Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/3131352e3132342e37372e302f32342d3234203d3e203338353131.roa
File:                     3131352e3132342e37372e302f32342d3234203d3e203338353131.roa (raw, json)
Hash identifier:          8ChsGgtDb3XSMB4dneGD8V9Xg4i6snUDbJmPrRzi7ME=
Subject key identifier:   AC:BF:1C:2B:E2:31:9B:25:8D:79:75:59:E1:1B:49:59:34:66:FF:CB
Certificate issuer:       /CN=9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F
Certificate serial:       6D7F43562DA3CF15CC73259664CA0F54C24012FF
Authority key identifier: 91:69:B9:B6:52:6C:D1:49:84:DD:E3:A4:2E:24:DD:8F:E7:AB:C1:7F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/3131352e3132342e37372e302f32342d3234203d3e203338353131.roa
Signing time:             Thu 20 May 2021 12:07:01 +0000
ROA not before:           Thu 20 May 2021 12:02:01 +0000
ROA not after:            Fri 20 May 2022 12:07:01 +0000
asID:                     38511
IP address blocks:        115.124.77.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:7f:43:56:2d:a3:cf:15:cc:73:25:96:64:ca:0f:54:c2:40:12:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F
        Validity
            Not Before: May 20 12:02:01 2021 GMT
            Not After : May 20 12:07:01 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:51:0e:fb:a3:46:47:f6:d8:d8:61:bd:4a:4a:
                    9b:a0:68:4b:d1:17:f3:d1:07:06:1a:6a:da:31:91:
                    50:33:bf:42:21:90:95:3d:73:45:0f:56:cf:89:b1:
                    cd:e7:82:d3:ff:5f:11:0d:dc:c0:70:6c:48:79:62:
                    44:1e:eb:32:46:6a:c2:24:15:c5:3a:8c:5b:44:02:
                    27:d3:c0:19:ae:28:ca:28:ed:09:a5:9c:cb:9f:d0:
                    02:24:ef:c8:3c:42:3b:69:0c:74:2a:2f:76:1e:80:
                    16:23:df:c0:b0:aa:ac:3f:72:d8:83:70:8f:4b:d8:
                    72:cf:41:f5:a7:6b:b2:ca:2c:e4:f0:81:00:3c:24:
                    4b:0e:8c:3c:95:76:52:7d:c9:18:41:b5:6c:15:79:
                    dd:b9:8d:7c:3f:6f:99:87:ee:3b:6f:a1:77:a0:6e:
                    cb:d8:7c:11:c2:12:8a:20:28:bb:65:ce:2c:7f:6b:
                    3e:b2:b1:49:77:12:ec:ea:18:1f:51:1c:ea:c1:54:
                    5d:a8:47:a5:54:92:75:38:cd:b6:d0:a0:f0:33:5f:
                    a1:eb:f9:79:8a:23:39:5c:aa:b6:5c:8e:90:8e:f9:
                    bb:49:fd:21:65:1e:7f:d2:38:15:f6:0a:df:bd:8a:
                    60:87:00:0c:b7:46:4f:52:a7:b6:9a:e1:2d:2f:2f:
                    d0:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:BF:1C:2B:E2:31:9B:25:8D:79:75:59:E1:1B:49:59:34:66:FF:CB
            X509v3 Authority Key Identifier:
                keyid:91:69:B9:B6:52:6C:D1:49:84:DD:E3:A4:2E:24:DD:8F:E7:AB:C1:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/3131352e3132342e37372e302f32342d3234203d3e203338353131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.124.77.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:84:16:98:3d:92:29:8f:0d:e5:98:5d:7e:2b:70:46:a3:73:
         13:2b:57:e9:ed:eb:4a:f1:56:aa:7b:30:f5:d9:e2:c3:61:03:
         50:b2:31:50:42:a3:45:25:f5:e4:c6:4b:f9:5b:82:68:d5:bf:
         99:c8:87:63:e4:cc:bc:ae:58:87:35:e2:07:25:6e:1c:63:41:
         54:20:c7:49:af:6c:23:17:02:8f:ae:f8:e3:ee:bd:97:ff:e1:
         81:bc:bf:0d:1d:d9:99:97:23:dd:15:1c:9e:cd:7f:66:15:4c:
         45:e3:46:72:a0:71:ba:cc:a1:66:6a:43:8c:c0:8e:8b:46:13:
         e9:53:ee:9d:90:12:f9:55:7e:c0:4d:f2:34:16:2a:3e:cf:3b:
         7c:c8:ab:60:61:ed:43:43:b2:b2:44:5f:32:c5:21:fb:e0:bc:
         e3:69:f9:3f:5b:80:b0:5e:cd:c8:0c:0a:b0:9a:be:ef:0f:bd:
         3a:46:f7:25:d5:b7:ff:fa:7d:c1:42:cc:81:56:e9:39:fd:72:
         01:18:a3:bb:5f:d8:cf:59:f2:e4:91:28:0d:af:9f:e9:a8:56:
         bf:cd:b6:f7:a1:a8:04:d5:5b:4f:8e:a4:4d:02:4a:54:20:9c:
         a1:b2:82:13:7b:6c:aa:eb:0c:f8:36:3f:34:93:4a:3d:8f:70:
         39:76:51:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:41 2024 by rpki-client on console-ams.rpki-client.org