Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/3131352e3132342e36392e302f32342d3234203d3e203338353131.roa
File:                     3131352e3132342e36392e302f32342d3234203d3e203338353131.roa (raw, json)
Hash identifier:          FQ266thWutt/FWU8WXlD3jJJDsyQ/sViGsFG6VR09S0=
Subject key identifier:   19:75:63:D0:4D:12:35:57:C7:4B:AB:68:EC:4E:2A:0E:38:F4:74:CE
Certificate issuer:       /CN=9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F
Certificate serial:       3CC416FCCF6BF8266A1A91589FBEC28568AFF024
Authority key identifier: 91:69:B9:B6:52:6C:D1:49:84:DD:E3:A4:2E:24:DD:8F:E7:AB:C1:7F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/3131352e3132342e36392e302f32342d3234203d3e203338353131.roa
Signing time:             Thu 20 May 2021 12:01:03 +0000
ROA not before:           Thu 20 May 2021 11:56:03 +0000
ROA not after:            Fri 20 May 2022 12:01:03 +0000
asID:                     38511
IP address blocks:        115.124.69.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:c4:16:fc:cf:6b:f8:26:6a:1a:91:58:9f:be:c2:85:68:af:f0:24
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F
        Validity
            Not Before: May 20 11:56:03 2021 GMT
            Not After : May 20 12:01:03 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:dc:cf:e6:54:7f:fa:2a:93:0c:62:f6:f0:77:
                    73:e0:14:4a:f9:85:ec:99:c9:60:c5:b0:37:c9:ed:
                    8f:2b:69:75:4f:16:cb:c7:cc:56:c0:d5:ac:02:8f:
                    7f:04:f6:8e:7d:6e:a9:1f:10:df:77:5c:52:ca:1e:
                    61:9e:8b:b0:7f:d4:ce:51:5d:d2:dc:cf:73:ee:c5:
                    d5:b7:5b:62:c6:bf:f2:5c:01:4a:3b:43:0f:4f:51:
                    68:58:a1:64:b1:8d:84:6f:2e:29:6f:d8:fe:f2:24:
                    57:35:f4:a6:92:62:46:ec:b8:2b:ed:c8:be:eb:05:
                    2d:5f:c7:35:3d:1b:a1:21:52:0c:d2:cd:29:b3:97:
                    e8:2d:65:d8:60:74:09:85:39:20:64:77:76:e6:17:
                    f5:9c:9f:20:cf:8c:20:9d:a8:d3:a0:82:aa:e5:88:
                    b1:fb:49:33:18:ea:31:de:2a:0c:91:81:0f:e0:c5:
                    52:57:da:5a:9a:d4:b2:c9:f3:17:9b:c5:65:f2:09:
                    8b:da:96:9c:03:58:2e:06:6c:47:98:39:db:6a:af:
                    37:88:5b:4c:0c:3e:1b:39:dd:67:d1:7e:f4:d6:1f:
                    2a:e7:30:bc:78:f7:64:c9:04:03:ae:0d:f0:c1:23:
                    34:90:51:1e:bd:02:32:74:22:1d:e8:6e:ab:ba:f2:
                    49:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:75:63:D0:4D:12:35:57:C7:4B:AB:68:EC:4E:2A:0E:38:F4:74:CE
            X509v3 Authority Key Identifier:
                keyid:91:69:B9:B6:52:6C:D1:49:84:DD:E3:A4:2E:24:DD:8F:E7:AB:C1:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/3131352e3132342e36392e302f32342d3234203d3e203338353131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.124.69.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:84:01:ce:2e:32:08:d7:be:ea:65:60:7d:7b:ec:d3:8c:0b:
         77:f7:6f:28:69:7f:33:2b:8e:6b:35:11:89:62:cc:79:88:b4:
         b8:f0:2d:44:74:53:41:89:a7:23:fa:9c:07:a6:aa:d7:63:f4:
         be:61:4a:4e:e2:f7:e1:18:a8:08:87:1b:94:b1:5a:10:47:62:
         ce:96:d1:30:9a:46:d9:35:fd:0f:78:c6:a6:bf:83:9f:71:be:
         52:75:e6:14:2b:38:da:37:64:a7:07:c0:b9:38:e7:da:d7:2c:
         1d:17:e2:a8:25:31:a8:d1:f2:cd:f7:f0:b1:4d:98:72:08:96:
         45:d1:f8:87:90:a0:8f:51:bc:3a:c5:f2:70:e6:36:83:84:0b:
         f0:09:8a:85:32:4c:e0:52:5c:4f:bb:28:10:ab:de:ce:23:a9:
         8c:62:ee:1b:a9:45:d5:74:b9:6e:52:67:4d:cf:9c:ca:df:b4:
         61:9b:f2:37:d3:83:d6:24:b9:9a:80:12:ec:b8:27:2e:2f:af:
         4f:9d:51:d7:b9:96:33:98:d4:f2:ab:65:58:7c:63:7e:d9:94:
         98:9f:53:47:75:9f:3b:ce:3a:13:97:0e:2e:79:78:ea:dd:98:
         ab:66:47:36:6a:b5:5b:fe:8d:c7:44:cf:ab:06:94:f7:c2:b5:
         bc:53:c5:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:41 2024 by rpki-client on console-ams.rpki-client.org