Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/3131352e3132342e37322e302f32342d3234203d3e203338353131.roa
File:                     3131352e3132342e37322e302f32342d3234203d3e203338353131.roa (raw, json)
Hash identifier:          xydldlyXJWxoekK4EwZB1gHwPDGofPFCJVYBQEyvE7I=
Subject key identifier:   70:EC:EA:06:E4:76:D1:7A:AF:C7:14:E7:75:32:68:97:09:65:5A:DD
Certificate issuer:       /CN=9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F
Certificate serial:       6585E743D1C933749765C988DF5202C9DDB82AC3
Authority key identifier: 91:69:B9:B6:52:6C:D1:49:84:DD:E3:A4:2E:24:DD:8F:E7:AB:C1:7F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/3131352e3132342e37322e302f32342d3234203d3e203338353131.roa
Signing time:             Thu 20 May 2021 12:03:25 +0000
ROA not before:           Thu 20 May 2021 11:58:25 +0000
ROA not after:            Fri 20 May 2022 12:03:25 +0000
asID:                     38511
IP address blocks:        115.124.72.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:85:e7:43:d1:c9:33:74:97:65:c9:88:df:52:02:c9:dd:b8:2a:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F
        Validity
            Not Before: May 20 11:58:25 2021 GMT
            Not After : May 20 12:03:25 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:4b:44:11:9e:24:53:fd:6a:09:49:73:8a:f8:
                    20:2d:1d:c2:c3:25:ad:2f:01:57:46:e6:5f:7b:07:
                    b2:df:57:38:79:11:a3:98:cf:74:ff:35:94:d7:74:
                    b1:75:66:be:e0:41:c8:e4:86:eb:9f:37:f2:ef:95:
                    e6:72:1f:65:0e:44:15:3c:42:3e:69:c9:e1:0c:a0:
                    09:db:4e:16:68:0b:1b:ff:93:b7:31:5a:4f:85:8a:
                    28:20:43:23:a9:55:01:c5:7a:a6:34:be:a1:f0:a2:
                    51:a4:9b:b3:bf:c1:00:ee:21:e1:cb:15:72:f2:3a:
                    21:a3:d7:1a:e4:10:01:db:d6:df:60:48:8a:a9:70:
                    e8:72:bb:84:73:d3:5f:9c:a9:b6:8c:20:62:19:f9:
                    f5:9b:89:bd:96:d9:97:26:d7:92:7b:c2:b1:41:69:
                    6e:79:00:d0:b5:b4:db:28:3c:6e:ce:de:e1:8e:de:
                    4f:0a:b2:91:de:ab:b9:0a:22:df:4d:f4:a5:d9:5e:
                    9c:43:76:7c:52:68:6b:b2:8d:c8:c7:88:0f:9c:bf:
                    10:9c:9c:d3:35:04:41:69:39:10:3c:98:cd:54:fc:
                    e0:ac:fa:03:24:c2:8f:ac:1a:d5:f5:29:36:2b:66:
                    d3:75:a6:7b:1f:4b:a6:e3:ef:b8:04:f9:f3:29:73:
                    93:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:EC:EA:06:E4:76:D1:7A:AF:C7:14:E7:75:32:68:97:09:65:5A:DD
            X509v3 Authority Key Identifier:
                keyid:91:69:B9:B6:52:6C:D1:49:84:DD:E3:A4:2E:24:DD:8F:E7:AB:C1:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/3131352e3132342e37322e302f32342d3234203d3e203338353131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.124.72.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:60:d6:6b:c5:4f:91:18:4b:42:a5:63:63:07:50:a5:91:b7:
         ce:64:81:a7:3b:6a:e9:24:a9:49:9f:7f:38:9a:48:84:52:27:
         ff:4a:49:c0:6c:26:69:cc:0c:85:6d:d9:07:f9:6e:e8:b9:a0:
         a4:1f:a7:d8:58:f2:2d:f6:be:43:f2:a5:5f:2f:1a:ad:61:b1:
         4a:ee:ef:15:43:cb:01:c2:6e:0b:63:29:2d:c8:82:41:20:ec:
         39:0a:d2:48:09:43:22:48:7d:c7:ff:a5:97:7e:a3:b9:a8:d5:
         fc:9e:fd:1e:f4:c9:1e:34:d0:2d:b9:d2:5a:9e:ad:a2:e6:fa:
         65:92:81:f8:9d:82:3f:e8:ce:75:2e:cc:3c:30:9a:bc:9d:85:
         59:00:e8:3f:cc:d2:14:10:58:b6:00:eb:e0:39:d6:0a:2d:08:
         ef:f1:4d:fe:60:23:cc:e6:1c:96:aa:96:cf:5f:d7:c8:c5:b2:
         c2:bd:1c:82:f8:65:ba:b4:c2:e7:53:c5:7d:ad:20:44:7b:2d:
         c6:1c:4b:21:dc:b0:8e:7e:6c:09:72:36:c6:24:ab:e7:6a:62:
         a5:69:6e:2d:25:e1:af:cc:6b:71:5e:3a:fb:41:97:b4:48:a8:
         eb:42:64:8a:b8:2d:33:6f:eb:ce:43:73:05:a3:01:d5:09:e5:
         79:6d:9a:58
-----BEGIN CERTIFICATE-----
MIIHJDCCBgygAwIBAgIUZYXnQ9HJM3SXZcmI31ICyd24KsMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTE2OUI5QjY1MjZDRDE0OTg0RERFM0E0MkUyNEREOEZF
N0FCQzE3RjAeFw0yMTA1MjAxMTU4MjVaFw0yMjA1MjAxMjAzMjVaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzE0QjQ0MTE5RTI0NTNGRDZB
MDk0OTczOEFGODIwMkQxREMyQzMyNUFEMkYwMTU3NDZFNjVGN0IwN0IyREY1NzM4
NzkxMUEzOThDRjc0RkYzNTk0RDc3NEIxNzU2NkJFRTA0MUM4RTQ4NkVCOUYzN0Yy
RUY5NUU2NzIxRjY1MEU0NDE1M0M0MjNFNjlDOUUxMENBMDA5REI0RTE2NjgwQjFC
RkY5M0I3MzE1QTRGODU4QTI4MjA0MzIzQTk1NTAxQzU3QUE2MzRCRUExRjBBMjUx
QTQ5QkIzQkZDMTAwRUUyMUUxQ0IxNTcyRjIzQTIxQTNENzFBRTQxMDAxREJENkRG
NjA0ODhBQTk3MEU4NzJCQjg0NzNEMzVGOUNBOUI2OEMyMDYyMTlGOUY1OUI4OUJE
OTZEOTk3MjZENzkyN0JDMkIxNDE2OTZFNzkwMEQwQjVCNERCMjgzQzZFQ0VERUUx
OEVERTRGMEFCMjkxREVBQkI5MEEyMkRGNERGNEE1RDk1RTlDNDM3NjdDNTI2ODZC
QjI4REM4Qzc4ODBGOUNCRjEwOUM5Q0QzMzUwNDQxNjkzOTEwM0M5OENENTRGQ0Uw
QUNGQTAzMjRDMjhGQUMxQUQ1RjUyOTM2MkI2NkQzNzVBNjdCMUY0QkE2RTNFRkI4
MDRGOUYzMjk3MzkzQjcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAwUtEEZ4kU/1qCUlzivggLR3CwyWtLwFXRuZfewey31c4eRGjmM90
/zWU13SxdWa+4EHI5Ibrnzfy75Xmch9lDkQVPEI+acnhDKAJ204WaAsb/5O3MVpP
hYooIEMjqVUBxXqmNL6h8KJRpJuzv8EA7iHhyxVy8joho9ca5BAB29bfYEiKqXDo
cruEc9NfnKm2jCBiGfn1m4m9ltmXJteSe8KxQWlueQDQtbTbKDxuzt7hjt5PCrKR
3qu5CiLfTfSl2V6cQ3Z8Umhrso3Ix4gPnL8QnJzTNQRBaTkQPJjNVPzgrPoDJMKP
rBrV9Sk2K2bTdaZ7H0um4++4BPnzKXOTtwIDAQABo4ICMjCCAi4wHQYDVR0OBBYE
FHDs6gbkdtF6r8cU53UyaJcJZVrdMB8GA1UdIwQYMBaAFJFpubZSbNFJhN3jpC4k
3Y/nq8F/MA4GA1UdDwEB/wQEAwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODhmMjkxNWQtMThjOS00ZTAzLWJi
ZmItMjA3NGM1OTgwODk4LzAvOTE2OUI5QjY1MjZDRDE0OTg0RERFM0E0MkUyNERE
OEZFN0FCQzE3Ri5jcmwwdAYIKwYBBQUHAQEEaDBmMGQGCCsGAQUFBzAChlhyc3lu
YzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8yLzkxNjlCOUI2
NTI2Q0QxNDk4NERERTNBNDJFMjRERDhGRTdBQkMxN0YuY2VyMIGiBggrBgEFBQcB
CwSBlTCBkjCBjwYIKwYBBQUHMAuGgYJyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby84OGYyOTE1ZC0xOGM5LTRlMDMtYmJmYi0yMDc0YzU5ODA4OTgvMC8z
MTMxMzUyZTMxMzIzNDJlMzczMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMzMzgz
NTMxMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBABzfEgwDQYJKoZIhvcNAQELBQADggEBAC1g1mvFT5EY
S0KlY2MHUKWRt85kgac7aukkqUmffziaSIRSJ/9KScBsJmnMDIVt2Qf5bui5oKQf
p9hY8i32vkPypV8vGq1hsUru7xVDywHCbgtjKS3IgkEg7DkK0kgJQyJIfcf/pZd+
o7mo1fye/R70yR400C250lqeraLm+mWSgfidgj/oznUuzDwwmrydhVkA6D/M0hQQ
WLYA6+A51gotCO/xTf5gI8zmHJaqls9f18jFssK9HIL4Zbq0wudTxX2tIER7LcYc
SyHcsI5+bAlyNsYkq+dqYqVpbi0l4a/Ma3FeOvtBl7RIqOtCZIq4LTNv685DcwWj
AdUJ5Xltmlg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:08 2024 by rpki-client on console-fra.rpki-client.org