Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/3131352e3132342e37302e302f32342d3234203d3e203536323432.roa
File:                     3131352e3132342e37302e302f32342d3234203d3e203536323432.roa (raw, json)
Hash identifier:          STeaOWKujBpSn8RQeHJLF0Hu5JXP5gDhUAc4LZBgBHE=
Subject key identifier:   AD:A4:3A:B8:BA:5C:EA:4E:27:3C:C8:99:BB:94:2A:9B:A6:82:43:63
Certificate issuer:       /CN=9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F
Certificate serial:       6C4065C5564FBC1CBE6982B0BF9241BA37649C7A
Authority key identifier: 91:69:B9:B6:52:6C:D1:49:84:DD:E3:A4:2E:24:DD:8F:E7:AB:C1:7F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/3131352e3132342e37302e302f32342d3234203d3e203536323432.roa
Signing time:             Thu 20 May 2021 12:02:32 +0000
ROA not before:           Thu 20 May 2021 11:57:32 +0000
ROA not after:            Fri 20 May 2022 12:02:32 +0000
asID:                     56242
IP address blocks:        115.124.70.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:40:65:c5:56:4f:bc:1c:be:69:82:b0:bf:92:41:ba:37:64:9c:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F
        Validity
            Not Before: May 20 11:57:32 2021 GMT
            Not After : May 20 12:02:32 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a4:64:29:d5:81:b5:31:69:be:27:71:1c:6d:
                    a6:cb:66:00:af:d6:bd:06:cf:ba:00:06:24:77:4d:
                    95:0f:95:b2:a2:25:d4:51:54:ee:d1:0d:a1:6f:c8:
                    c2:39:02:10:72:4c:87:ee:2e:c3:31:3a:61:cd:db:
                    3e:66:78:76:1a:e8:1f:56:30:65:84:fc:10:b0:d3:
                    09:15:4b:fb:4c:73:d7:b4:c2:db:f3:46:d3:ef:d2:
                    79:ee:27:d7:bb:fe:3f:f8:fd:8b:41:5a:b4:bf:1d:
                    b7:a3:2a:27:07:b2:2f:52:29:f0:d9:91:61:06:d9:
                    87:36:5b:fa:ca:5e:ec:ca:23:45:4d:a9:fd:34:48:
                    45:10:61:54:a0:56:eb:84:0d:3a:27:af:ce:9a:b0:
                    36:05:85:d1:b7:42:a5:a0:a9:fe:31:e3:f7:fc:1b:
                    d1:6f:d3:d3:4b:68:15:f6:60:83:78:e8:b9:98:74:
                    c6:f5:e0:dd:8b:b2:12:70:9a:9e:34:24:7a:5a:69:
                    ed:f2:7a:9d:d2:bc:19:88:27:54:6f:3a:e1:15:d6:
                    cc:e9:39:26:76:c9:61:89:a9:42:a7:55:56:86:12:
                    68:84:4b:5f:6d:10:bb:e3:97:53:48:ef:b8:9f:8b:
                    51:70:bc:6e:99:48:46:9c:5f:b3:f0:9d:58:c8:90:
                    27:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:A4:3A:B8:BA:5C:EA:4E:27:3C:C8:99:BB:94:2A:9B:A6:82:43:63
            X509v3 Authority Key Identifier:
                keyid:91:69:B9:B6:52:6C:D1:49:84:DD:E3:A4:2E:24:DD:8F:E7:AB:C1:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/3131352e3132342e37302e302f32342d3234203d3e203536323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.124.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         67:18:b6:61:34:0f:e2:ef:fc:b7:fb:af:c5:26:4d:42:f0:d7:
         f7:a0:25:10:96:32:7d:ce:08:74:00:29:ee:00:9c:7a:47:4f:
         74:e8:e4:f7:58:f8:0f:cf:b1:dd:9f:df:50:ca:40:e0:1d:32:
         d8:15:75:2b:4b:17:39:07:6f:70:7e:e3:01:2f:f4:54:0c:d3:
         c0:d7:bc:06:fc:9d:62:33:0e:09:d7:fb:d4:d6:f0:b8:58:56:
         c8:ed:7d:62:bc:7f:6c:a0:66:b5:e4:75:4f:2b:b3:92:41:0e:
         75:8e:8a:96:79:7f:e2:3a:f4:5d:ff:49:17:a3:37:f0:d8:54:
         35:08:73:bf:b4:61:35:b2:3b:77:f8:21:1d:98:ee:8e:14:a3:
         58:4c:cc:72:4e:07:00:fc:8a:b1:89:9b:ac:e0:b0:49:8f:f0:
         65:a2:36:ba:8e:a0:21:b5:d8:29:98:56:95:cc:d2:a2:e1:a3:
         2a:67:7b:9a:1c:e0:6a:92:66:79:2c:51:dd:0d:79:f9:51:b6:
         9a:72:c6:df:7c:d1:de:98:b2:95:74:4b:33:93:cb:16:38:b4:
         e1:27:e1:3f:e9:8c:cb:37:c6:1e:c9:16:45:46:f1:6e:1e:39:
         c9:85:1a:80:4a:6f:09:86:7d:be:46:a0:36:e3:77:57:a2:d8:
         c9:fc:57:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:41 2024 by rpki-client on console-ams.rpki-client.org