Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/3131352e3132342e39352e302f32342d3234203d3e203338353131.roa
File:                     3131352e3132342e39352e302f32342d3234203d3e203338353131.roa (raw, json)
Hash identifier:          0lh3iFULzVkEdlaHeHxmKdD1bcQB+i9NTK5UgVDat90=
Subject key identifier:   79:ED:3C:51:23:34:BA:6F:53:2A:07:2C:1E:3E:C0:13:76:89:29:B0
Certificate issuer:       /CN=9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F
Certificate serial:       61647F55D6D657A42DC2B87C6A2B4F72946157D1
Authority key identifier: 91:69:B9:B6:52:6C:D1:49:84:DD:E3:A4:2E:24:DD:8F:E7:AB:C1:7F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/3131352e3132342e39352e302f32342d3234203d3e203338353131.roa
Signing time:             Thu 20 May 2021 12:15:31 +0000
ROA not before:           Thu 20 May 2021 12:10:31 +0000
ROA not after:            Fri 20 May 2022 12:15:31 +0000
asID:                     38511
IP address blocks:        115.124.95.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:64:7f:55:d6:d6:57:a4:2d:c2:b8:7c:6a:2b:4f:72:94:61:57:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F
        Validity
            Not Before: May 20 12:10:31 2021 GMT
            Not After : May 20 12:15:31 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:31:05:94:a3:f6:d5:07:84:61:b4:b9:31:26:
                    4d:a1:a5:66:8e:a1:d2:ff:09:8a:ff:e1:ef:05:e3:
                    88:5b:32:12:f7:6d:20:54:de:f9:1c:ed:a5:78:3e:
                    3c:0a:ec:83:d8:55:d0:4a:15:39:57:da:b1:e3:2f:
                    9b:f1:3d:c1:b3:78:31:d5:54:73:00:6d:83:31:4d:
                    58:cd:12:5a:9c:de:60:a0:62:92:53:ac:04:40:11:
                    6a:3a:dd:86:50:3e:a6:da:61:e0:b8:f4:4d:de:e4:
                    4a:f6:ce:6e:7a:a8:2e:ac:cd:ee:09:23:92:64:03:
                    c2:1f:d6:15:06:e8:f0:54:46:0c:0a:ee:66:33:fe:
                    72:0f:28:fb:df:98:bc:53:fe:c7:1f:b0:36:1d:67:
                    d6:b9:24:2e:2f:71:39:6c:fb:c7:bc:27:0d:6b:4a:
                    57:e1:6a:69:fe:e8:1b:69:d1:92:e4:b7:b6:c4:19:
                    c4:1b:d7:88:81:97:b5:7a:12:d8:71:ef:84:2b:ba:
                    07:5b:51:a3:71:61:b6:81:ef:f7:4b:d8:33:15:74:
                    dd:6e:db:62:30:32:06:08:ed:3f:c6:c9:44:ad:d8:
                    9b:e7:2f:b1:ae:25:ac:47:ef:ac:66:6f:01:ea:1d:
                    9e:7a:87:45:e0:83:6f:71:83:4b:32:20:d1:21:15:
                    30:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:ED:3C:51:23:34:BA:6F:53:2A:07:2C:1E:3E:C0:13:76:89:29:B0
            X509v3 Authority Key Identifier:
                keyid:91:69:B9:B6:52:6C:D1:49:84:DD:E3:A4:2E:24:DD:8F:E7:AB:C1:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/3131352e3132342e39352e302f32342d3234203d3e203338353131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.124.95.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:aa:1a:7e:3f:d2:47:b0:14:94:b9:b9:7e:7b:4e:ea:7f:db:
         4d:29:65:66:e6:9b:77:74:40:c8:f3:b1:ed:48:91:1f:6c:14:
         44:1c:f4:e6:ec:7a:1d:db:40:f3:db:be:74:d0:fc:44:55:7b:
         b0:9c:ef:98:86:e3:8e:e9:71:c9:cc:ed:63:c4:74:ff:03:3b:
         32:81:b8:be:0a:a5:79:5b:9a:a7:e5:e4:cc:68:33:97:55:c7:
         78:5a:f7:6e:de:c1:1d:61:35:78:1e:6b:0f:7c:83:11:08:ad:
         e0:05:0b:1b:fa:23:ae:33:0c:58:e5:17:e8:81:b2:fb:90:77:
         dc:47:c5:77:77:c5:0a:62:11:8e:b3:92:3b:16:c4:57:63:5f:
         8b:3d:c9:17:ad:8f:67:f0:5c:01:5f:49:68:fc:46:01:87:73:
         6a:69:58:b2:51:5d:8c:ae:00:45:60:fe:e7:25:d1:f8:dc:5a:
         dd:53:94:fa:e4:6f:d2:09:5d:8a:19:bd:03:02:46:99:09:88:
         65:b8:ec:e9:5f:28:86:73:d7:6b:e3:4b:0b:64:2b:fd:9f:f5:
         73:21:a1:fb:e1:13:30:dc:72:20:a5:8f:a7:a6:6c:ee:78:10:
         69:ff:e2:04:b2:aa:48:ee:3c:88:12:73:ae:14:bb:68:64:1b:
         c7:02:eb:0e
-----BEGIN CERTIFICATE-----
MIIHJDCCBgygAwIBAgIUYWR/VdbWV6Qtwrh8aitPcpRhV9EwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTE2OUI5QjY1MjZDRDE0OTg0RERFM0E0MkUyNEREOEZF
N0FCQzE3RjAeFw0yMTA1MjAxMjEwMzFaFw0yMjA1MjAxMjE1MzFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzYzMTA1OTRBM0Y2RDUwNzg0
NjFCNEI5MzEyNjREQTFBNTY2OEVBMUQyRkYwOThBRkZFMUVGMDVFMzg4NUIzMjEy
Rjc2RDIwNTRERUY5MUNFREE1NzgzRTNDMEFFQzgzRDg1NUQwNEExNTM5NTdEQUIx
RTMyRjlCRjEzREMxQjM3ODMxRDU1NDczMDA2RDgzMzE0RDU4Q0QxMjVBOUNERTYw
QTA2MjkyNTNBQzA0NDAxMTZBM0FERDg2NTAzRUE2REE2MUUwQjhGNDREREVFNDRB
RjZDRTZFN0FBODJFQUNDREVFMDkyMzkyNjQwM0MyMUZENjE1MDZFOEYwNTQ0NjBD
MEFFRTY2MzNGRTcyMEYyOEZCREY5OEJDNTNGRUM3MUZCMDM2MUQ2N0Q2QjkyNDJF
MkY3MTM5NkNGQkM3QkMyNzBENkI0QTU3RTE2QTY5RkVFODFCNjlEMTkyRTRCN0I2
QzQxOUM0MUJENzg4ODE5N0I1N0ExMkQ4NzFFRjg0MkJCQTA3NUI1MUEzNzE2MUI2
ODFFRkY3NEJEODMzMTU3NERENkVEQjYyMzAzMjA2MDhFRDNGQzZDOTQ0QUREODlC
RTcyRkIxQUUyNUFDNDdFRkFDNjY2RjAxRUExRDlFN0E4NzQ1RTA4MzZGNzE4MzRC
MzIyMEQxMjExNTMwMjMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAxjEFlKP21QeEYbS5MSZNoaVmjqHS/wmK/+HvBeOIWzIS920gVN75
HO2leD48CuyD2FXQShU5V9qx4y+b8T3Bs3gx1VRzAG2DMU1YzRJanN5goGKSU6wE
QBFqOt2GUD6m2mHguPRN3uRK9s5ueqgurM3uCSOSZAPCH9YVBujwVEYMCu5mM/5y
Dyj735i8U/7HH7A2HWfWuSQuL3E5bPvHvCcNa0pX4Wpp/ugbadGS5Le2xBnEG9eI
gZe1ehLYce+EK7oHW1GjcWG2ge/3S9gzFXTdbttiMDIGCO0/xslErdib5y+xriWs
R++sZm8B6h2eeodF4INvcYNLMiDRIRUwIwIDAQABo4ICMjCCAi4wHQYDVR0OBBYE
FHntPFEjNLpvUyoHLB4+wBN2iSmwMB8GA1UdIwQYMBaAFJFpubZSbNFJhN3jpC4k
3Y/nq8F/MA4GA1UdDwEB/wQEAwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODhmMjkxNWQtMThjOS00ZTAzLWJi
ZmItMjA3NGM1OTgwODk4LzAvOTE2OUI5QjY1MjZDRDE0OTg0RERFM0E0MkUyNERE
OEZFN0FCQzE3Ri5jcmwwdAYIKwYBBQUHAQEEaDBmMGQGCCsGAQUFBzAChlhyc3lu
YzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8yLzkxNjlCOUI2
NTI2Q0QxNDk4NERERTNBNDJFMjRERDhGRTdBQkMxN0YuY2VyMIGiBggrBgEFBQcB
CwSBlTCBkjCBjwYIKwYBBQUHMAuGgYJyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby84OGYyOTE1ZC0xOGM5LTRlMDMtYmJmYi0yMDc0YzU5ODA4OTgvMC8z
MTMxMzUyZTMxMzIzNDJlMzkzNTJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMzMzgz
NTMxMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBABzfF8wDQYJKoZIhvcNAQELBQADggEBAE+qGn4/0kew
FJS5uX57Tup/200pZWbmm3d0QMjzse1IkR9sFEQc9Obseh3bQPPbvnTQ/ERVe7Cc
75iG447pccnM7WPEdP8DOzKBuL4KpXlbmqfl5MxoM5dVx3ha927ewR1hNXgeaw98
gxEIreAFCxv6I64zDFjlF+iBsvuQd9xHxXd3xQpiEY6zkjsWxFdjX4s9yRetj2fw
XAFfSWj8RgGHc2ppWLJRXYyuAEVg/ucl0fjcWt1TlPrkb9IJXYoZvQMCRpkJiGW4
7OlfKIZz12vjSwtkK/2f9XMhofvhEzDcciClj6embO54EGn/4gSyqkjuPIgSc64U
u2hkG8cC6w4=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:41 2024 by rpki-client on console-ams.rpki-client.org