Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/3131352e3132342e37342e302f32342d3234203d3e203338353131.roa
File:                     3131352e3132342e37342e302f32342d3234203d3e203338353131.roa (raw, json)
Hash identifier:          m3iyKB/LPOrN5w3ZmL2ezAMm+o6WII9xQoiPHTDP358=
Subject key identifier:   69:A1:AC:A5:09:72:BD:00:81:97:F5:3A:38:36:5B:36:80:3D:CE:D4
Certificate issuer:       /CN=9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F
Certificate serial:       029D2CC7BCC47164A29A0A95891746E717ED1572
Authority key identifier: 91:69:B9:B6:52:6C:D1:49:84:DD:E3:A4:2E:24:DD:8F:E7:AB:C1:7F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/3131352e3132342e37342e302f32342d3234203d3e203338353131.roa
Signing time:             Thu 20 May 2021 12:04:26 +0000
ROA not before:           Thu 20 May 2021 11:59:26 +0000
ROA not after:            Fri 20 May 2022 12:04:26 +0000
asID:                     38511
IP address blocks:        115.124.74.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:9d:2c:c7:bc:c4:71:64:a2:9a:0a:95:89:17:46:e7:17:ed:15:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F
        Validity
            Not Before: May 20 11:59:26 2021 GMT
            Not After : May 20 12:04:26 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:3e:01:a6:76:bc:d8:c8:5c:4d:d1:58:12:9a:
                    a2:1c:9c:09:8d:4f:0f:e6:59:db:f9:7e:ed:13:23:
                    ba:9f:94:02:a3:d0:c8:ff:64:40:0c:e0:69:1f:36:
                    82:2f:00:4f:b1:5c:d8:8c:f1:45:56:a1:4f:a2:c9:
                    91:f7:9c:8a:de:f9:2a:92:2d:67:91:30:84:22:66:
                    4e:c0:32:37:bb:a4:8e:06:26:3b:b2:c0:b1:b3:2b:
                    97:33:7c:8b:e0:a6:33:b7:82:65:7e:d3:37:22:a3:
                    56:03:36:91:4e:99:18:88:d5:0e:5a:7b:76:2f:b9:
                    86:85:c9:1f:ae:b9:b3:02:00:03:19:00:ee:8f:91:
                    2f:d6:de:c1:87:93:20:04:6b:4b:de:49:63:6e:a7:
                    41:ba:28:cb:24:38:b3:ca:58:d6:81:e3:19:2f:55:
                    09:0d:64:80:c7:a2:1c:b8:29:96:4e:d1:c4:ac:6b:
                    59:c0:69:95:53:cc:86:88:a7:5e:b9:29:4d:6c:4a:
                    9b:4e:f1:44:c0:4c:db:7f:9a:7b:d4:8e:40:f1:82:
                    78:a1:c3:b5:5c:f3:ea:26:9a:e4:d8:7b:69:1d:95:
                    a4:d3:b1:09:ec:d2:1e:9c:bc:a1:04:df:26:3d:93:
                    60:56:72:5b:24:d2:f6:2d:23:bb:f8:91:e3:f1:37:
                    49:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:A1:AC:A5:09:72:BD:00:81:97:F5:3A:38:36:5B:36:80:3D:CE:D4
            X509v3 Authority Key Identifier:
                keyid:91:69:B9:B6:52:6C:D1:49:84:DD:E3:A4:2E:24:DD:8F:E7:AB:C1:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/3131352e3132342e37342e302f32342d3234203d3e203338353131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.124.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c3:90:ac:45:77:b2:db:0f:44:3f:d0:e0:4e:1e:1e:66:68:27:
         27:a6:2c:e0:94:5d:05:f5:16:c9:d7:cd:eb:2d:bb:65:15:4a:
         ce:bb:c7:bd:8d:2c:d3:d5:6a:4d:3b:13:0b:9e:4c:ef:5a:b1:
         6c:f3:f7:f6:c0:bf:2b:fa:93:b6:3b:ed:03:07:43:5b:f7:2e:
         da:a2:6e:a2:44:86:f5:fc:96:01:a5:eb:b1:16:0a:66:f5:9d:
         36:4e:4e:91:52:56:7d:e1:94:4d:ba:0e:32:19:80:07:2c:d0:
         80:99:f2:87:8d:9b:29:33:a5:77:fa:ab:6f:11:1e:76:88:78:
         60:98:17:b2:7c:7f:3f:69:9c:e7:45:6f:4f:e0:3e:9c:62:0c:
         fd:58:ae:70:c0:af:a0:b8:2f:2e:75:8a:14:6b:69:ff:17:c8:
         f5:a7:53:0a:57:4b:5f:1d:7f:d9:d7:ce:c9:34:11:1a:b4:c5:
         23:3b:54:29:15:d0:a5:5d:51:f9:0a:f7:c5:8c:4a:ac:22:58:
         75:b6:e9:e5:4a:12:91:0d:fb:f4:41:c4:ce:2a:62:83:66:d9:
         a3:43:2c:8d:93:fa:6d:cd:8e:a1:1b:0e:90:69:7d:6c:24:aa:
         56:ce:58:0b:d6:5c:c5:c1:01:93:74:3d:d8:72:eb:53:d5:58:
         55:1e:c3:5b
-----BEGIN CERTIFICATE-----
MIIHJDCCBgygAwIBAgIUAp0sx7zEcWSimgqViRdG5xftFXIwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTE2OUI5QjY1MjZDRDE0OTg0RERFM0E0MkUyNEREOEZF
N0FCQzE3RjAeFw0yMTA1MjAxMTU5MjZaFw0yMjA1MjAxMjA0MjZaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzczRTAxQTY3NkJDRDhDODVD
NEREMTU4MTI5QUEyMUM5QzA5OEQ0RjBGRTY1OURCRjk3RUVEMTMyM0JBOUY5NDAy
QTNEMEM4RkY2NDQwMENFMDY5MUYzNjgyMkYwMDRGQjE1Q0Q4OENGMTQ1NTZBMTRG
QTJDOTkxRjc5QzhBREVGOTJBOTIyRDY3OTEzMDg0MjI2NjRFQzAzMjM3QkJBNDhF
MDYyNjNCQjJDMEIxQjMyQjk3MzM3QzhCRTBBNjMzQjc4MjY1N0VEMzM3MjJBMzU2
MDMzNjkxNEU5OTE4ODhENTBFNUE3Qjc2MkZCOTg2ODVDOTFGQUVCOUIzMDIwMDAz
MTkwMEVFOEY5MTJGRDZERUMxODc5MzIwMDQ2QjRCREU0OTYzNkVBNzQxQkEyOENC
MjQzOEIzQ0E1OEQ2ODFFMzE5MkY1NTA5MEQ2NDgwQzdBMjFDQjgyOTk2NEVEMUM0
QUM2QjU5QzA2OTk1NTNDQzg2ODhBNzVFQjkyOTRENkM0QTlCNEVGMTQ0QzA0Q0RC
N0Y5QTdCRDQ4RTQwRjE4Mjc4QTFDM0I1NUNGM0VBMjY5QUU0RDg3QjY5MUQ5NUE0
RDNCMTA5RUNEMjFFOUNCQ0ExMDRERjI2M0Q5MzYwNTY3MjVCMjREMkY2MkQyM0JC
Rjg5MUUzRjEzNzQ5NkYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAxz4Bpna82MhcTdFYEpqiHJwJjU8P5lnb+X7tEyO6n5QCo9DI/2RA
DOBpHzaCLwBPsVzYjPFFVqFPosmR95yK3vkqki1nkTCEImZOwDI3u6SOBiY7ssCx
syuXM3yL4KYzt4JlftM3IqNWAzaRTpkYiNUOWnt2L7mGhckfrrmzAgADGQDuj5Ev
1t7Bh5MgBGtL3kljbqdBuijLJDizyljWgeMZL1UJDWSAx6IcuCmWTtHErGtZwGmV
U8yGiKdeuSlNbEqbTvFEwEzbf5p71I5A8YJ4ocO1XPPqJprk2HtpHZWk07EJ7NIe
nLyhBN8mPZNgVnJbJNL2LSO7+JHj8TdJbwIDAQABo4ICMjCCAi4wHQYDVR0OBBYE
FGmhrKUJcr0AgZf1Ojg2WzaAPc7UMB8GA1UdIwQYMBaAFJFpubZSbNFJhN3jpC4k
3Y/nq8F/MA4GA1UdDwEB/wQEAwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODhmMjkxNWQtMThjOS00ZTAzLWJi
ZmItMjA3NGM1OTgwODk4LzAvOTE2OUI5QjY1MjZDRDE0OTg0RERFM0E0MkUyNERE
OEZFN0FCQzE3Ri5jcmwwdAYIKwYBBQUHAQEEaDBmMGQGCCsGAQUFBzAChlhyc3lu
YzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8yLzkxNjlCOUI2
NTI2Q0QxNDk4NERERTNBNDJFMjRERDhGRTdBQkMxN0YuY2VyMIGiBggrBgEFBQcB
CwSBlTCBkjCBjwYIKwYBBQUHMAuGgYJyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby84OGYyOTE1ZC0xOGM5LTRlMDMtYmJmYi0yMDc0YzU5ODA4OTgvMC8z
MTMxMzUyZTMxMzIzNDJlMzczNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMzMzgz
NTMxMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBABzfEowDQYJKoZIhvcNAQELBQADggEBAMOQrEV3stsP
RD/Q4E4eHmZoJyemLOCUXQX1FsnXzestu2UVSs67x72NLNPVak07EwueTO9asWzz
9/bAvyv6k7Y77QMHQ1v3LtqibqJEhvX8lgGl67EWCmb1nTZOTpFSVn3hlE26DjIZ
gAcs0ICZ8oeNmykzpXf6q28RHnaIeGCYF7J8fz9pnOdFb0/gPpxiDP1YrnDAr6C4
Ly51ihRraf8XyPWnUwpXS18df9nXzsk0ERq0xSM7VCkV0KVdUfkK98WMSqwiWHW2
6eVKEpEN+/RBxM4qYoNm2aNDLI2T+m3NjqEbDpBpfWwkqlbOWAvWXMXBAZN0Pdhy
61PVWFUew1s=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:08 2024 by rpki-client on console-fra.rpki-client.org