Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/3131352e3132342e39322e302f32342d3234203d3e203338353131.roa
File:                     3131352e3132342e39322e302f32342d3234203d3e203338353131.roa (raw, json)
Hash identifier:          H0DYVgh0LMVqUb0i0vbJCAQvM8yuBg1XZ8ecgITn5gc=
Subject key identifier:   67:53:D2:B2:04:6C:0A:6F:ED:16:76:17:9A:58:E6:2A:58:0F:B2:EE
Certificate issuer:       /CN=9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F
Certificate serial:       6E6C84016F42C6B35812621CBAAB917711E63EF6
Authority key identifier: 91:69:B9:B6:52:6C:D1:49:84:DD:E3:A4:2E:24:DD:8F:E7:AB:C1:7F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/3131352e3132342e39322e302f32342d3234203d3e203338353131.roa
Signing time:             Thu 20 May 2021 12:14:39 +0000
ROA not before:           Thu 20 May 2021 12:09:39 +0000
ROA not after:            Fri 20 May 2022 12:14:39 +0000
asID:                     38511
IP address blocks:        115.124.92.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:6c:84:01:6f:42:c6:b3:58:12:62:1c:ba:ab:91:77:11:e6:3e:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F
        Validity
            Not Before: May 20 12:09:39 2021 GMT
            Not After : May 20 12:14:39 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:dd:29:ae:e0:e2:8e:39:1f:da:51:53:e4:ff:
                    24:15:06:66:30:df:32:3a:7e:96:fc:8e:5f:ec:21:
                    4d:f0:a0:53:fc:1a:62:ea:65:c5:7b:b4:35:16:9b:
                    29:89:93:4e:af:04:be:5a:61:87:4e:55:9b:bb:5c:
                    cf:85:ed:20:78:39:00:8d:2e:d5:62:62:97:c4:98:
                    6a:24:d2:c8:f1:e8:13:de:28:0d:3d:4c:ce:a1:05:
                    be:8e:08:98:0b:1a:7f:0e:46:36:e0:37:62:58:8b:
                    e1:92:4a:02:c5:b5:90:c9:4a:30:94:6f:90:c7:68:
                    47:d3:a4:31:b0:7f:b0:1a:52:8f:22:eb:8c:ae:0e:
                    2b:27:00:65:70:d8:b6:8e:2b:58:b1:a2:3f:78:23:
                    62:64:53:5e:c6:35:05:f3:3b:07:cd:8a:5c:eb:6a:
                    bc:cb:e1:fa:a8:ab:cd:aa:b3:6b:87:fe:bb:1e:ca:
                    33:5f:63:2f:68:18:0b:c5:61:7c:0d:43:e2:f4:83:
                    49:20:ff:29:5e:9e:74:5c:ea:11:ab:96:87:dd:24:
                    55:aa:2b:fb:ab:9c:40:c2:d8:a2:4d:24:80:a1:b0:
                    51:96:58:79:ab:bc:5e:00:79:c0:d0:73:63:e3:c0:
                    ce:19:c5:17:85:f7:6a:cf:c9:fc:3a:06:d1:7a:de:
                    87:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:53:D2:B2:04:6C:0A:6F:ED:16:76:17:9A:58:E6:2A:58:0F:B2:EE
            X509v3 Authority Key Identifier:
                keyid:91:69:B9:B6:52:6C:D1:49:84:DD:E3:A4:2E:24:DD:8F:E7:AB:C1:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/3131352e3132342e39322e302f32342d3234203d3e203338353131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.124.92.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8e:1e:4e:4a:c7:8d:93:65:82:61:a5:a6:2e:57:e4:87:a8:09:
         9f:48:08:fa:aa:bb:df:fd:4c:e1:51:91:17:4d:99:6e:a5:89:
         3e:b0:02:fb:06:7d:9d:e1:02:2a:50:c7:87:6e:db:75:60:d0:
         d9:53:3c:35:3c:d4:7f:e2:c8:11:75:1f:e0:6d:66:92:ce:d6:
         27:7d:20:ec:9e:47:a6:9b:77:d2:07:47:88:05:4c:bc:7a:ef:
         a3:90:6f:15:7d:79:71:8b:b0:9f:41:03:81:81:78:a0:b4:45:
         3f:1c:a0:59:f1:68:1c:d2:d6:dc:61:57:e3:66:89:4a:4e:2a:
         6f:e5:ce:c9:6d:e0:0a:1a:7d:c9:08:74:a9:bc:e3:f0:a9:f9:
         71:8f:32:ca:6d:0b:1f:8d:af:fe:ca:eb:a8:48:ae:df:a9:69:
         ce:f7:8b:2a:e4:ec:12:9a:0c:0b:df:1f:f3:88:5d:f4:b1:ae:
         01:17:0e:e0:d3:6e:73:79:80:73:0d:d3:5e:25:b2:f9:59:91:
         b3:93:98:1b:59:1b:ce:9f:79:cf:da:06:d1:8e:27:fd:69:3a:
         1e:68:84:7d:2f:6a:93:37:63:85:33:e8:d7:60:0c:e5:13:53:
         83:ce:20:d4:84:40:5c:c1:21:0c:90:c7:3b:67:3c:6c:9f:ac:
         cb:92:12:69
-----BEGIN CERTIFICATE-----
MIIHJDCCBgygAwIBAgIUbmyEAW9CxrNYEmIcuquRdxHmPvYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTE2OUI5QjY1MjZDRDE0OTg0RERFM0E0MkUyNEREOEZF
N0FCQzE3RjAeFw0yMTA1MjAxMjA5MzlaFw0yMjA1MjAxMjE0MzlaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQUZERDI5QUVFMEUyOEUzOTFG
REE1MTUzRTRGRjI0MTUwNjY2MzBERjMyM0E3RTk2RkM4RTVGRUMyMTRERjBBMDUz
RkMxQTYyRUE2NUM1N0JCNDM1MTY5QjI5ODk5MzRFQUYwNEJFNUE2MTg3NEU1NTlC
QkI1Q0NGODVFRDIwNzgzOTAwOEQyRUQ1NjI2Mjk3QzQ5ODZBMjREMkM4RjFFODEz
REUyODBEM0Q0Q0NFQTEwNUJFOEUwODk4MEIxQTdGMEU0NjM2RTAzNzYyNTg4QkUx
OTI0QTAyQzVCNTkwQzk0QTMwOTQ2RjkwQzc2ODQ3RDNBNDMxQjA3RkIwMUE1MjhG
MjJFQjhDQUUwRTJCMjcwMDY1NzBEOEI2OEUyQjU4QjFBMjNGNzgyMzYyNjQ1MzVF
QzYzNTA1RjMzQjA3Q0Q4QTVDRUI2QUJDQ0JFMUZBQThBQkNEQUFCMzZCODdGRUJC
MUVDQTMzNUY2MzJGNjgxODBCQzU2MTdDMEQ0M0UyRjQ4MzQ5MjBGRjI5NUU5RTc0
NUNFQTExQUI5Njg3REQyNDU1QUEyQkZCQUI5QzQwQzJEOEEyNEQyNDgwQTFCMDUx
OTY1ODc5QUJCQzVFMDA3OUMwRDA3MzYzRTNDMENFMTlDNTE3ODVGNzZBQ0ZDOUZD
M0EwNkQxN0FERTg3OEQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAr90pruDijjkf2lFT5P8kFQZmMN8yOn6W/I5f7CFN8KBT/Bpi6mXF
e7Q1FpspiZNOrwS+WmGHTlWbu1zPhe0geDkAjS7VYmKXxJhqJNLI8egT3igNPUzO
oQW+jgiYCxp/DkY24DdiWIvhkkoCxbWQyUowlG+Qx2hH06QxsH+wGlKPIuuMrg4r
JwBlcNi2jitYsaI/eCNiZFNexjUF8zsHzYpc62q8y+H6qKvNqrNrh/67HsozX2Mv
aBgLxWF8DUPi9INJIP8pXp50XOoRq5aH3SRVqiv7q5xAwtiiTSSAobBRllh5q7xe
AHnA0HNj48DOGcUXhfdqz8n8OgbRet6HjQIDAQABo4ICMjCCAi4wHQYDVR0OBBYE
FGdT0rIEbApv7RZ2F5pY5ipYD7LuMB8GA1UdIwQYMBaAFJFpubZSbNFJhN3jpC4k
3Y/nq8F/MA4GA1UdDwEB/wQEAwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODhmMjkxNWQtMThjOS00ZTAzLWJi
ZmItMjA3NGM1OTgwODk4LzAvOTE2OUI5QjY1MjZDRDE0OTg0RERFM0E0MkUyNERE
OEZFN0FCQzE3Ri5jcmwwdAYIKwYBBQUHAQEEaDBmMGQGCCsGAQUFBzAChlhyc3lu
YzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8yLzkxNjlCOUI2
NTI2Q0QxNDk4NERERTNBNDJFMjRERDhGRTdBQkMxN0YuY2VyMIGiBggrBgEFBQcB
CwSBlTCBkjCBjwYIKwYBBQUHMAuGgYJyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby84OGYyOTE1ZC0xOGM5LTRlMDMtYmJmYi0yMDc0YzU5ODA4OTgvMC8z
MTMxMzUyZTMxMzIzNDJlMzkzMjJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMzMzgz
NTMxMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBABzfFwwDQYJKoZIhvcNAQELBQADggEBAI4eTkrHjZNl
gmGlpi5X5IeoCZ9ICPqqu9/9TOFRkRdNmW6liT6wAvsGfZ3hAipQx4du23Vg0NlT
PDU81H/iyBF1H+BtZpLO1id9IOyeR6abd9IHR4gFTLx676OQbxV9eXGLsJ9BA4GB
eKC0RT8coFnxaBzS1txhV+NmiUpOKm/lzslt4AoafckIdKm84/Cp+XGPMsptCx+N
r/7K66hIrt+pac73iyrk7BKaDAvfH/OIXfSxrgEXDuDTbnN5gHMN014lsvlZkbOT
mBtZG86fec/aBtGOJ/1pOh5ohH0vapM3Y4Uz6NdgDOUTU4POINSEQFzBIQyQxztn
PGyfrMuSEmk=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:08 2024 by rpki-client on console-fra.rpki-client.org