Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/3131352e3132342e38352e302f32342d3234203d3e203338353131.roa
File:                     3131352e3132342e38352e302f32342d3234203d3e203338353131.roa (raw, json)
Hash identifier:          zETAbEaD3zIZYYe70HYfm5BFTobECuW/dIeM3Npc8Vc=
Subject key identifier:   6A:4E:E4:6A:33:6E:1B:B2:99:24:2E:A7:52:C0:C8:98:5C:D6:72:1F
Certificate issuer:       /CN=9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F
Certificate serial:       48FEE2BD9D8A4C365CF6AC98301C0838CE553DAE
Authority key identifier: 91:69:B9:B6:52:6C:D1:49:84:DD:E3:A4:2E:24:DD:8F:E7:AB:C1:7F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/3131352e3132342e38352e302f32342d3234203d3e203338353131.roa
Signing time:             Wed 23 Feb 2022 02:00:01 +0000
ROA not before:           Wed 23 Feb 2022 01:55:01 +0000
ROA not after:            Thu 23 Feb 2023 02:00:01 +0000
asID:                     38511
IP address blocks:        115.124.85.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:fe:e2:bd:9d:8a:4c:36:5c:f6:ac:98:30:1c:08:38:ce:55:3d:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F
        Validity
            Not Before: Feb 23 01:55:01 2022 GMT
            Not After : Feb 23 02:00:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:18:57:bf:49:cf:cc:7f:35:45:12:94:ee:35:
                    27:7b:1d:01:5a:5b:7f:34:2c:13:13:b7:e0:21:4b:
                    89:f7:62:11:42:2b:b3:69:79:b9:39:1b:bb:7c:6a:
                    97:f1:e8:4e:8e:d8:20:95:d6:33:da:e3:cd:60:0f:
                    69:61:6d:5b:a2:73:8a:d2:14:ba:75:91:ee:04:85:
                    c0:04:ab:8b:ea:27:b1:70:f8:5c:4e:0e:2d:20:cb:
                    fc:74:a5:b9:83:18:3c:66:ff:bb:de:f4:e8:3f:19:
                    e0:bd:39:fc:fe:9c:34:55:e1:7a:21:7b:aa:0d:a3:
                    5f:80:30:95:32:04:bd:85:bc:fa:b5:ee:a5:86:e4:
                    84:26:d0:b5:75:a1:c8:c9:62:f3:db:86:cd:f4:c8:
                    c9:ba:7b:9f:3c:53:8f:e4:1c:62:e5:a9:7c:f2:5f:
                    74:e5:4d:d7:89:de:3c:e5:8e:1a:6b:84:aa:f7:be:
                    cf:1d:d9:75:42:43:9d:d8:be:11:7c:31:7c:b9:80:
                    12:c3:44:24:49:47:9b:f1:39:d7:be:8e:de:77:b5:
                    98:c4:e7:71:ce:4f:79:51:e1:26:d2:6c:f0:51:89:
                    01:3e:a5:c5:5e:16:f4:40:3d:a6:15:61:db:da:4a:
                    27:22:bc:90:76:72:2c:b6:40:6a:33:61:20:1d:e7:
                    43:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:4E:E4:6A:33:6E:1B:B2:99:24:2E:A7:52:C0:C8:98:5C:D6:72:1F
            X509v3 Authority Key Identifier:
                keyid:91:69:B9:B6:52:6C:D1:49:84:DD:E3:A4:2E:24:DD:8F:E7:AB:C1:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/3131352e3132342e38352e302f32342d3234203d3e203338353131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.124.85.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5b:25:41:c3:3d:65:84:a2:3e:64:86:4c:e6:55:17:80:31:11:
         07:43:93:8e:49:78:72:bd:3c:5e:81:8d:56:8f:aa:3f:e9:98:
         1e:e8:5f:d7:78:d4:77:93:98:c3:3c:f1:4a:b8:12:1d:60:38:
         32:0b:78:01:5b:5b:04:cb:ca:15:69:f5:57:9d:f5:52:a7:1a:
         c1:78:a5:c2:79:dc:ce:65:fa:cb:e3:f5:6a:fa:7c:c3:1b:5a:
         fd:e9:15:29:3b:ea:db:ac:11:99:0e:9a:06:88:02:ce:9a:e2:
         71:6b:04:4c:d8:68:e3:0e:8e:e2:63:f5:b1:3e:ea:3f:0e:f4:
         77:3a:df:71:53:6d:e4:bd:26:41:06:3d:18:df:4f:6c:7f:dd:
         d4:1b:af:86:06:9a:c7:a8:1c:e3:f2:80:4a:3c:5c:86:0f:c6:
         e4:50:5f:86:ed:0e:00:03:91:87:12:8a:f1:6a:90:32:bd:5c:
         e0:82:92:b4:0a:94:33:8e:29:0b:d1:d2:44:d3:ee:c0:fb:4c:
         6d:3a:db:fa:48:cb:5e:dc:4c:ba:9b:4a:0c:15:f5:89:90:a7:
         9b:53:c2:a5:4b:57:f7:12:9f:e9:c8:22:04:cd:1d:a0:bb:80:
         84:2b:ff:13:68:f5:11:35:de:81:33:0e:86:f7:d2:65:c9:8a:
         e4:67:70:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:08 2024 by rpki-client on console-fra.rpki-client.org