Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/323430343a636630303a653030303a3a2f34382d3438203d3e203338353131.roa
File:                     323430343a636630303a653030303a3a2f34382d3438203d3e203338353131.roa (raw, json)
Hash identifier:          MkpClPi8/qqg8+gjLxsUljEhxAq5vtLAjXFl4m2sFGo=
Subject key identifier:   14:F8:1B:30:FF:B5:59:DB:36:81:D7:2D:63:CD:1D:DD:A0:8F:AD:AD
Certificate issuer:       /CN=9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F
Certificate serial:       6F42C4C1A4D45AFFA85A39BC8C6133E601B9AA20
Authority key identifier: 91:69:B9:B6:52:6C:D1:49:84:DD:E3:A4:2E:24:DD:8F:E7:AB:C1:7F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/323430343a636630303a653030303a3a2f34382d3438203d3e203338353131.roa
Signing time:             Wed 30 Mar 2022 08:37:41 +0000
ROA not before:           Wed 30 Mar 2022 08:32:41 +0000
ROA not after:            Wed 29 Mar 2023 08:37:41 +0000
asID:                     38511
IP address blocks:        2404:cf00:e000::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:42:c4:c1:a4:d4:5a:ff:a8:5a:39:bc:8c:61:33:e6:01:b9:aa:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F
        Validity
            Not Before: Mar 30 08:32:41 2022 GMT
            Not After : Mar 29 08:37:41 2023 GMT
        Subject: CN=14F81B30FFB559DB3681D72D63CD1DDDA08FADAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:16:5f:30:e5:77:95:64:3f:d6:53:73:a6:30:
                    2b:a9:a5:75:ad:f6:cb:61:7a:71:ce:60:8d:59:c3:
                    b3:90:73:4c:28:1e:98:44:a6:34:54:77:5c:69:87:
                    03:01:c6:b2:ff:81:bb:aa:72:24:e4:02:99:90:41:
                    a2:df:27:fd:9c:bb:c7:f3:3c:7b:86:16:5e:27:8c:
                    4b:5a:2b:a2:61:99:74:16:72:83:3f:0c:5c:79:09:
                    d1:4f:42:0b:26:3f:fb:33:f3:ff:a4:7d:c5:f3:b5:
                    cc:fa:8f:de:37:09:0b:01:59:d6:2f:cf:3c:ae:b3:
                    91:40:4e:b6:b4:20:9d:f4:ae:b3:7f:1f:45:cc:29:
                    a7:f7:57:43:e2:20:2a:e3:b6:49:c0:53:50:0e:79:
                    bc:5b:47:b2:57:42:99:79:5d:a4:80:3f:f6:da:57:
                    9a:b2:3b:da:e1:8c:5b:9a:d2:91:39:fa:cd:e8:01:
                    85:02:2e:39:ed:df:c2:36:cd:27:77:83:a7:ee:49:
                    a6:d5:e8:15:f2:2a:13:6d:d3:6a:f3:50:9b:5d:19:
                    3e:1e:1b:d1:d7:0c:93:b4:29:dd:c3:25:77:d4:f1:
                    50:07:b2:c4:22:8b:a7:fc:35:1a:27:48:cd:1c:96:
                    8b:07:fd:92:60:b0:47:01:28:3c:25:b4:c7:82:85:
                    1d:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:F8:1B:30:FF:B5:59:DB:36:81:D7:2D:63:CD:1D:DD:A0:8F:AD:AD
            X509v3 Authority Key Identifier:
                keyid:91:69:B9:B6:52:6C:D1:49:84:DD:E3:A4:2E:24:DD:8F:E7:AB:C1:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/323430343a636630303a653030303a3a2f34382d3438203d3e203338353131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:cf00:e000::/48

    Signature Algorithm: sha256WithRSAEncryption
         7b:b8:4b:be:ac:35:3e:a3:4f:84:a6:b9:2f:09:11:5e:b6:48:
         46:88:7d:02:03:3d:31:a9:f0:3e:c9:c2:4e:87:ee:80:24:d3:
         41:e4:43:43:48:fe:d0:49:9f:64:05:91:93:38:dc:22:71:94:
         34:e2:63:ee:35:91:4a:52:81:f5:f6:1e:09:ad:e7:4c:74:c2:
         99:93:37:3b:37:53:92:6c:14:22:c0:2c:46:d8:97:83:4c:80:
         b3:59:4f:23:d6:8c:7a:1f:30:69:b3:46:8a:55:a9:bc:67:f0:
         7e:8c:e6:99:f3:7e:ff:66:e0:c6:38:f2:ed:c4:ac:cc:14:70:
         76:59:eb:49:2f:30:5b:0c:54:c9:1f:9c:68:d2:a0:42:71:15:
         9d:a4:0e:85:cb:1c:aa:26:df:52:97:57:25:40:e0:be:09:bb:
         f4:5e:45:2c:ac:0b:08:aa:71:6b:5c:49:df:a2:55:f7:e2:f4:
         92:b5:ec:55:b7:be:4e:1a:30:f9:3d:3c:c0:70:a9:cb:99:a8:
         20:22:13:a7:40:82:d4:e9:15:db:0d:ec:cc:b4:3d:da:a0:b2:
         8b:12:f3:2a:d6:08:84:07:17:c6:a6:66:c4:a7:10:00:d8:b2:
         52:c8:89:a4:d6:59:f3:f8:98:cb:e8:87:d1:d9:5f:91:9d:af:
         ba:8b:7c:5a
-----BEGIN CERTIFICATE-----
MIIFMzCCBBugAwIBAgIUb0LEwaTUWv+oWjm8jGEz5gG5qiAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTE2OUI5QjY1MjZDRDE0OTg0RERFM0E0MkUyNEREOEZF
N0FCQzE3RjAeFw0yMjAzMzAwODMyNDFaFw0yMzAzMjkwODM3NDFaMDMxMTAvBgNV
BAMTKDE0RjgxQjMwRkZCNTU5REIzNjgxRDcyRDYzQ0QxREREQTA4RkFEQUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKFl8w5XeVZD/WU3OmMCuppXWt
9sthenHOYI1Zw7OQc0woHphEpjRUd1xphwMBxrL/gbuqciTkApmQQaLfJ/2cu8fz
PHuGFl4njEtaK6JhmXQWcoM/DFx5CdFPQgsmP/sz8/+kfcXztcz6j943CQsBWdYv
zzyus5FATra0IJ30rrN/H0XMKaf3V0PiICrjtknAU1AOebxbR7JXQpl5XaSAP/ba
V5qyO9rhjFua0pE5+s3oAYUCLjnt38I2zSd3g6fuSabV6BXyKhNt02rzUJtdGT4e
G9HXDJO0Kd3DJXfU8VAHssQii6f8NRonSM0closH/ZJgsEcBKDwltMeChR2bAgMB
AAGjggI9MIICOTAdBgNVHQ4EFgQUFPgbMP+1Wds2gdctY80d3aCPra0wHwYDVR0j
BBgwFoAUkWm5tlJs0UmE3eOkLiTdj+erwX8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
OGYyOTE1ZC0xOGM5LTRlMDMtYmJmYi0yMDc0YzU5ODA4OTgvMC85MTY5QjlCNjUy
NkNEMTQ5ODREREUzQTQyRTI0REQ4RkU3QUJDMTdGLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOTE2OUI5QjY1MjZDRDE0OTg0RERFM0E0MkUyNEREOEZFN0FC
QzE3Ri5jZXIwgaoGCCsGAQUFBwELBIGdMIGaMIGXBggrBgEFBQcwC4aBinJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzg4ZjI5MTVkLTE4YzktNGUwMy1i
YmZiLTIwNzRjNTk4MDg5OC8wLzMyMzQzMDM0M2E2MzY2MzAzMDNhNjUzMDMwMzAz
YTNhMmYzNDM4MmQzNDM4MjAzZDNlMjAzMzM4MzUzMTMxLnJvYTAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAJATP
AOAAMA0GCSqGSIb3DQEBCwUAA4IBAQB7uEu+rDU+o0+EprkvCRFetkhGiH0CAz0x
qfA+ycJOh+6AJNNB5ENDSP7QSZ9kBZGTONwicZQ04mPuNZFKUoH19h4JredMdMKZ
kzc7N1OSbBQiwCxG2JeDTICzWU8j1ox6HzBps0aKVam8Z/B+jOaZ837/ZuDGOPLt
xKzMFHB2WetJLzBbDFTJH5xo0qBCcRWdpA6FyxyqJt9Sl1clQOC+Cbv0XkUsrAsI
qnFrXEnfolX34vSStexVt75OGjD5PTzAcKnLmaggIhOnQILU6RXbDezMtD3aoLKL
EvMq1giEBxfGpmbEpxAA2LJSyImk1lnz+JjL6IfR2V+Rna+6i3xa
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:08 2024 by rpki-client on console-fra.rpki-client.org