Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/3131352e3132342e38372e302f32342d3234203d3e203338353131.roa
File:                     3131352e3132342e38372e302f32342d3234203d3e203338353131.roa (raw, json)
Hash identifier:          M3r7zkeRpEwpae/zUAk29/Hd6gHrs5JXv8UaUgNr2zo=
Subject key identifier:   9D:1B:D2:55:EF:B7:16:E6:3B:60:5F:65:9E:0A:9F:FD:B8:8B:05:49
Certificate issuer:       /CN=9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F
Certificate serial:       17EC8A1534F76E0C1FCD3F75DC4C21180DFDB5D5
Authority key identifier: 91:69:B9:B6:52:6C:D1:49:84:DD:E3:A4:2E:24:DD:8F:E7:AB:C1:7F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/3131352e3132342e38372e302f32342d3234203d3e203338353131.roa
Signing time:             Thu 20 May 2021 12:10:18 +0000
ROA not before:           Thu 20 May 2021 12:05:18 +0000
ROA not after:            Fri 20 May 2022 12:10:18 +0000
asID:                     38511
IP address blocks:        115.124.87.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:ec:8a:15:34:f7:6e:0c:1f:cd:3f:75:dc:4c:21:18:0d:fd:b5:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F
        Validity
            Not Before: May 20 12:05:18 2021 GMT
            Not After : May 20 12:10:18 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:00:e5:f5:c7:91:b4:14:4d:53:c3:84:2c:c7:
                    4a:ef:c1:d3:90:81:c7:6b:e1:8c:42:bd:d6:a2:9c:
                    ad:d4:d1:8c:21:a7:42:f6:c3:39:5c:af:e9:27:85:
                    f9:aa:cd:d4:0a:11:37:79:93:80:cc:54:31:d2:09:
                    77:49:7f:a9:e2:5c:c3:30:44:2c:7a:7c:d3:d6:dc:
                    23:87:8d:c3:a7:e8:aa:75:cf:c9:39:5d:83:b6:43:
                    be:88:bf:0e:ec:0d:23:83:65:62:06:c1:42:71:48:
                    95:08:c7:f8:90:b7:2b:d9:10:18:cf:8a:74:ff:75:
                    22:6c:2e:a7:7c:1d:8b:da:38:bc:a6:33:c7:b8:56:
                    cf:85:06:af:07:6f:db:eb:50:d5:6d:6e:bb:b6:a6:
                    7d:44:fc:d6:ac:a4:f7:e5:02:09:a7:d0:1f:e9:e4:
                    5b:c1:0b:17:66:4d:9b:98:34:49:e7:a8:83:ab:4f:
                    63:ea:ec:65:53:2c:8a:60:7a:c1:2f:2d:6b:83:c3:
                    20:bb:49:01:2e:e2:ed:89:c0:77:87:92:54:9d:9a:
                    6a:8a:c5:16:82:60:ce:17:3f:60:c5:ce:78:54:9c:
                    8f:27:68:84:c3:df:c5:40:46:4e:55:b7:83:53:d3:
                    3e:62:ec:82:70:91:3c:0d:df:dc:02:ff:ab:48:23:
                    f7:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:1B:D2:55:EF:B7:16:E6:3B:60:5F:65:9E:0A:9F:FD:B8:8B:05:49
            X509v3 Authority Key Identifier:
                keyid:91:69:B9:B6:52:6C:D1:49:84:DD:E3:A4:2E:24:DD:8F:E7:AB:C1:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/3131352e3132342e38372e302f32342d3234203d3e203338353131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.124.87.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4c:2b:9e:c7:ee:e4:6c:08:93:d2:a4:a7:b6:e7:6b:87:0d:b5:
         9c:b9:d4:ff:bc:2a:1a:51:51:7c:c6:d6:8b:77:79:79:35:d3:
         50:47:94:39:f3:6e:b6:f7:70:d3:08:a1:0b:25:5e:aa:d2:58:
         e8:30:43:23:b2:e5:21:e8:30:43:9b:08:c1:fb:43:60:04:66:
         a7:d8:c9:dd:84:36:34:e3:0b:7f:7b:15:c6:51:69:a9:77:0b:
         87:7e:c2:80:60:45:fa:12:d3:5d:58:a6:e2:0d:a3:ca:86:7c:
         b0:05:d5:4f:f4:b8:3f:1a:e6:8c:f9:ba:f0:14:88:4c:29:5e:
         02:18:10:2e:4b:f8:be:7e:85:3a:29:e6:dc:ad:4f:cb:e7:f7:
         2c:a0:9f:f5:f5:54:11:09:07:28:c9:38:16:1f:42:82:bf:a5:
         9f:bf:c9:a4:4b:81:2e:99:d4:29:08:8f:fe:d0:78:a0:99:fe:
         af:18:f5:ae:0d:06:b7:01:e1:96:70:7f:15:99:ca:ce:d4:f6:
         fb:32:f1:61:e9:65:91:ef:3b:79:80:8e:64:fb:86:c5:6b:56:
         de:68:0c:60:42:29:ab:45:7d:91:47:1d:0a:8c:63:9e:c3:0c:
         4a:66:2c:88:bd:2f:c0:81:aa:d7:6c:aa:d2:17:c0:99:8d:86:
         cb:d9:d8:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:41 2024 by rpki-client on console-ams.rpki-client.org