Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/3131352e3132342e37312e302f32342d3234203d3e203536323432.roa
File:                     3131352e3132342e37312e302f32342d3234203d3e203536323432.roa (raw, json)
Hash identifier:          Oy5L5G42EYc5xe3HkoEm5d+OIKrgnjzvfPS5UxmcnDU=
Subject key identifier:   67:6A:44:BC:F6:02:EE:CC:91:29:92:8A:DF:5F:42:EF:40:96:41:6F
Certificate issuer:       /CN=9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F
Certificate serial:       0563B699E9947EA94D815F21FAF24E532A9C0816
Authority key identifier: 91:69:B9:B6:52:6C:D1:49:84:DD:E3:A4:2E:24:DD:8F:E7:AB:C1:7F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/3131352e3132342e37312e302f32342d3234203d3e203536323432.roa
Signing time:             Thu 20 May 2021 12:02:46 +0000
ROA not before:           Thu 20 May 2021 11:57:46 +0000
ROA not after:            Fri 20 May 2022 12:02:46 +0000
asID:                     56242
IP address blocks:        115.124.71.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:63:b6:99:e9:94:7e:a9:4d:81:5f:21:fa:f2:4e:53:2a:9c:08:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F
        Validity
            Not Before: May 20 11:57:46 2021 GMT
            Not After : May 20 12:02:46 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:8a:f3:72:a3:4a:85:39:e3:6c:eb:fa:42:02:
                    c7:cf:f0:6b:ca:98:dc:4d:9a:86:7b:03:a3:55:8f:
                    29:0b:a4:f6:1a:71:3c:10:e3:7f:a3:25:60:9f:50:
                    9b:ef:2c:eb:c7:fd:e6:d2:a8:81:8b:0f:87:9e:e1:
                    51:23:36:5b:2c:03:1b:5c:ea:56:9a:8a:fa:80:a2:
                    5e:fa:09:7a:63:ef:a7:84:c3:3a:99:a2:13:2c:41:
                    14:2a:9b:1a:d8:f2:ab:26:79:d9:72:5f:ff:50:fe:
                    e3:02:52:73:58:a1:9f:da:1f:e7:0e:51:42:2f:cc:
                    c9:2d:6e:8c:00:a9:62:1f:9e:70:d0:0b:bf:73:9c:
                    36:be:09:00:7a:c8:31:a0:d4:5e:f0:e6:8a:ec:9b:
                    6e:1f:ba:e9:f2:2f:d9:8e:61:5a:4b:17:9a:ea:b8:
                    bd:d0:a1:35:51:0e:24:6b:09:3c:7d:46:ae:a0:d1:
                    08:5c:f6:ca:39:da:be:9c:57:b8:3f:b1:85:94:fa:
                    8d:89:94:eb:e2:94:70:6e:19:48:a6:b9:2a:e5:0d:
                    2b:5a:39:6b:d1:16:5e:bd:58:a3:0e:13:60:cd:84:
                    dc:10:83:04:1d:33:36:72:06:f3:30:0d:dd:6c:58:
                    43:be:ef:ef:cd:5d:54:6b:24:c8:ae:24:5f:01:51:
                    b9:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:6A:44:BC:F6:02:EE:CC:91:29:92:8A:DF:5F:42:EF:40:96:41:6F
            X509v3 Authority Key Identifier:
                keyid:91:69:B9:B6:52:6C:D1:49:84:DD:E3:A4:2E:24:DD:8F:E7:AB:C1:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/3131352e3132342e37312e302f32342d3234203d3e203536323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.124.71.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b0:7c:e7:e2:56:2c:81:c0:f1:61:34:20:b2:f8:d6:7e:70:44:
         42:25:d2:6c:df:bc:79:ab:d6:5f:4b:d2:2d:9f:37:e2:72:8b:
         33:00:17:2b:61:39:b8:ce:64:aa:31:5c:f0:a3:64:38:8d:35:
         ab:8a:9b:ab:18:a9:1a:83:85:a3:70:a0:c2:64:a3:5a:d8:c7:
         15:3d:99:d8:a7:52:bb:a1:e5:a6:30:f6:c8:ea:56:b5:9b:23:
         03:6a:fa:48:07:65:86:a5:63:aa:8a:18:ce:8c:8b:43:d8:07:
         f0:6a:14:dd:a5:ca:16:a8:c2:fb:8d:1f:17:7f:19:4a:e8:b3:
         c2:77:5e:d6:f0:1a:96:af:0b:45:1f:16:31:82:76:ac:e9:1a:
         01:5d:a6:9a:8a:86:30:26:a3:71:ff:f9:4d:32:69:7d:d8:98:
         bc:21:b1:87:9a:b4:a3:35:04:45:a4:d4:8e:a8:c2:b7:10:d9:
         c8:1b:a4:c3:cf:e8:16:77:39:07:3a:a5:10:09:f6:4f:ef:08:
         83:1c:4f:e9:b6:61:90:fe:66:db:30:84:38:7d:49:d4:03:0d:
         d0:42:33:8b:ac:32:2e:3f:87:a8:6c:38:f7:cd:e5:b9:21:48:
         2b:fc:68:c8:a7:c7:68:19:1f:00:ad:51:5a:17:cd:b0:5e:e6:
         5a:27:5b:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:41 2024 by rpki-client on console-ams.rpki-client.org