Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/3131352e3132342e39342e302f32342d3234203d3e203338353131.roa
File:                     3131352e3132342e39342e302f32342d3234203d3e203338353131.roa (raw, json)
Hash identifier:          W65Qvqy5KXbmOZn1ApvUIqKdS/nonYybU+sBVoCtS0U=
Subject key identifier:   C5:01:E4:D6:51:59:A7:86:1D:D3:89:8B:D8:F3:91:8D:7E:1E:9A:6D
Certificate issuer:       /CN=9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F
Certificate serial:       55AA594C3CBAD13D2D6E506D457E0F79705CA7A6
Authority key identifier: 91:69:B9:B6:52:6C:D1:49:84:DD:E3:A4:2E:24:DD:8F:E7:AB:C1:7F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/3131352e3132342e39342e302f32342d3234203d3e203338353131.roa
Signing time:             Thu 20 May 2021 12:15:21 +0000
ROA not before:           Thu 20 May 2021 12:10:21 +0000
ROA not after:            Fri 20 May 2022 12:15:21 +0000
asID:                     38511
IP address blocks:        115.124.94.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:aa:59:4c:3c:ba:d1:3d:2d:6e:50:6d:45:7e:0f:79:70:5c:a7:a6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F
        Validity
            Not Before: May 20 12:10:21 2021 GMT
            Not After : May 20 12:15:21 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:1e:d0:23:b2:eb:5a:db:50:01:05:53:b6:b9:
                    ad:12:44:a5:5c:ed:ec:a1:cf:d7:4a:a9:55:e2:fd:
                    70:44:38:32:83:25:26:94:f7:54:a6:c2:74:34:da:
                    ea:2a:89:25:0f:4a:88:c2:ef:12:54:1d:43:cc:cb:
                    55:58:68:74:2d:01:e0:b6:a2:cd:46:d8:14:14:54:
                    13:fd:61:6e:26:a6:f8:f5:6c:c0:1b:f9:6d:73:95:
                    c1:1a:eb:a2:d9:f4:1f:14:05:08:60:cc:39:4f:33:
                    93:5f:93:5c:74:c8:21:bc:73:e7:f1:3d:6e:9a:a6:
                    33:e2:a2:8a:d5:53:4e:00:9a:c4:c1:db:a2:93:ed:
                    d4:ea:26:b4:02:f7:e6:6c:70:a0:b9:f5:55:bf:87:
                    df:d3:52:c5:84:05:da:02:66:82:37:f1:c1:1c:3b:
                    d1:2a:ad:c1:ba:97:49:4e:1a:e3:af:61:3b:d8:14:
                    28:e9:60:30:91:86:7c:24:77:46:f8:d3:e7:14:f1:
                    32:7b:c0:af:ab:f4:46:7e:f9:5b:58:4c:4d:91:05:
                    9f:7a:b3:c6:47:53:15:44:9f:5e:9a:3a:3f:1c:73:
                    1b:a6:4c:1b:ec:90:66:d1:66:6b:95:4f:1f:92:ac:
                    f7:66:8d:b8:52:47:80:e2:72:4f:6d:7f:c8:63:fe:
                    84:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:01:E4:D6:51:59:A7:86:1D:D3:89:8B:D8:F3:91:8D:7E:1E:9A:6D
            X509v3 Authority Key Identifier:
                keyid:91:69:B9:B6:52:6C:D1:49:84:DD:E3:A4:2E:24:DD:8F:E7:AB:C1:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/3131352e3132342e39342e302f32342d3234203d3e203338353131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.124.94.0/24

    Signature Algorithm: sha256WithRSAEncryption
         88:83:94:73:8f:16:2d:6b:bf:57:d0:1e:1b:06:55:47:75:e3:
         98:34:df:3d:48:bb:dc:58:0e:3c:54:49:91:08:84:5f:bb:21:
         a0:9f:77:e7:a2:e5:7a:b9:0a:7c:ae:4d:07:28:7a:b4:c9:88:
         94:d1:70:a6:66:1b:7d:a5:59:a1:da:8c:d5:7e:ba:07:3b:d0:
         fe:10:69:99:24:88:ac:19:94:e8:2a:05:7f:aa:08:3a:3f:f8:
         00:c0:77:53:60:46:83:b5:e9:8f:58:ea:4c:85:7f:99:12:5c:
         a9:eb:31:ed:b0:45:6a:79:35:e7:5a:7b:60:3f:1c:16:88:fd:
         2c:bf:fd:c5:04:7c:88:92:ec:2b:56:5a:05:39:ee:8b:d7:24:
         0f:3a:85:f4:fe:db:b3:bf:3a:0c:39:3a:a4:9d:6f:1f:61:5f:
         9e:b6:b2:77:5a:45:fb:9c:3f:c2:67:36:b8:3e:fb:fd:89:eb:
         bf:39:41:66:f7:82:9b:c3:6d:b5:b4:22:cb:3f:dd:e2:de:67:
         c1:fe:02:2c:30:49:0f:a1:fb:77:64:1b:49:2d:8b:27:0d:d1:
         26:22:53:38:0a:3f:d3:f3:75:f3:72:4e:bc:cc:00:4b:e9:9f:
         05:6b:fe:da:e1:8e:97:bb:d2:e2:47:d7:f9:f1:4e:84:cf:44:
         67:bd:56:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:08 2024 by rpki-client on console-fra.rpki-client.org