Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/3131352e3132342e38392e302f32342d3234203d3e203338353131.roa
File:                     3131352e3132342e38392e302f32342d3234203d3e203338353131.roa (raw, json)
Hash identifier:          BfO3xKRX+XSYM0/XBpjb9/sxoMeugGO7d9QKLwrnwe0=
Subject key identifier:   81:3D:80:AC:D8:F6:B9:BC:1C:36:FA:8A:C1:3C:43:1A:51:57:EE:FA
Certificate issuer:       /CN=9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F
Certificate serial:       51E10D573206211A7A68A16372D3C7A4D4317DD9
Authority key identifier: 91:69:B9:B6:52:6C:D1:49:84:DD:E3:A4:2E:24:DD:8F:E7:AB:C1:7F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/3131352e3132342e38392e302f32342d3234203d3e203338353131.roa
Signing time:             Thu 20 May 2021 12:10:47 +0000
ROA not before:           Thu 20 May 2021 12:05:47 +0000
ROA not after:            Fri 20 May 2022 12:10:47 +0000
asID:                     38511
IP address blocks:        115.124.89.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:e1:0d:57:32:06:21:1a:7a:68:a1:63:72:d3:c7:a4:d4:31:7d:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F
        Validity
            Not Before: May 20 12:05:47 2021 GMT
            Not After : May 20 12:10:47 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:4f:48:3d:90:d3:4a:9f:18:f5:59:58:bb:71:
                    9b:da:6d:6e:50:40:54:86:f1:ee:5a:c5:3f:0d:ab:
                    55:0c:f2:0c:b8:da:e4:f5:e0:01:29:8f:ca:9a:77:
                    8e:85:50:01:0e:cc:f8:99:13:54:b4:d4:cb:6f:ce:
                    32:86:e5:1c:72:0d:b8:1e:d7:fd:6b:b9:1a:ba:a3:
                    4d:85:a6:ed:3f:32:c3:48:3a:e6:21:ae:b7:8b:0b:
                    a7:74:fb:aa:59:d2:10:11:93:87:6d:fa:30:3f:f7:
                    06:a0:35:fe:e4:66:86:cf:58:8c:c4:84:ec:d8:85:
                    03:99:61:86:0f:fc:75:58:ce:27:70:9c:2a:c1:9f:
                    7a:37:63:31:d7:0f:9f:1a:71:e1:76:1f:7c:cc:03:
                    32:e7:7f:c3:9d:fe:33:2c:30:35:71:b3:3e:26:99:
                    89:86:a9:4f:c8:7c:aa:e6:62:01:84:d3:da:f2:11:
                    44:b1:eb:ad:dd:8a:fe:08:a9:c1:88:ff:16:10:74:
                    32:a8:e9:18:6b:24:36:21:64:c9:6c:f5:0a:f3:41:
                    35:96:05:d1:88:e5:72:ae:af:69:f2:36:af:96:ff:
                    11:0e:06:19:34:eb:0b:bb:25:95:7e:84:46:b6:f2:
                    e8:f7:7f:23:93:bc:d6:35:2d:20:19:22:1d:c3:9f:
                    11:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:3D:80:AC:D8:F6:B9:BC:1C:36:FA:8A:C1:3C:43:1A:51:57:EE:FA
            X509v3 Authority Key Identifier:
                keyid:91:69:B9:B6:52:6C:D1:49:84:DD:E3:A4:2E:24:DD:8F:E7:AB:C1:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/3131352e3132342e38392e302f32342d3234203d3e203338353131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.124.89.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6f:cd:4a:7d:9b:41:09:15:6b:b7:0e:ac:0d:a5:79:83:91:15:
         51:63:24:0a:40:ac:b7:36:ae:5d:b9:3e:68:77:d3:8c:6d:d3:
         cd:e1:30:5d:c2:42:ac:8e:20:c6:c4:07:cc:6e:54:54:62:25:
         db:c0:97:b9:ca:71:98:bd:58:b3:52:cc:06:9b:9e:d7:80:99:
         b5:96:fe:c9:61:f5:17:91:c5:2c:85:26:8a:40:d3:b2:a5:b7:
         8d:38:f7:e3:da:94:9d:1f:99:ee:b3:60:b8:f6:72:a9:c3:a7:
         06:24:8a:d1:71:36:84:19:b0:54:27:65:bd:0e:32:a1:8a:a4:
         50:f5:6b:ac:90:db:6b:93:09:1f:8f:25:9b:92:de:05:ee:29:
         20:b6:40:05:23:42:8f:1b:f5:c7:1c:8a:0e:67:d8:f7:dc:0c:
         a1:9f:44:93:e0:b0:e4:2c:33:42:44:f8:af:3f:85:63:05:de:
         a9:29:a1:c3:11:20:7c:bf:2f:71:28:fe:da:73:3f:32:13:8a:
         36:25:7c:86:cd:13:b2:2c:f9:fe:12:72:58:39:b0:17:cf:ef:
         8f:c5:f0:80:89:46:6e:5f:5b:24:88:74:86:b5:25:da:74:4b:
         ee:59:d7:ed:42:09:e2:61:79:21:c1:d7:3a:f0:68:09:dd:bb:
         b0:0d:af:a1
-----BEGIN CERTIFICATE-----
MIIHJDCCBgygAwIBAgIUUeENVzIGIRp6aKFjctPHpNQxfdkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTE2OUI5QjY1MjZDRDE0OTg0RERFM0E0MkUyNEREOEZF
N0FCQzE3RjAeFw0yMTA1MjAxMjA1NDdaFw0yMjA1MjAxMjEwNDdaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQTc0RjQ4M0Q5MEQzNEE5RjE4
RjU1OTU4QkI3MTlCREE2RDZFNTA0MDU0ODZGMUVFNUFDNTNGMERBQjU1MENGMjBD
QjhEQUU0RjVFMDAxMjk4RkNBOUE3NzhFODU1MDAxMEVDQ0Y4OTkxMzU0QjRENENC
NkZDRTMyODZFNTFDNzIwREI4MUVEN0ZENkJCOTFBQkFBMzREODVBNkVEM0YzMkMz
NDgzQUU2MjFBRUI3OEIwQkE3NzRGQkFBNTlEMjEwMTE5Mzg3NkRGQTMwM0ZGNzA2
QTAzNUZFRTQ2Njg2Q0Y1ODhDQzQ4NEVDRDg4NTAzOTk2MTg2MEZGQzc1NThDRTI3
NzA5QzJBQzE5RjdBMzc2MzMxRDcwRjlGMUE3MUUxNzYxRjdDQ0MwMzMyRTc3RkMz
OURGRTMzMkMzMDM1NzFCMzNFMjY5OTg5ODZBOTRGQzg3Q0FBRTY2MjAxODREM0RB
RjIxMTQ0QjFFQkFEREQ4QUZFMDhBOUMxODhGRjE2MTA3NDMyQThFOTE4NkIyNDM2
MjE2NEM5NkNGNTBBRjM0MTM1OTYwNUQxODhFNTcyQUVBRjY5RjIzNkFGOTZGRjEx
MEUwNjE5MzRFQjBCQkIyNTk1N0U4NDQ2QjZGMkU4Rjc3RjIzOTNCQ0Q2MzUyRDIw
MTkyMjFEQzM5RjExMDcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAp09IPZDTSp8Y9VlYu3Gb2m1uUEBUhvHuWsU/DatVDPIMuNrk9eAB
KY/KmneOhVABDsz4mRNUtNTLb84yhuUccg24Htf9a7kauqNNhabtPzLDSDrmIa63
iwundPuqWdIQEZOHbfowP/cGoDX+5GaGz1iMxITs2IUDmWGGD/x1WM4ncJwqwZ96
N2Mx1w+fGnHhdh98zAMy53/Dnf4zLDA1cbM+JpmJhqlPyHyq5mIBhNPa8hFEseut
3Yr+CKnBiP8WEHQyqOkYayQ2IWTJbPUK80E1lgXRiOVyrq9p8javlv8RDgYZNOsL
uyWVfoRGtvLo938jk7zWNS0gGSIdw58RBwIDAQABo4ICMjCCAi4wHQYDVR0OBBYE
FIE9gKzY9rm8HDb6isE8QxpRV+76MB8GA1UdIwQYMBaAFJFpubZSbNFJhN3jpC4k
3Y/nq8F/MA4GA1UdDwEB/wQEAwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODhmMjkxNWQtMThjOS00ZTAzLWJi
ZmItMjA3NGM1OTgwODk4LzAvOTE2OUI5QjY1MjZDRDE0OTg0RERFM0E0MkUyNERE
OEZFN0FCQzE3Ri5jcmwwdAYIKwYBBQUHAQEEaDBmMGQGCCsGAQUFBzAChlhyc3lu
YzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8yLzkxNjlCOUI2
NTI2Q0QxNDk4NERERTNBNDJFMjRERDhGRTdBQkMxN0YuY2VyMIGiBggrBgEFBQcB
CwSBlTCBkjCBjwYIKwYBBQUHMAuGgYJyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby84OGYyOTE1ZC0xOGM5LTRlMDMtYmJmYi0yMDc0YzU5ODA4OTgvMC8z
MTMxMzUyZTMxMzIzNDJlMzgzOTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMzMzgz
NTMxMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBABzfFkwDQYJKoZIhvcNAQELBQADggEBAG/NSn2bQQkV
a7cOrA2leYORFVFjJApArLc2rl25Pmh304xt083hMF3CQqyOIMbEB8xuVFRiJdvA
l7nKcZi9WLNSzAabnteAmbWW/slh9ReRxSyFJopA07Klt4049+PalJ0fme6zYLj2
cqnDpwYkitFxNoQZsFQnZb0OMqGKpFD1a6yQ22uTCR+PJZuS3gXuKSC2QAUjQo8b
9cccig5n2PfcDKGfRJPgsOQsM0JE+K8/hWMF3qkpocMRIHy/L3Eo/tpzPzITijYl
fIbNE7Is+f4Sclg5sBfP74/F8ICJRm5fWySIdIa1Jdp0S+5Z1+1CCeJheSHB1zrw
aAndu7ANr6E=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:08 2024 by rpki-client on console-fra.rpki-client.org