Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/3131352e3132342e37382e302f32342d3234203d3e203338353131.roa
File:                     3131352e3132342e37382e302f32342d3234203d3e203338353131.roa (raw, json)
Hash identifier:          6SYQqRxckQ+/URo8CrWSVKyVGeFwyj7ln6QhEb3YP8Q=
Subject key identifier:   F5:81:FA:79:D6:CF:EF:AF:56:39:73:52:42:99:38:67:3B:2B:D1:92
Certificate issuer:       /CN=9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F
Certificate serial:       76A6369F35910F629EFBED83151664CDF33F1106
Authority key identifier: 91:69:B9:B6:52:6C:D1:49:84:DD:E3:A4:2E:24:DD:8F:E7:AB:C1:7F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/3131352e3132342e37382e302f32342d3234203d3e203338353131.roa
Signing time:             Thu 20 May 2021 12:07:12 +0000
ROA not before:           Thu 20 May 2021 12:02:12 +0000
ROA not after:            Fri 20 May 2022 12:07:12 +0000
asID:                     38511
IP address blocks:        115.124.78.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:a6:36:9f:35:91:0f:62:9e:fb:ed:83:15:16:64:cd:f3:3f:11:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F
        Validity
            Not Before: May 20 12:02:12 2021 GMT
            Not After : May 20 12:07:12 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:5b:42:9d:59:09:ac:e3:22:84:d1:30:f8:a8:
                    a2:12:96:c2:81:11:44:39:57:f2:e5:a6:82:28:dd:
                    34:3f:c7:9c:09:ad:12:7f:10:b0:22:11:49:ce:6b:
                    72:e6:5b:2d:a5:59:cc:ce:25:68:fa:b9:ae:13:d7:
                    63:fc:6b:83:22:86:5e:de:03:f4:46:9d:3e:c7:b9:
                    dc:01:67:b6:28:e5:f6:26:47:20:4d:8d:b8:c4:63:
                    87:b4:82:7f:24:95:53:58:8b:f0:11:00:5e:78:c3:
                    27:7b:25:65:72:01:78:91:ff:32:cc:28:36:fa:6e:
                    c4:53:ea:39:68:f0:d4:3a:25:37:c6:e3:7f:28:92:
                    a4:bf:c9:2f:08:68:99:b4:30:6a:d7:6a:39:c6:b3:
                    b6:47:9e:b6:2c:5a:e0:9b:58:1b:fc:35:84:2c:03:
                    1b:19:84:71:0a:65:29:aa:8d:b2:23:ab:7b:7e:66:
                    a3:db:e0:fe:5d:7e:08:57:10:d0:20:64:bc:6b:88:
                    37:61:89:2e:05:5a:cf:ee:e4:b6:2e:33:34:b5:be:
                    2f:b8:94:b9:01:ea:33:7c:22:02:b9:97:6b:e9:e2:
                    c0:a5:62:44:e8:95:df:de:96:a9:00:21:06:bc:77:
                    95:81:1b:d6:a8:60:77:bf:62:9a:b2:3b:84:29:ef:
                    cf:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:81:FA:79:D6:CF:EF:AF:56:39:73:52:42:99:38:67:3B:2B:D1:92
            X509v3 Authority Key Identifier:
                keyid:91:69:B9:B6:52:6C:D1:49:84:DD:E3:A4:2E:24:DD:8F:E7:AB:C1:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/3131352e3132342e37382e302f32342d3234203d3e203338353131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.124.78.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c2:04:c5:e7:f5:7f:e7:fe:3e:d4:4a:f5:ae:9d:bb:b7:36:00:
         b3:a0:4e:0c:52:07:d9:ca:f9:3a:e7:61:75:17:c0:41:82:eb:
         13:23:60:6f:b2:82:fd:c1:24:c6:2a:60:20:2e:c2:fd:79:05:
         51:ed:88:a4:97:6d:fd:e4:3a:59:e0:2e:87:5f:48:1f:57:98:
         a0:cc:95:fc:6e:0c:85:c2:06:66:90:d4:42:47:aa:a0:87:48:
         ef:61:29:c1:45:27:7d:6a:af:4a:ec:1c:86:16:42:a6:c8:b3:
         0a:5c:e9:27:05:d0:84:c4:ce:05:67:0b:cf:15:c0:37:70:6a:
         8d:bd:a5:b9:eb:74:4e:aa:78:f8:69:c3:f3:a6:25:58:cc:25:
         16:e3:bf:e7:96:ec:06:a7:0f:50:87:67:4f:8c:cf:57:63:97:
         2f:ea:cf:83:34:ca:a4:42:68:00:99:af:4a:fb:f8:96:dd:2c:
         c1:b8:d9:94:f0:96:80:eb:4d:d6:a2:ef:3a:b2:71:73:8e:11:
         fb:de:10:d3:82:32:ab:56:b4:30:bd:e3:88:6e:a3:8e:fa:c6:
         d4:3a:3d:a5:c0:2e:0b:01:f9:1b:28:21:3a:87:64:4c:ad:74:
         0d:15:ef:44:19:f1:2d:1b:aa:a3:7c:0d:74:48:21:44:65:5f:
         70:6b:bb:d2
-----BEGIN CERTIFICATE-----
MIIHJDCCBgygAwIBAgIUdqY2nzWRD2Ke++2DFRZkzfM/EQYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTE2OUI5QjY1MjZDRDE0OTg0RERFM0E0MkUyNEREOEZF
N0FCQzE3RjAeFw0yMTA1MjAxMjAyMTJaFw0yMjA1MjAxMjA3MTJaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkI1QjQyOUQ1OTA5QUNFMzIy
ODREMTMwRjhBOEEyMTI5NkMyODExMTQ0Mzk1N0YyRTVBNjgyMjhERDM0M0ZDNzlD
MDlBRDEyN0YxMEIwMjIxMTQ5Q0U2QjcyRTY1QjJEQTU1OUNDQ0UyNTY4RkFCOUFF
MTNENzYzRkM2QjgzMjI4NjVFREUwM0Y0NDY5RDNFQzdCOURDMDE2N0I2MjhFNUY2
MjY0NzIwNEQ4REI4QzQ2Mzg3QjQ4MjdGMjQ5NTUzNTg4QkYwMTEwMDVFNzhDMzI3
N0IyNTY1NzIwMTc4OTFGRjMyQ0MyODM2RkE2RUM0NTNFQTM5NjhGMEQ0M0EyNTM3
QzZFMzdGMjg5MkE0QkZDOTJGMDg2ODk5QjQzMDZBRDc2QTM5QzZCM0I2NDc5RUI2
MkM1QUUwOUI1ODFCRkMzNTg0MkMwMzFCMTk4NDcxMEE2NTI5QUE4REIyMjNBQjdC
N0U2NkEzREJFMEZFNUQ3RTA4NTcxMEQwMjA2NEJDNkI4ODM3NjE4OTJFMDU1QUNG
RUVFNEI2MkUzMzM0QjVCRTJGQjg5NEI5MDFFQTMzN0MyMjAyQjk5NzZCRTlFMkMw
QTU2MjQ0RTg5NURGREU5NkE5MDAyMTA2QkM3Nzk1ODExQkQ2QTg2MDc3QkY2MjlB
QjIzQjg0MjlFRkNGRkQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAu1tCnVkJrOMihNEw+KiiEpbCgRFEOVfy5aaCKN00P8ecCa0SfxCw
IhFJzmty5lstpVnMziVo+rmuE9dj/GuDIoZe3gP0Rp0+x7ncAWe2KOX2JkcgTY24
xGOHtIJ/JJVTWIvwEQBeeMMneyVlcgF4kf8yzCg2+m7EU+o5aPDUOiU3xuN/KJKk
v8kvCGiZtDBq12o5xrO2R562LFrgm1gb/DWELAMbGYRxCmUpqo2yI6t7fmaj2+D+
XX4IVxDQIGS8a4g3YYkuBVrP7uS2LjM0tb4vuJS5AeozfCICuZdr6eLApWJE6JXf
3papACEGvHeVgRvWqGB3v2KasjuEKe/P/QIDAQABo4ICMjCCAi4wHQYDVR0OBBYE
FPWB+nnWz++vVjlzUkKZOGc7K9GSMB8GA1UdIwQYMBaAFJFpubZSbNFJhN3jpC4k
3Y/nq8F/MA4GA1UdDwEB/wQEAwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODhmMjkxNWQtMThjOS00ZTAzLWJi
ZmItMjA3NGM1OTgwODk4LzAvOTE2OUI5QjY1MjZDRDE0OTg0RERFM0E0MkUyNERE
OEZFN0FCQzE3Ri5jcmwwdAYIKwYBBQUHAQEEaDBmMGQGCCsGAQUFBzAChlhyc3lu
YzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8yLzkxNjlCOUI2
NTI2Q0QxNDk4NERERTNBNDJFMjRERDhGRTdBQkMxN0YuY2VyMIGiBggrBgEFBQcB
CwSBlTCBkjCBjwYIKwYBBQUHMAuGgYJyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby84OGYyOTE1ZC0xOGM5LTRlMDMtYmJmYi0yMDc0YzU5ODA4OTgvMC8z
MTMxMzUyZTMxMzIzNDJlMzczODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMzMzgz
NTMxMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBABzfE4wDQYJKoZIhvcNAQELBQADggEBAMIExef1f+f+
PtRK9a6du7c2ALOgTgxSB9nK+TrnYXUXwEGC6xMjYG+ygv3BJMYqYCAuwv15BVHt
iKSXbf3kOlngLodfSB9XmKDMlfxuDIXCBmaQ1EJHqqCHSO9hKcFFJ31qr0rsHIYW
QqbIswpc6ScF0ITEzgVnC88VwDdwao29pbnrdE6qePhpw/OmJVjMJRbjv+eW7Aan
D1CHZ0+Mz1djly/qz4M0yqRCaACZr0r7+JbdLMG42ZTwloDrTdai7zqycXOOEfve
ENOCMqtWtDC944huo476xtQ6PaXALgsB+RsoITqHZEytdA0V70QZ8S0bqqN8DXRI
IURlX3Bru9I=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:08 2024 by rpki-client on console-fra.rpki-client.org