Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/3131352e3132342e37332e302f32342d3234203d3e203338353131.roa
File:                     3131352e3132342e37332e302f32342d3234203d3e203338353131.roa (raw, json)
Hash identifier:          87FLSrULk7DUb9wXByIkCxJ8zLsKylSWPOnv1qzXzDs=
Subject key identifier:   7C:07:44:3B:27:57:7A:94:63:9F:6E:2D:3F:D6:2B:0F:96:B6:33:7E
Certificate issuer:       /CN=9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F
Certificate serial:       776C445072B740BC764E630B54A521554CB17A4F
Authority key identifier: 91:69:B9:B6:52:6C:D1:49:84:DD:E3:A4:2E:24:DD:8F:E7:AB:C1:7F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/3131352e3132342e37332e302f32342d3234203d3e203338353131.roa
Signing time:             Thu 20 May 2021 12:03:42 +0000
ROA not before:           Thu 20 May 2021 11:58:42 +0000
ROA not after:            Fri 20 May 2022 12:03:42 +0000
asID:                     38511
IP address blocks:        115.124.73.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:6c:44:50:72:b7:40:bc:76:4e:63:0b:54:a5:21:55:4c:b1:7a:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F
        Validity
            Not Before: May 20 11:58:42 2021 GMT
            Not After : May 20 12:03:42 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:a6:f8:2c:29:c5:16:73:55:86:8a:8f:62:c5:
                    ec:67:53:92:de:5c:69:c5:9a:7c:94:d7:22:db:92:
                    2c:7f:9b:f5:74:fd:c3:e2:62:b5:ca:a0:79:0e:43:
                    80:98:b9:64:63:32:b8:ca:93:55:7c:19:f5:65:40:
                    41:86:81:4f:e5:e4:01:a6:70:80:12:31:28:a5:d9:
                    a2:23:46:ab:d7:c2:b6:d9:ae:6f:ea:00:2e:a4:54:
                    43:92:e4:87:a7:18:1c:ab:6f:21:e2:1b:f3:2b:8c:
                    e2:f7:61:b9:5e:3c:0d:9b:25:50:a3:9d:b6:e2:4e:
                    93:6c:d8:c8:79:f3:fc:f7:c3:69:a1:93:21:2f:05:
                    30:9f:91:8b:c5:1c:c1:9a:31:c2:2a:b3:0c:cd:95:
                    a2:67:17:48:99:48:c4:8c:3c:63:56:a9:f6:28:de:
                    95:d9:61:7e:9f:94:89:04:aa:77:7f:25:1c:13:20:
                    99:22:71:fe:87:9f:9a:da:e6:90:f1:49:7c:91:42:
                    c0:30:b1:11:24:01:0b:16:08:7e:6f:ef:09:b4:72:
                    c1:58:33:e4:0d:76:e8:79:5c:ea:b7:e7:29:da:7c:
                    d1:4a:bc:71:d3:5d:f7:f7:8f:64:36:4f:bf:94:68:
                    5c:c4:50:cb:d9:5f:85:61:06:7c:71:88:25:95:5e:
                    e4:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:07:44:3B:27:57:7A:94:63:9F:6E:2D:3F:D6:2B:0F:96:B6:33:7E
            X509v3 Authority Key Identifier:
                keyid:91:69:B9:B6:52:6C:D1:49:84:DD:E3:A4:2E:24:DD:8F:E7:AB:C1:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/3131352e3132342e37332e302f32342d3234203d3e203338353131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.124.73.0/24

    Signature Algorithm: sha256WithRSAEncryption
         51:f1:84:ee:88:33:26:56:09:0a:18:be:15:c0:4d:fc:78:d3:
         58:79:f5:21:fc:f1:a6:c4:b2:8d:f8:7f:4c:44:77:aa:bb:44:
         71:0f:86:f8:fb:aa:8d:e0:1a:df:12:4a:6d:0e:ea:69:46:e5:
         9a:d7:17:4c:8f:74:72:bb:d2:62:6b:f2:40:c3:d8:7b:52:e8:
         9f:7d:d5:60:90:da:19:92:0a:e6:2b:4a:1e:b1:8b:0f:0e:78:
         f1:29:3b:ac:b9:54:eb:02:94:5d:66:01:7a:17:ff:3b:ff:07:
         cf:81:d5:96:82:49:44:8a:c7:1d:7f:83:0b:df:83:dc:47:3a:
         c4:11:36:d0:15:f2:e1:d9:06:64:8c:43:ef:be:a5:2e:ad:02:
         ba:a9:2c:fa:87:58:8d:77:dc:24:41:5c:ef:d1:b1:e5:a1:16:
         69:fb:f6:5e:fa:00:0d:91:d5:56:9f:78:d2:ae:71:c4:1a:17:
         b0:62:d2:99:9f:5d:31:70:ee:50:2f:34:36:f7:7b:e8:c5:5b:
         9d:da:e4:d2:09:c7:18:c2:4d:eb:26:47:3c:1c:29:66:33:d0:
         f4:c8:08:ab:cd:e6:3c:9b:2b:e3:88:40:98:90:98:ce:3a:56:
         85:81:27:39:7a:d4:47:37:c3:f2:fe:62:c2:2c:4e:48:42:9c:
         4d:ca:87:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:41 2024 by rpki-client on console-ams.rpki-client.org