Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/3131352e3132342e37352e302f32342d3234203d3e203338353131.roa
File:                     3131352e3132342e37352e302f32342d3234203d3e203338353131.roa (raw, json)
Hash identifier:          6YNhkvGJahw5Lw4wpm1XXpTH47xTKbWTcwMPnPrJSdI=
Subject key identifier:   6A:56:81:07:AD:A5:EC:57:A3:0E:B2:3D:08:70:27:51:81:B9:B1:DB
Certificate issuer:       /CN=9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F
Certificate serial:       5168E3FED9BC546C33D2A87998DD5AD281DA4F21
Authority key identifier: 91:69:B9:B6:52:6C:D1:49:84:DD:E3:A4:2E:24:DD:8F:E7:AB:C1:7F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/3131352e3132342e37352e302f32342d3234203d3e203338353131.roa
Signing time:             Thu 20 May 2021 12:04:02 +0000
ROA not before:           Thu 20 May 2021 11:59:02 +0000
ROA not after:            Fri 20 May 2022 12:04:02 +0000
asID:                     38511
IP address blocks:        115.124.75.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:68:e3:fe:d9:bc:54:6c:33:d2:a8:79:98:dd:5a:d2:81:da:4f:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F
        Validity
            Not Before: May 20 11:59:02 2021 GMT
            Not After : May 20 12:04:02 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:75:b1:66:c5:ec:a8:98:79:c3:2a:1f:39:64:
                    27:7f:94:50:5b:b3:19:1d:8a:ac:cf:76:f0:0b:84:
                    5a:55:1e:f4:82:21:f7:5d:6a:d2:70:26:5b:f2:1d:
                    77:a9:30:33:9c:93:84:b5:c1:ef:7d:ee:00:63:7b:
                    e2:68:b3:72:2c:d7:6e:da:e3:3c:dc:56:e2:34:87:
                    76:c6:a1:a0:b6:08:4f:05:70:46:68:af:c6:1c:61:
                    0a:6b:f1:ce:de:30:a4:41:23:d1:fc:fb:7e:5e:28:
                    0f:25:bf:10:f1:54:d0:36:f2:de:85:47:02:17:91:
                    bd:a2:f9:7b:65:2a:9d:8c:23:fc:e4:68:97:4a:ef:
                    4d:6c:eb:66:ae:60:14:71:4a:ae:43:2f:a3:0c:9a:
                    5d:3d:c2:57:34:aa:4e:8e:4c:b6:b6:f2:e2:64:cf:
                    bb:cd:5f:b3:9d:30:3e:81:f1:02:3c:ee:db:c4:c0:
                    48:c7:52:6d:f3:d6:28:cf:e3:5f:05:a3:9f:5b:6c:
                    00:ec:16:04:7b:30:79:f8:24:79:82:fa:79:b8:25:
                    da:6e:c6:0b:b0:ac:a9:df:7a:dc:0d:07:4c:a6:3a:
                    c3:80:df:73:63:43:ca:78:83:fa:8e:bd:6b:30:6f:
                    6d:5f:86:56:80:3a:12:17:37:76:e6:88:98:c7:ac:
                    8f:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:56:81:07:AD:A5:EC:57:A3:0E:B2:3D:08:70:27:51:81:B9:B1:DB
            X509v3 Authority Key Identifier:
                keyid:91:69:B9:B6:52:6C:D1:49:84:DD:E3:A4:2E:24:DD:8F:E7:AB:C1:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/3131352e3132342e37352e302f32342d3234203d3e203338353131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.124.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c6:6b:f1:01:0a:20:a0:73:bd:85:6c:c1:ec:20:13:44:04:2b:
         28:b2:a3:ef:48:2a:02:0d:d9:29:59:0e:11:8b:12:e9:2c:5b:
         01:60:17:74:6f:39:f0:1f:9b:78:d4:07:c2:58:13:fa:74:b1:
         78:77:bc:a7:67:de:f9:3c:80:73:03:48:ae:eb:9d:f1:38:31:
         b0:c4:59:7f:9f:3c:00:c9:15:ff:95:f6:63:03:1e:05:bd:34:
         38:f2:75:4d:c8:fd:ca:d6:33:7b:f9:0b:93:99:88:e3:f6:b6:
         5a:c0:fd:6e:29:e8:11:6c:9c:df:4d:23:3d:47:6c:b6:10:38:
         b3:50:f1:e7:e5:93:4a:4a:88:e6:7e:c5:fb:70:bb:0e:39:0a:
         3b:b1:17:e5:41:a8:34:18:71:9b:60:b9:fe:98:a9:8b:12:dc:
         b0:e6:79:93:a9:03:96:f6:fb:6f:e7:73:9b:6e:e3:47:b8:77:
         f2:79:22:21:41:53:26:d5:b4:52:a8:12:32:a5:2a:4b:77:1e:
         0d:69:1e:d4:64:ea:67:ec:94:37:49:75:cb:ef:e7:8a:af:34:
         43:e8:01:ba:85:d7:4e:c2:81:72:a1:3b:22:ca:77:d9:85:f4:
         c3:d3:0b:82:d8:3c:8b:9b:52:f9:5b:ec:e4:d7:c2:64:42:d4:
         e1:48:c7:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:08 2024 by rpki-client on console-fra.rpki-client.org