Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/3131352e3132342e38382e302f32342d3234203d3e203338353131.roa
File:                     3131352e3132342e38382e302f32342d3234203d3e203338353131.roa (raw, json)
Hash identifier:          XF29L3ZALl+L+FQcsSdnNmEZR7oUu55dsPwq4rRBXbQ=
Subject key identifier:   19:5E:33:97:9C:45:96:A5:14:07:F4:F6:E1:13:1C:5E:E6:8F:11:23
Certificate issuer:       /CN=9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F
Certificate serial:       6BE6B1846FE6DF2B852FE8D5612000EB3DC471BE
Authority key identifier: 91:69:B9:B6:52:6C:D1:49:84:DD:E3:A4:2E:24:DD:8F:E7:AB:C1:7F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/3131352e3132342e38382e302f32342d3234203d3e203338353131.roa
Signing time:             Thu 20 May 2021 12:10:37 +0000
ROA not before:           Thu 20 May 2021 12:05:37 +0000
ROA not after:            Fri 20 May 2022 12:10:37 +0000
asID:                     38511
IP address blocks:        115.124.88.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:e6:b1:84:6f:e6:df:2b:85:2f:e8:d5:61:20:00:eb:3d:c4:71:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F
        Validity
            Not Before: May 20 12:05:37 2021 GMT
            Not After : May 20 12:10:37 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:4a:79:e0:8f:e0:68:1f:e3:19:7a:89:51:59:
                    a7:a1:f9:97:a0:4d:bc:b7:76:a2:cb:06:77:94:a6:
                    de:d9:f2:86:f9:ee:c7:6f:fb:b2:13:7e:6e:31:a0:
                    16:17:f9:77:c1:0b:e1:4a:bf:7a:c0:cf:c7:c4:38:
                    12:4c:ec:13:76:6b:1d:e9:72:ca:2c:3d:57:34:bd:
                    a6:d4:90:89:a5:48:e6:8d:55:3b:f7:a4:7a:92:e3:
                    5a:ed:e6:32:d4:e8:6a:75:43:df:7c:7c:dd:df:2d:
                    f1:c9:c1:43:8a:de:95:fb:85:6a:af:e2:2e:29:f1:
                    24:a4:c5:76:38:f8:38:b6:34:b2:27:ac:06:c1:4a:
                    b0:26:d0:f1:f4:42:c0:98:24:95:bc:cc:ef:bf:ac:
                    5a:74:14:15:df:ac:b8:37:5a:9c:fc:c4:d4:6e:8e:
                    1d:d3:3f:00:68:a0:4e:32:d0:ca:b7:87:5a:ae:ab:
                    43:2b:e3:e3:c4:cc:40:7e:67:d7:50:35:1a:ff:cd:
                    6c:9f:8f:e2:a6:5c:7b:df:47:c8:51:61:74:33:81:
                    91:49:74:97:19:af:f1:63:23:24:81:c8:57:bf:bb:
                    41:09:c7:19:4c:a0:0b:58:3e:4f:42:2d:bd:5d:0a:
                    f5:07:58:54:bf:87:47:ef:3c:8a:d8:b6:d5:73:21:
                    d0:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:5E:33:97:9C:45:96:A5:14:07:F4:F6:E1:13:1C:5E:E6:8F:11:23
            X509v3 Authority Key Identifier:
                keyid:91:69:B9:B6:52:6C:D1:49:84:DD:E3:A4:2E:24:DD:8F:E7:AB:C1:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/3131352e3132342e38382e302f32342d3234203d3e203338353131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.124.88.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:15:97:c7:85:73:bb:59:79:2c:1b:8b:e1:dc:05:fa:95:9f:
         2d:41:af:3e:0c:a5:c9:bc:db:93:5b:be:c7:d7:33:08:5d:f3:
         c4:fb:e5:3b:6b:2b:ab:ca:4e:9d:fd:89:cd:46:2f:ab:32:97:
         83:de:5d:29:c5:a5:27:07:57:e8:bb:2f:d8:97:0c:19:37:3d:
         36:d1:34:a8:12:b8:a0:5e:65:91:22:58:96:6d:97:c4:ed:3b:
         f5:a7:3d:23:c3:62:be:42:48:36:f0:fc:4f:43:ac:90:75:98:
         9b:71:10:cc:01:8d:11:64:24:34:ce:96:34:8b:58:40:f7:65:
         be:27:cb:e5:01:b0:02:c6:cf:78:8c:66:f5:56:5b:61:ac:f1:
         8f:ed:6b:d4:e5:fd:0f:86:2b:5b:20:43:65:2a:70:21:b4:49:
         1e:b1:5c:88:a1:05:b0:b0:bc:fd:71:d8:3d:15:b5:6f:90:96:
         90:65:74:72:63:14:4e:e6:60:d6:07:54:83:5a:96:1a:ad:b8:
         ca:73:7e:af:fc:0e:30:36:89:0e:62:6d:bd:bb:8a:d4:dd:9b:
         2e:b7:b2:b7:fc:b8:b4:36:0b:78:20:6d:ce:1e:bb:4a:fb:f0:
         13:12:64:74:f0:d2:cc:32:79:ed:04:7e:42:5f:52:38:e4:01:
         e1:8e:91:48
-----BEGIN CERTIFICATE-----
MIIHJDCCBgygAwIBAgIUa+axhG/m3yuFL+jVYSAA6z3Ecb4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTE2OUI5QjY1MjZDRDE0OTg0RERFM0E0MkUyNEREOEZF
N0FCQzE3RjAeFw0yMTA1MjAxMjA1MzdaFw0yMjA1MjAxMjEwMzdaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQUQ0QTc5RTA4RkUwNjgxRkUz
MTk3QTg5NTE1OUE3QTFGOTk3QTA0REJDQjc3NkEyQ0IwNjc3OTRBNkRFRDlGMjg2
RjlFRUM3NkZGQkIyMTM3RTZFMzFBMDE2MTdGOTc3QzEwQkUxNEFCRjdBQzBDRkM3
QzQzODEyNENFQzEzNzY2QjFERTk3MkNBMkMzRDU3MzRCREE2RDQ5MDg5QTU0OEU2
OEQ1NTNCRjdBNDdBOTJFMzVBRURFNjMyRDRFODZBNzU0M0RGN0M3Q0REREYyREYx
QzlDMTQzOEFERTk1RkI4NTZBQUZFMjJFMjlGMTI0QTRDNTc2MzhGODM4QjYzNEIy
MjdBQzA2QzE0QUIwMjZEMEYxRjQ0MkMwOTgyNDk1QkNDQ0VGQkZBQzVBNzQxNDE1
REZBQ0I4Mzc1QTlDRkNDNEQ0NkU4RTFERDMzRjAwNjhBMDRFMzJEMENBQjc4NzVB
QUVBQjQzMkJFM0UzQzRDQzQwN0U2N0Q3NTAzNTFBRkZDRDZDOUY4RkUyQTY1QzdC
REY0N0M4NTE2MTc0MzM4MTkxNDk3NDk3MTlBRkYxNjMyMzI0ODFDODU3QkZCQjQx
MDlDNzE5NENBMDBCNTgzRTRGNDIyREJENUQwQUY1MDc1ODU0QkY4NzQ3RUYzQzhB
RDhCNkQ1NzMyMUQwMzEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEArUp54I/gaB/jGXqJUVmnofmXoE28t3aiywZ3lKbe2fKG+e7Hb/uy
E35uMaAWF/l3wQvhSr96wM/HxDgSTOwTdmsd6XLKLD1XNL2m1JCJpUjmjVU796R6
kuNa7eYy1OhqdUPffHzd3y3xycFDit6V+4Vqr+IuKfEkpMV2OPg4tjSyJ6wGwUqw
JtDx9ELAmCSVvMzvv6xadBQV36y4N1qc/MTUbo4d0z8AaKBOMtDKt4darqtDK+Pj
xMxAfmfXUDUa/81sn4/iplx730fIUWF0M4GRSXSXGa/xYyMkgchXv7tBCccZTKAL
WD5PQi29XQr1B1hUv4dH7zyK2LbVcyHQMQIDAQABo4ICMjCCAi4wHQYDVR0OBBYE
FBleM5ecRZalFAf09uETHF7mjxEjMB8GA1UdIwQYMBaAFJFpubZSbNFJhN3jpC4k
3Y/nq8F/MA4GA1UdDwEB/wQEAwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODhmMjkxNWQtMThjOS00ZTAzLWJi
ZmItMjA3NGM1OTgwODk4LzAvOTE2OUI5QjY1MjZDRDE0OTg0RERFM0E0MkUyNERE
OEZFN0FCQzE3Ri5jcmwwdAYIKwYBBQUHAQEEaDBmMGQGCCsGAQUFBzAChlhyc3lu
YzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8yLzkxNjlCOUI2
NTI2Q0QxNDk4NERERTNBNDJFMjRERDhGRTdBQkMxN0YuY2VyMIGiBggrBgEFBQcB
CwSBlTCBkjCBjwYIKwYBBQUHMAuGgYJyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby84OGYyOTE1ZC0xOGM5LTRlMDMtYmJmYi0yMDc0YzU5ODA4OTgvMC8z
MTMxMzUyZTMxMzIzNDJlMzgzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMzMzgz
NTMxMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBABzfFgwDQYJKoZIhvcNAQELBQADggEBABoVl8eFc7tZ
eSwbi+HcBfqVny1Brz4Mpcm825NbvsfXMwhd88T75TtrK6vKTp39ic1GL6syl4Pe
XSnFpScHV+i7L9iXDBk3PTbRNKgSuKBeZZEiWJZtl8TtO/WnPSPDYr5CSDbw/E9D
rJB1mJtxEMwBjRFkJDTOljSLWED3Zb4ny+UBsALGz3iMZvVWW2Gs8Y/ta9Tl/Q+G
K1sgQ2UqcCG0SR6xXIihBbCwvP1x2D0VtW+QlpBldHJjFE7mYNYHVINalhqtuMpz
fq/8DjA2iQ5ibb27itTdmy63srf8uLQ2C3ggbc4eu0r78BMSZHTw0swyee0EfkJf
UjjkAeGOkUg=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:41 2024 by rpki-client on console-ams.rpki-client.org