Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/3131352e3132342e37322e302f32312d3231203d3e203338353131.roa
File:                     3131352e3132342e37322e302f32312d3231203d3e203338353131.roa (raw, json)
Hash identifier:          XtFd761gxjFK0e8tq+p8afEkP14RL7mTMwX6H9nzQKk=
Subject key identifier:   A9:BB:EC:0C:5C:30:A4:BA:16:9F:42:B2:44:7F:09:4C:D3:07:40:39
Certificate issuer:       /CN=9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F
Certificate serial:       54C62FE80D176223B3BDDC4F59D19463A149C9B8
Authority key identifier: 91:69:B9:B6:52:6C:D1:49:84:DD:E3:A4:2E:24:DD:8F:E7:AB:C1:7F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/3131352e3132342e37322e302f32312d3231203d3e203338353131.roa
Signing time:             Wed 23 Feb 2022 02:00:01 +0000
ROA not before:           Wed 23 Feb 2022 01:55:01 +0000
ROA not after:            Thu 23 Feb 2023 02:00:01 +0000
asID:                     38511
IP address blocks:        115.124.72.0/21 maxlen: 21

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:c6:2f:e8:0d:17:62:23:b3:bd:dc:4f:59:d1:94:63:a1:49:c9:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F
        Validity
            Not Before: Feb 23 01:55:01 2022 GMT
            Not After : Feb 23 02:00:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:7b:ba:ed:80:ad:86:50:9e:19:eb:36:f7:10:
                    dc:ff:12:93:80:6b:e8:92:6f:68:75:88:f1:d1:a9:
                    29:b2:2e:a9:2c:c9:da:57:88:03:a8:18:30:13:ba:
                    81:dd:49:b4:7d:d1:97:4c:68:cd:fb:77:93:20:bb:
                    5a:19:31:6e:87:45:f5:a7:5d:9e:60:7e:6b:1c:ee:
                    68:b7:c4:74:f7:c8:4e:09:cc:db:1b:99:75:78:da:
                    c1:43:13:5a:9b:dc:ef:0c:4a:8e:c4:e1:ec:bd:7c:
                    f4:6a:18:f1:a3:bb:8c:84:b9:71:fa:a9:aa:1b:0b:
                    79:eb:13:83:a8:8c:66:a4:d5:25:ba:c2:8f:58:88:
                    b5:b7:1c:44:a7:e9:bc:bf:39:92:2f:05:ad:9f:21:
                    6e:f7:8f:df:b6:cb:aa:07:67:94:5c:27:dd:9e:e0:
                    39:69:3b:87:51:73:6f:9b:cd:8c:99:84:7a:4e:a2:
                    e7:26:3d:bf:ae:29:83:8c:66:23:df:da:65:d5:a6:
                    7e:ff:57:03:f2:c9:b2:8c:a6:2f:45:3c:cf:6f:0e:
                    4c:63:fd:79:50:c4:be:4e:c4:4f:85:d7:00:fb:41:
                    84:75:f9:be:be:a4:11:aa:10:f5:7e:48:6e:4e:93:
                    ad:8e:96:a9:c8:9d:d1:c4:d7:53:01:61:19:08:50:
                    df:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:BB:EC:0C:5C:30:A4:BA:16:9F:42:B2:44:7F:09:4C:D3:07:40:39
            X509v3 Authority Key Identifier:
                keyid:91:69:B9:B6:52:6C:D1:49:84:DD:E3:A4:2E:24:DD:8F:E7:AB:C1:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/3131352e3132342e37322e302f32312d3231203d3e203338353131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.124.72.0/21

    Signature Algorithm: sha256WithRSAEncryption
         27:c1:5c:be:0f:16:5b:9f:3f:0d:ef:4f:54:ac:b9:4a:e0:19:
         b9:9f:2c:17:79:de:ea:7f:c0:45:ec:de:1b:c1:ed:d3:42:14:
         c5:2a:19:8b:fa:c6:2c:7f:44:7f:6f:d8:90:3e:53:7e:ef:85:
         42:b6:0b:83:f9:c9:3e:c1:c8:e8:df:69:b5:c5:13:a7:3d:b3:
         e0:c5:27:1b:fb:2d:b8:4f:28:19:0b:60:f3:9f:81:41:0e:5e:
         ea:13:f8:20:4a:61:d7:72:96:c7:49:6a:63:a2:a2:33:9f:bd:
         9b:6a:a4:23:4c:0d:b9:e2:3e:1a:5f:c7:7a:4f:c2:2b:ea:85:
         2a:9c:2d:dc:fa:af:35:d6:90:e7:e8:35:7a:2b:1e:b2:69:29:
         66:ea:db:ca:ff:22:c9:bc:76:cd:58:0f:ce:05:6d:b4:96:68:
         ac:15:f0:62:d9:59:08:e1:1b:21:d4:02:d3:74:15:44:da:ca:
         31:d6:31:32:d9:1a:53:81:d3:62:e9:4c:53:9e:ad:3d:6c:f1:
         b9:60:d3:3c:1b:64:6c:1e:81:d1:de:36:47:5a:2a:5e:55:2c:
         e9:e0:5b:97:50:21:59:4d:a1:f7:6a:b2:f7:dc:3f:65:6d:6e:
         9a:07:7b:b5:4f:8d:42:cd:d5:10:96:33:0e:f5:41:3b:cc:0a:
         fd:19:68:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:41 2024 by rpki-client on console-ams.rpki-client.org