Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/3131352e3132342e38362e302f32332d3233203d3e203338353131.roa
File:                     3131352e3132342e38362e302f32332d3233203d3e203338353131.roa (raw, json)
Hash identifier:          METlQGbAmIpatiRvLDsvq7B0/Db322ThEcc0CdqiwWA=
Subject key identifier:   A1:19:CD:7A:B5:45:F3:09:67:1D:3D:66:DD:95:DD:50:A4:55:B1:B3
Certificate issuer:       /CN=9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F
Certificate serial:       6278F30CB52742877CD30964AD96A9B0865ECDC9
Authority key identifier: 91:69:B9:B6:52:6C:D1:49:84:DD:E3:A4:2E:24:DD:8F:E7:AB:C1:7F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/3131352e3132342e38362e302f32332d3233203d3e203338353131.roa
Signing time:             Wed 23 Feb 2022 02:00:00 +0000
ROA not before:           Wed 23 Feb 2022 01:55:00 +0000
ROA not after:            Thu 23 Feb 2023 02:00:00 +0000
asID:                     38511
IP address blocks:        115.124.86.0/23 maxlen: 23

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:78:f3:0c:b5:27:42:87:7c:d3:09:64:ad:96:a9:b0:86:5e:cd:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F
        Validity
            Not Before: Feb 23 01:55:00 2022 GMT
            Not After : Feb 23 02:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:5b:4a:25:7d:df:3e:15:04:a5:80:85:58:fa:
                    dc:20:46:1d:8d:8c:d9:2f:f3:0a:16:b3:4c:c9:ce:
                    f0:0c:27:04:e5:4c:d8:93:2c:e4:1f:de:2c:6f:80:
                    b8:d8:e4:d0:90:11:a1:68:20:56:da:71:28:7c:ee:
                    f1:e7:1e:22:02:64:5d:a1:f0:2f:00:10:25:a1:b5:
                    fe:c1:44:7b:03:44:95:34:29:b0:f5:ca:41:dc:b0:
                    05:c5:56:07:8e:7d:d3:1a:57:8b:e5:05:3f:8e:ca:
                    37:22:cf:40:cb:6b:20:bf:de:80:91:e1:09:45:47:
                    e7:8b:63:c1:69:18:65:37:22:bc:a9:d9:59:06:48:
                    dc:c2:bd:9f:d0:61:51:6b:5a:4d:3f:f6:46:6b:87:
                    83:a6:0d:80:35:c3:9a:df:8d:95:b2:d7:53:c6:e1:
                    16:f8:26:57:78:62:9e:40:56:09:12:1d:f8:6f:07:
                    bf:7a:1a:75:81:d4:97:bb:84:cc:a7:47:27:a5:28:
                    c4:a1:a7:61:ba:09:3f:39:33:c9:e1:11:74:08:21:
                    71:29:3e:7d:d4:e2:1a:b7:56:65:38:e7:00:b0:18:
                    fe:59:dc:c7:bc:ff:d9:0d:b3:15:35:74:59:f9:38:
                    8f:55:c2:82:92:95:29:8d:26:cf:24:37:8a:89:83:
                    b7:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:19:CD:7A:B5:45:F3:09:67:1D:3D:66:DD:95:DD:50:A4:55:B1:B3
            X509v3 Authority Key Identifier:
                keyid:91:69:B9:B6:52:6C:D1:49:84:DD:E3:A4:2E:24:DD:8F:E7:AB:C1:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/3131352e3132342e38362e302f32332d3233203d3e203338353131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.124.86.0/23

    Signature Algorithm: sha256WithRSAEncryption
         54:0a:08:51:27:b2:c8:e9:ec:71:0d:cc:c7:dc:5b:e5:4f:1b:
         da:6a:53:c4:2f:8f:c3:10:bd:56:7a:2f:4c:55:da:ec:c5:9a:
         cf:d2:db:15:1a:2f:71:eb:7e:97:62:15:80:4c:fb:26:9f:2d:
         d9:ce:d1:8b:56:fa:17:4a:b6:5f:76:7d:66:3a:b7:c4:3b:e0:
         2f:0e:82:3d:a5:90:ab:69:4e:09:3f:36:d6:e7:2f:a1:e8:e9:
         20:29:53:6b:13:e8:39:ab:6c:f1:85:16:6b:c8:94:f9:dc:61:
         85:37:d9:58:37:99:f0:2c:99:a2:34:38:ee:3d:21:44:91:ec:
         42:d8:73:46:9a:18:9a:68:1d:e3:9c:3d:c5:c0:3a:0b:d7:29:
         13:af:66:16:f4:8d:24:63:e8:e1:82:d8:6f:66:12:cd:a1:38:
         d1:dc:92:67:c3:56:f3:0f:02:4f:89:2d:9b:5d:f8:91:2f:4b:
         bb:fb:f1:d5:3f:7f:af:55:5c:6d:6e:71:ab:42:6b:c8:88:20:
         1f:03:27:8b:6a:e9:13:17:79:5a:83:bb:9e:4d:73:d3:b7:04:
         90:69:ca:59:69:75:8d:6e:a6:3e:34:fd:be:7e:34:89:0d:6b:
         9c:49:6f:1e:11:a7:38:b4:06:7f:4d:29:69:5a:ff:70:5f:b7:
         88:11:85:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:41 2024 by rpki-client on console-ams.rpki-client.org