Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/3131352e3132342e37362e302f32342d3234203d3e203338353131.roa
File:                     3131352e3132342e37362e302f32342d3234203d3e203338353131.roa (raw, json)
Hash identifier:          QGad2fil065qU9zRQZzwad425yKeutZ+RJei5BQ7C5M=
Subject key identifier:   26:70:34:8A:CC:8B:63:26:30:31:21:6C:A7:8C:3A:EB:58:9C:49:9F
Certificate issuer:       /CN=9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F
Certificate serial:       43C19F6A2744F5CE53B8713BC5BFE342AD341F40
Authority key identifier: 91:69:B9:B6:52:6C:D1:49:84:DD:E3:A4:2E:24:DD:8F:E7:AB:C1:7F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/3131352e3132342e37362e302f32342d3234203d3e203338353131.roa
Signing time:             Thu 20 May 2021 12:06:51 +0000
ROA not before:           Thu 20 May 2021 12:01:51 +0000
ROA not after:            Fri 20 May 2022 12:06:51 +0000
asID:                     38511
IP address blocks:        115.124.76.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:c1:9f:6a:27:44:f5:ce:53:b8:71:3b:c5:bf:e3:42:ad:34:1f:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F
        Validity
            Not Before: May 20 12:01:51 2021 GMT
            Not After : May 20 12:06:51 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:6f:70:84:c5:a9:a9:8b:d1:4a:e7:33:86:4f:
                    cc:b7:42:1b:d2:90:60:01:7a:c8:05:9c:bd:b3:c0:
                    54:db:2f:df:8d:d3:c0:fe:10:c9:2d:12:6d:a3:f9:
                    41:43:ed:53:f6:8c:37:b4:e0:70:d3:b3:d6:e6:44:
                    2f:5f:2e:7e:5a:aa:9b:f6:ed:f6:00:33:81:b3:e8:
                    19:4a:b6:d6:4f:0a:85:07:1a:a9:ed:ca:1d:bc:d4:
                    94:2c:7d:17:a2:1b:1b:fb:49:29:a8:ed:99:03:4a:
                    fb:2a:50:40:e3:43:3f:ed:3a:6b:47:02:09:9f:54:
                    9f:8a:f7:e7:56:56:7a:bc:d0:a4:26:15:95:45:b1:
                    79:04:26:3d:61:2b:aa:94:2c:8c:ba:45:7d:3f:3e:
                    2c:62:3d:7d:2d:85:0b:11:64:e3:a7:fb:a5:c1:27:
                    5a:09:78:83:6a:20:3a:9a:59:0f:ae:ba:83:7d:7c:
                    dc:5f:84:8e:96:9b:cd:21:97:30:c1:b0:ee:4c:20:
                    af:f9:e2:2e:a9:5c:68:52:91:cb:80:6a:69:aa:0f:
                    bf:ca:fa:0e:4e:fd:41:2b:4b:ca:0d:ce:b9:a0:fd:
                    bf:b0:af:44:d8:32:17:9b:46:9f:78:6f:0b:e1:5a:
                    1d:f0:84:f1:e3:59:58:89:32:39:e8:92:43:89:f1:
                    f4:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:70:34:8A:CC:8B:63:26:30:31:21:6C:A7:8C:3A:EB:58:9C:49:9F
            X509v3 Authority Key Identifier:
                keyid:91:69:B9:B6:52:6C:D1:49:84:DD:E3:A4:2E:24:DD:8F:E7:AB:C1:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/3131352e3132342e37362e302f32342d3234203d3e203338353131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.124.76.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:e9:b0:64:b5:60:b3:f6:98:fc:03:4c:c9:f8:d4:5e:f2:36:
         84:a2:c0:f3:7d:10:ce:9d:7d:b5:1f:18:09:a8:e6:92:ed:32:
         f0:a2:78:03:e6:57:7b:30:f3:e7:dd:d2:00:e9:a9:4e:3e:a0:
         0a:0d:28:b8:ef:c3:73:a8:08:f2:0c:fc:e7:a3:0f:4d:61:52:
         66:7e:ff:24:6e:8c:63:ba:9e:56:39:7c:0a:64:22:a8:09:33:
         5e:e2:d7:db:e6:dc:f6:11:fa:c5:ba:d4:7e:62:50:d0:87:e0:
         dd:3e:45:1c:b7:af:ba:41:4b:13:cd:b3:94:a3:8c:a0:d5:de:
         82:74:19:50:c0:38:a9:46:04:3f:5b:b8:3b:e7:0b:e5:02:b3:
         a6:e1:e7:b6:5e:90:3f:ac:af:47:48:df:1b:e5:e4:7c:45:82:
         24:2a:99:22:ca:5a:90:b1:7d:ac:ca:d1:0a:cf:a0:57:15:28:
         7e:10:49:35:e0:80:50:56:35:ec:0d:4b:04:fb:15:22:3b:40:
         27:cb:5c:c2:a6:c3:8a:dc:d7:ea:55:ea:8f:f5:c9:34:22:ea:
         67:b2:a2:6f:ec:cd:e6:38:0d:d0:bb:68:9e:fe:e8:e9:f9:51:
         22:e5:0e:b0:3a:36:65:a3:83:9b:e7:46:4e:be:d9:39:7c:6f:
         35:0a:1f:a4
-----BEGIN CERTIFICATE-----
MIIHJDCCBgygAwIBAgIUQ8GfaidE9c5TuHE7xb/jQq00H0AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTE2OUI5QjY1MjZDRDE0OTg0RERFM0E0MkUyNEREOEZF
N0FCQzE3RjAeFw0yMTA1MjAxMjAxNTFaFw0yMjA1MjAxMjA2NTFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQUU2RjcwODRDNUE5QTk4QkQx
NEFFNzMzODY0RkNDQjc0MjFCRDI5MDYwMDE3QUM4MDU5Q0JEQjNDMDU0REIyRkRG
OEREM0MwRkUxMEM5MkQxMjZEQTNGOTQxNDNFRDUzRjY4QzM3QjRFMDcwRDNCM0Q2
RTY0NDJGNUYyRTdFNUFBQTlCRjZFREY2MDAzMzgxQjNFODE5NEFCNkQ2NEYwQTg1
MDcxQUE5RURDQTFEQkNENDk0MkM3RDE3QTIxQjFCRkI0OTI5QThFRDk5MDM0QUZC
MkE1MDQwRTM0MzNGRUQzQTZCNDcwMjA5OUY1NDlGOEFGN0U3NTY1NjdBQkNEMEE0
MjYxNTk1NDVCMTc5MDQyNjNENjEyQkFBOTQyQzhDQkE0NTdEM0YzRTJDNjIzRDdE
MkQ4NTBCMTE2NEUzQTdGQkE1QzEyNzVBMDk3ODgzNkEyMDNBOUE1OTBGQUVCQTgz
N0Q3Q0RDNUY4NDhFOTY5QkNEMjE5NzMwQzFCMEVFNEMyMEFGRjlFMjJFQTk1QzY4
NTI5MUNCODA2QTY5QUEwRkJGQ0FGQTBFNEVGRDQxMkI0QkNBMERDRUI5QTBGREJG
QjBBRjQ0RDgzMjE3OUI0NjlGNzg2RjBCRTE1QTFERjA4NEYxRTM1OTU4ODkzMjM5
RTg5MjQzODlGMUY0OTkwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEArm9whMWpqYvRSuczhk/Mt0Ib0pBgAXrIBZy9s8BU2y/fjdPA/hDJ
LRJto/lBQ+1T9ow3tOBw07PW5kQvXy5+Wqqb9u32ADOBs+gZSrbWTwqFBxqp7cod
vNSULH0Xohsb+0kpqO2ZA0r7KlBA40M/7TprRwIJn1SfivfnVlZ6vNCkJhWVRbF5
BCY9YSuqlCyMukV9Pz4sYj19LYULEWTjp/ulwSdaCXiDaiA6mlkPrrqDfXzcX4SO
lpvNIZcwwbDuTCCv+eIuqVxoUpHLgGppqg+/yvoOTv1BK0vKDc65oP2/sK9E2DIX
m0afeG8L4Vod8ITx41lYiTI56JJDifH0mQIDAQABo4ICMjCCAi4wHQYDVR0OBBYE
FCZwNIrMi2MmMDEhbKeMOutYnEmfMB8GA1UdIwQYMBaAFJFpubZSbNFJhN3jpC4k
3Y/nq8F/MA4GA1UdDwEB/wQEAwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODhmMjkxNWQtMThjOS00ZTAzLWJi
ZmItMjA3NGM1OTgwODk4LzAvOTE2OUI5QjY1MjZDRDE0OTg0RERFM0E0MkUyNERE
OEZFN0FCQzE3Ri5jcmwwdAYIKwYBBQUHAQEEaDBmMGQGCCsGAQUFBzAChlhyc3lu
YzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8yLzkxNjlCOUI2
NTI2Q0QxNDk4NERERTNBNDJFMjRERDhGRTdBQkMxN0YuY2VyMIGiBggrBgEFBQcB
CwSBlTCBkjCBjwYIKwYBBQUHMAuGgYJyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby84OGYyOTE1ZC0xOGM5LTRlMDMtYmJmYi0yMDc0YzU5ODA4OTgvMC8z
MTMxMzUyZTMxMzIzNDJlMzczNjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMzMzgz
NTMxMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBABzfEwwDQYJKoZIhvcNAQELBQADggEBAD7psGS1YLP2
mPwDTMn41F7yNoSiwPN9EM6dfbUfGAmo5pLtMvCieAPmV3sw8+fd0gDpqU4+oAoN
KLjvw3OoCPIM/OejD01hUmZ+/yRujGO6nlY5fApkIqgJM17i19vm3PYR+sW61H5i
UNCH4N0+RRy3r7pBSxPNs5SjjKDV3oJ0GVDAOKlGBD9buDvnC+UCs6bh57ZekD+s
r0dI3xvl5HxFgiQqmSLKWpCxfazK0QrPoFcVKH4QSTXggFBWNewNSwT7FSI7QCfL
XMKmw4rc1+pV6o/1yTQi6meyom/szeY4DdC7aJ7+6On5USLlDrA6NmWjg5vnRk6+
2Tl8bzUKH6Q=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:08 2024 by rpki-client on console-fra.rpki-client.org