Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/3131352e3132342e39302e302f32342d3234203d3e203338353131.roa
File:                     3131352e3132342e39302e302f32342d3234203d3e203338353131.roa (raw, json)
Hash identifier:          rUnYTNg4myI1hceaerLLveS3dIKTD8DSH5xaw9qC3kQ=
Subject key identifier:   10:F8:7E:C2:A1:BB:A6:CB:AF:8E:57:2B:E5:62:FA:6C:1D:1B:79:C5
Certificate issuer:       /CN=9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F
Certificate serial:       74419BB005CB1CFF86A7A1DC33E71EA243B2057C
Authority key identifier: 91:69:B9:B6:52:6C:D1:49:84:DD:E3:A4:2E:24:DD:8F:E7:AB:C1:7F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/3131352e3132342e39302e302f32342d3234203d3e203338353131.roa
Signing time:             Thu 20 May 2021 12:11:03 +0000
ROA not before:           Thu 20 May 2021 12:06:03 +0000
ROA not after:            Fri 20 May 2022 12:11:03 +0000
asID:                     38511
IP address blocks:        115.124.90.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:41:9b:b0:05:cb:1c:ff:86:a7:a1:dc:33:e7:1e:a2:43:b2:05:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F
        Validity
            Not Before: May 20 12:06:03 2021 GMT
            Not After : May 20 12:11:03 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:d5:ea:bd:b6:c7:85:a0:ae:1a:c6:13:4a:af:
                    5e:84:a9:29:7e:ce:0d:c4:89:4a:f4:0f:6d:7c:07:
                    21:3b:d9:2c:fe:30:15:5e:61:e6:70:15:e9:f9:26:
                    a6:10:41:69:f1:a3:16:23:b0:00:cf:4f:f6:54:58:
                    9d:ce:af:3d:39:9d:ca:e8:30:58:98:9f:12:b4:4d:
                    6f:32:a0:e0:4e:49:98:ae:42:cb:0d:c5:ef:57:ac:
                    db:83:7d:cd:5f:f4:b0:f3:1d:6e:8b:8a:03:2c:e4:
                    87:8e:d8:d8:3d:18:5d:eb:86:a5:13:fd:c2:e0:8b:
                    b0:e5:56:66:72:dd:81:93:11:67:03:5a:29:1b:30:
                    27:27:f9:4f:5b:d9:7e:6d:6e:c9:61:64:43:e4:93:
                    92:6b:5a:6e:3a:ca:df:d3:38:b0:d6:ef:ec:73:ed:
                    df:a2:59:62:72:c2:23:72:df:71:74:26:7a:8e:3b:
                    d6:9d:87:3d:22:b7:05:db:b6:66:cd:2f:b4:66:36:
                    9e:a4:43:ce:34:41:00:06:3d:84:74:21:0a:de:39:
                    fd:6c:9a:38:94:23:e4:d7:0a:35:2b:18:37:f4:43:
                    e1:2a:93:71:36:75:c4:10:de:e1:32:3b:79:f5:0f:
                    fa:7b:1f:34:8b:0b:3d:9d:ea:67:bd:5f:9e:8e:9b:
                    36:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:F8:7E:C2:A1:BB:A6:CB:AF:8E:57:2B:E5:62:FA:6C:1D:1B:79:C5
            X509v3 Authority Key Identifier:
                keyid:91:69:B9:B6:52:6C:D1:49:84:DD:E3:A4:2E:24:DD:8F:E7:AB:C1:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/3131352e3132342e39302e302f32342d3234203d3e203338353131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.124.90.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:df:7e:d6:08:d2:1c:e9:7b:d5:08:28:7a:de:a7:f1:b8:41:
         f7:e3:d6:28:c5:68:95:3a:ba:30:ed:bb:e9:46:9e:16:13:13:
         ef:bf:fc:95:b1:9e:3d:44:ba:45:fd:51:64:2f:84:33:42:79:
         0b:4a:3c:8a:ff:d0:1c:75:14:9b:29:35:f3:0f:79:30:9e:d8:
         fe:b8:e2:15:16:0a:2f:81:df:a6:14:b0:1d:1f:18:13:45:2c:
         78:6d:b1:2f:7e:db:bb:b0:6c:a0:5e:3c:43:a7:6c:6e:c8:9f:
         8e:b9:43:39:07:6f:32:2f:32:b4:7a:7a:8c:0d:3c:83:49:6e:
         e1:3a:f1:b0:45:ef:3d:9e:ad:ec:7d:0e:25:13:2c:a6:30:1c:
         4f:89:bc:7c:31:2a:72:2d:11:e8:61:12:b3:88:35:21:74:6b:
         ea:ef:9f:44:e3:55:57:a2:3f:db:70:7b:3e:63:6d:c5:7d:a4:
         79:0a:87:dd:5c:87:2f:06:8d:3f:2a:4d:47:2d:7b:c4:15:14:
         f5:74:22:ee:cb:79:08:0c:54:f5:8f:44:a8:88:b9:aa:5a:be:
         2b:a9:43:90:9b:85:a7:99:35:45:8f:87:a5:91:6c:c4:5a:47:
         c1:33:36:31:fd:bd:8f:53:bf:c4:f1:e1:e6:98:bd:12:1d:94:
         c1:57:72:8b
-----BEGIN CERTIFICATE-----
MIIHJDCCBgygAwIBAgIUdEGbsAXLHP+Gp6HcM+ceokOyBXwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTE2OUI5QjY1MjZDRDE0OTg0RERFM0E0MkUyNEREOEZF
N0FCQzE3RjAeFw0yMTA1MjAxMjA2MDNaFw0yMjA1MjAxMjExMDNaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwOTFENUVBQkRCNkM3ODVBMEFF
MUFDNjEzNEFBRjVFODRBOTI5N0VDRTBEQzQ4OTRBRjQwRjZEN0MwNzIxM0JEOTJD
RkUzMDE1NUU2MUU2NzAxNUU5RjkyNkE2MTA0MTY5RjFBMzE2MjNCMDAwQ0Y0RkY2
NTQ1ODlEQ0VBRjNEMzk5RENBRTgzMDU4OTg5RjEyQjQ0RDZGMzJBMEUwNEU0OTk4
QUU0MkNCMERDNUVGNTdBQ0RCODM3RENENUZGNEIwRjMxRDZFOEI4QTAzMkNFNDg3
OEVEOEQ4M0QxODVERUI4NkE1MTNGREMyRTA4QkIwRTU1NjY2NzJERDgxOTMxMTY3
MDM1QTI5MUIzMDI3MjdGOTRGNUJEOTdFNkQ2RUM5NjE2NDQzRTQ5MzkyNkI1QTZF
M0FDQURGRDMzOEIwRDZFRkVDNzNFRERGQTI1OTYyNzJDMjIzNzJERjcxNzQyNjdB
OEUzQkQ2OUQ4NzNEMjJCNzA1REJCNjY2Q0QyRkI0NjYzNjlFQTQ0M0NFMzQ0MTAw
MDYzRDg0NzQyMTBBREUzOUZENkM5QTM4OTQyM0U0RDcwQTM1MkIxODM3RjQ0M0Ux
MkE5MzcxMzY3NUM0MTBERUUxMzIzQjc5RjUwRkZBN0IxRjM0OEIwQjNEOURFQTY3
QkQ1RjlFOEU5QjM2ODMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAkdXqvbbHhaCuGsYTSq9ehKkpfs4NxIlK9A9tfAchO9ks/jAVXmHm
cBXp+SamEEFp8aMWI7AAz0/2VFidzq89OZ3K6DBYmJ8StE1vMqDgTkmYrkLLDcXv
V6zbg33NX/Sw8x1ui4oDLOSHjtjYPRhd64alE/3C4Iuw5VZmct2BkxFnA1opGzAn
J/lPW9l+bW7JYWRD5JOSa1puOsrf0ziw1u/sc+3follicsIjct9xdCZ6jjvWnYc9
IrcF27ZmzS+0ZjaepEPONEEABj2EdCEK3jn9bJo4lCPk1wo1Kxg39EPhKpNxNnXE
EN7hMjt59Q/6ex80iws9nepnvV+ejps2gwIDAQABo4ICMjCCAi4wHQYDVR0OBBYE
FBD4fsKhu6bLr45XK+Vi+mwdG3nFMB8GA1UdIwQYMBaAFJFpubZSbNFJhN3jpC4k
3Y/nq8F/MA4GA1UdDwEB/wQEAwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODhmMjkxNWQtMThjOS00ZTAzLWJi
ZmItMjA3NGM1OTgwODk4LzAvOTE2OUI5QjY1MjZDRDE0OTg0RERFM0E0MkUyNERE
OEZFN0FCQzE3Ri5jcmwwdAYIKwYBBQUHAQEEaDBmMGQGCCsGAQUFBzAChlhyc3lu
YzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8yLzkxNjlCOUI2
NTI2Q0QxNDk4NERERTNBNDJFMjRERDhGRTdBQkMxN0YuY2VyMIGiBggrBgEFBQcB
CwSBlTCBkjCBjwYIKwYBBQUHMAuGgYJyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby84OGYyOTE1ZC0xOGM5LTRlMDMtYmJmYi0yMDc0YzU5ODA4OTgvMC8z
MTMxMzUyZTMxMzIzNDJlMzkzMDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMzMzgz
NTMxMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBABzfFowDQYJKoZIhvcNAQELBQADggEBABzfftYI0hzp
e9UIKHrep/G4Qffj1ijFaJU6ujDtu+lGnhYTE++//JWxnj1EukX9UWQvhDNCeQtK
PIr/0Bx1FJspNfMPeTCe2P644hUWCi+B36YUsB0fGBNFLHhtsS9+27uwbKBePEOn
bG7In465QzkHbzIvMrR6eowNPINJbuE68bBF7z2erex9DiUTLKYwHE+JvHwxKnIt
EehhErOINSF0a+rvn0TjVVeiP9twez5jbcV9pHkKh91chy8GjT8qTUcte8QVFPV0
Iu7LeQgMVPWPRKiIuapaviupQ5CbhaeZNUWPh6WRbMRaR8EzNjH9vY9Tv8Tx4eaY
vRIdlMFXcos=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:41 2024 by rpki-client on console-ams.rpki-client.org