Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/3131352e3132342e39312e302f32342d3234203d3e203338353131.roa
File:                     3131352e3132342e39312e302f32342d3234203d3e203338353131.roa (raw, json)
Hash identifier:          nQ+b6bpvcv0nP4sqy4cyIzGgixpCwJljN5OnqKffqOc=
Subject key identifier:   8F:C9:27:D7:1F:D8:B3:71:04:1A:D7:B8:0E:8E:45:68:C5:76:91:BC
Certificate issuer:       /CN=9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F
Certificate serial:       42E4A9C533C91CA2BE9681D6341AE53C63E6482C
Authority key identifier: 91:69:B9:B6:52:6C:D1:49:84:DD:E3:A4:2E:24:DD:8F:E7:AB:C1:7F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/3131352e3132342e39312e302f32342d3234203d3e203338353131.roa
Signing time:             Thu 20 May 2021 12:13:33 +0000
ROA not before:           Thu 20 May 2021 12:08:33 +0000
ROA not after:            Fri 20 May 2022 12:13:33 +0000
asID:                     38511
IP address blocks:        115.124.91.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:e4:a9:c5:33:c9:1c:a2:be:96:81:d6:34:1a:e5:3c:63:e6:48:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F
        Validity
            Not Before: May 20 12:08:33 2021 GMT
            Not After : May 20 12:13:33 2022 GMT
        Subject: CN=3082010A0282010100DB97399171907FCF08A73D2435915D929A030C7D3F2088296AA61A19BF9759D5E2155A850785F0A6F16DD8978E0F8C9F85B88317FCA54B442D00262FCA0ED11CACA6EBED6D4E8A2E5BC4E8730BD9217B52278197640333F3A0457B2810039B592A9C0B0DBC1E2CC41CA073C31161199006995337965C585B311317C8117D2913C69442DD56E67DD0598BCFB7E3E135C56FFD3E70C0920BD22C576D2950C9C3F0CB718BFC35A46D8C7DEE228EEE94B7D55EB37DE8212CC9D1EA0607421024A5B1AA1FD945C46FC58EAB059D43842F8FC106EF6DC855B184122E508DC0605225D4D80711BB84295B6D8BE19DE3B548FC9E3E00F0AAB9DE9383B07BA69C88AE11EB0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:97:39:91:71:90:7f:cf:08:a7:3d:24:35:91:
                    5d:92:9a:03:0c:7d:3f:20:88:29:6a:a6:1a:19:bf:
                    97:59:d5:e2:15:5a:85:07:85:f0:a6:f1:6d:d8:97:
                    8e:0f:8c:9f:85:b8:83:17:fc:a5:4b:44:2d:00:26:
                    2f:ca:0e:d1:1c:ac:a6:eb:ed:6d:4e:8a:2e:5b:c4:
                    e8:73:0b:d9:21:7b:52:27:81:97:64:03:33:f3:a0:
                    45:7b:28:10:03:9b:59:2a:9c:0b:0d:bc:1e:2c:c4:
                    1c:a0:73:c3:11:61:19:90:06:99:53:37:96:5c:58:
                    5b:31:13:17:c8:11:7d:29:13:c6:94:42:dd:56:e6:
                    7d:d0:59:8b:cf:b7:e3:e1:35:c5:6f:fd:3e:70:c0:
                    92:0b:d2:2c:57:6d:29:50:c9:c3:f0:cb:71:8b:fc:
                    35:a4:6d:8c:7d:ee:22:8e:ee:94:b7:d5:5e:b3:7d:
                    e8:21:2c:c9:d1:ea:06:07:42:10:24:a5:b1:aa:1f:
                    d9:45:c4:6f:c5:8e:ab:05:9d:43:84:2f:8f:c1:06:
                    ef:6d:c8:55:b1:84:12:2e:50:8d:c0:60:52:25:d4:
                    d8:07:11:bb:84:29:5b:6d:8b:e1:9d:e3:b5:48:fc:
                    9e:3e:00:f0:aa:b9:de:93:83:b0:7b:a6:9c:88:ae:
                    11:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:C9:27:D7:1F:D8:B3:71:04:1A:D7:B8:0E:8E:45:68:C5:76:91:BC
            X509v3 Authority Key Identifier:
                keyid:91:69:B9:B6:52:6C:D1:49:84:DD:E3:A4:2E:24:DD:8F:E7:AB:C1:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/3131352e3132342e39312e302f32342d3234203d3e203338353131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.124.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         06:1a:b6:e4:a2:21:bf:de:0f:ad:f8:11:f5:44:03:09:56:01:
         6c:41:4f:c0:3a:e1:e2:5e:b7:2d:0b:9e:ff:19:08:1e:e0:d7:
         f0:9f:1e:87:f7:a5:bc:17:64:66:81:5a:47:9d:23:44:62:6a:
         33:33:0c:eb:5f:93:e2:af:e6:d2:94:79:a6:d5:4f:51:6c:68:
         99:fa:9f:90:9d:75:13:d7:14:1c:56:2d:fd:f7:e9:c5:3f:1f:
         92:18:39:31:35:90:17:23:ea:08:3a:e5:66:47:83:fa:ba:5b:
         74:f6:85:3e:82:07:9a:a9:71:23:d6:e6:c8:f9:40:74:d2:fa:
         c2:90:10:9d:f9:0f:78:e7:f7:2a:df:6e:b7:59:65:16:57:8c:
         14:ef:7e:53:20:54:aa:e9:ca:23:e6:9f:be:cf:b7:a9:a4:83:
         d2:2d:f0:20:2d:3b:52:06:00:7c:6b:de:eb:65:ea:9f:ad:9e:
         68:35:09:88:91:ca:ba:8c:41:98:cc:6f:b3:24:49:cf:33:0d:
         59:1f:7d:a6:54:89:6d:6f:1f:fc:a4:b3:6b:08:8a:4c:c6:d4:
         9b:95:11:b7:81:90:dc:2d:9a:ca:64:28:64:cf:32:87:57:0e:
         25:85:d8:6b:95:52:ba:29:7d:da:bc:5d:9f:bd:03:b4:df:78:
         4e:90:10:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:41 2024 by rpki-client on console-ams.rpki-client.org