:16:
                    3d:b6:9a:56:b7:ce:b1:b9:f5:81:c2:68:59:59:7d:
                    ae:1b:aa:ce:b7:a8:cd:d5:d6:96:a9:0f:39:6e:c9:
                    7d:40:5b:6e:41:15:ce:88:0c:8b:ef:db:56:db:6a:
                    0c:a6:10:1b:e4:b6:73:e5:af:b3:03:88:a0:ba:a3:
                    e4:98:97:dc:4a:16:24:b8:c1:17:dc:4f:5f:16:3e:
                    92:21:f3:eb:2a:ab:d7:12:4a:be:4a:7a:81:7b:35:
                    4b:60:4d:a0:8f:5d:15:f0:d6:f4:ad:92:a0:1f:26:
                    6a:00:eb:72:11:0a:48:a1:76:44:29:d6:ed:8f:b9:
                    ca:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:45:8D:74:43:9A:81:CA:F1:13:3D:70:32:21:B6:CF:1A:2D:8F:99
            X509v3 Authority Key Identifier:
                keyid:91:69:B9:B6:52:6C:D1:49:84:DD:E3:A4:2E:24:DD:8F:E7:AB:C1:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/3131352e3132342e36382e302f32332d3233203d3e203338353131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.124.68.0/23

    Signature Algorithm: sha256WithRSAEncryption
         67:63:03:56:91:a2:89:aa:9b:f3:d7:ea:47:df:49:61:d4:a8:
         0b:16:66:f8:d0:eb:37:26:7b:d9:83:06:70:3c:2f:34:0e:54:
         49:dc:19:98:70:f9:99:5a:38:71:ab:d6:9b:28:9d:9f:cb:e4:
         ce:fe:83:14:97:57:51:62:b0:ae:7e:e1:5b:03:76:bf:14:98:
         87:77:44:ad:60:59:b3:da:00:c2:8c:61:be:ec:af:1c:7d:f3:
         65:56:08:5d:9b:01:42:a0:8a:a7:aa:95:3a:f4:f8:f2:7c:29:
         49:4b:fc:ca:2b:35:3d:8e:57:7e:bc:6b:2f:c8:90:83:09:41:
         69:96:e1:e5:5a:b3:f7:19:aa:1c:66:4d:dc:f0:e4:fe:14:1b:
         29:52:bb:79:30:5d:f7:bc:09:b2:43:64:f9:76:70:7a:eb:f0:
         5e:96:5a:c4:6b:e2:87:c9:5f:fc:5e:40:1e:43:9f:ea:1e:11:
         a6:f5:c1:2a:04:f6:91:6c:5b:3a:f2:5d:bc:48:7e:5e:90:91:
         5a:1f:65:0e:b5:22:44:7e:fb:bd:36:6d:ec:24:ef:cf:1d:4c:
         44:b7:09:1f:0e:ac:60:35:0e:de:74:54:22:ab:da:07:b0:b2:
         6c:92:23:13:7f:fe:af:f6:71:c4:51:fa:70:80:42:f6:56:a5:
         ff:7a:28:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:41 2024 by rpki-client on console-ams.rpki-client.org