Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/323430343a636630303a6566613a3a2f34382d3438203d3e203338353131.roa
File:                     323430343a636630303a6566613a3a2f34382d3438203d3e203338353131.roa (raw, json)
Hash identifier:          Y1J/seSVxr2m2+dnYD01RC6NUHuxPZiB7FQdcD/g0AA=
Subject key identifier:   51:E5:81:34:D8:C7:F1:F2:DE:6D:FD:D8:81:FE:D9:58:A7:8E:FF:E6
Certificate issuer:       /CN=9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F
Certificate serial:       26FB3BD63D9631E0B959A14D293F8FCB0C36D720
Authority key identifier: 91:69:B9:B6:52:6C:D1:49:84:DD:E3:A4:2E:24:DD:8F:E7:AB:C1:7F
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/323430343a636630303a6566613a3a2f34382d3438203d3e203338353131.roa
Signing time:             Wed 30 Mar 2022 08:26:23 +0000
ROA not before:           Wed 30 Mar 2022 08:21:23 +0000
ROA not after:            Wed 29 Mar 2023 08:26:23 +0000
asID:                     38511
IP address blocks:        2404:cf00:efa::/48 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:fb:3b:d6:3d:96:31:e0:b9:59:a1:4d:29:3f:8f:cb:0c:36:d7:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F
        Validity
            Not Before: Mar 30 08:21:23 2022 GMT
            Not After : Mar 29 08:26:23 2023 GMT
        Subject: CN=51E58134D8C7F1F2DE6DFDD881FED958A78EFFE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:03:1d:be:e5:75:83:da:4b:c6:03:6f:f3:72:
                    cb:a3:71:80:80:98:54:2e:e9:85:66:a6:c0:ea:06:
                    cc:46:74:13:19:d3:0f:79:36:06:3e:08:0f:28:12:
                    9e:ef:8a:d8:e2:5c:4e:c4:3e:3e:3a:52:c6:00:9d:
                    c1:da:1b:a6:07:1d:be:77:16:4f:97:b2:c6:25:00:
                    b8:2d:80:5e:d0:b0:84:c3:ee:3c:88:5c:a5:c6:95:
                    62:8f:e8:9f:7b:e8:67:ac:d8:c4:0a:62:90:b0:bb:
                    4a:3c:76:36:c9:36:da:81:36:03:49:42:f3:b5:4c:
                    3a:5c:17:d5:09:a5:3e:c0:5f:14:ef:b0:39:be:91:
                    39:f1:6b:2f:14:4c:8a:db:6c:68:55:79:df:1d:18:
                    be:52:9a:f0:bb:0e:c5:c7:df:44:f8:89:d2:33:5a:
                    7f:70:01:ce:c8:e7:62:70:14:95:79:d4:30:1b:5d:
                    e4:71:93:79:41:33:0c:51:4b:6b:be:5d:d7:df:5a:
                    a7:2f:34:ea:3b:3c:15:b3:63:23:c8:b7:7b:b0:95:
                    fc:60:51:a7:44:ba:94:49:cf:82:e3:45:51:d5:d2:
                    ee:56:09:1c:9f:64:0b:3a:14:60:a3:10:cd:dd:c5:
                    da:22:9f:10:09:0d:4b:f0:10:db:31:ed:92:ed:88:
                    9d:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:E5:81:34:D8:C7:F1:F2:DE:6D:FD:D8:81:FE:D9:58:A7:8E:FF:E6
            X509v3 Authority Key Identifier:
                keyid:91:69:B9:B6:52:6C:D1:49:84:DD:E3:A4:2E:24:DD:8F:E7:AB:C1:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9169B9B6526CD14984DDE3A42E24DD8FE7ABC17F.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/88f2915d-18c9-4e03-bbfb-2074c5980898/0/323430343a636630303a6566613a3a2f34382d3438203d3e203338353131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2404:cf00:efa::/48

    Signature Algorithm: sha256WithRSAEncryption
         1f:13:65:b9:ee:b8:79:9d:b2:86:15:b0:81:c7:a4:49:5b:f7:
         5c:e5:25:65:ca:77:ea:75:0f:1e:d3:09:98:1b:1b:8e:b3:6d:
         89:77:09:2b:a3:83:79:0b:fb:08:80:9e:4a:05:4f:16:6f:95:
         db:c2:cf:12:7a:ff:08:5f:f5:41:f1:38:14:d2:78:68:42:df:
         15:ee:d3:bf:4d:90:8b:c4:27:6d:6b:62:72:b5:86:b5:b5:61:
         f7:25:86:8f:30:fa:e3:c0:69:b2:f3:20:b6:d7:e9:7c:7c:69:
         cb:49:5e:50:fa:93:4b:05:78:68:f6:a0:34:09:1b:da:71:34:
         52:86:39:dc:53:74:2a:06:15:b3:ca:3c:30:34:fc:31:b7:c7:
         ee:f9:b1:32:39:46:2f:4d:c8:0a:61:c0:a3:cc:26:d5:45:c2:
         e7:d9:ce:fa:82:3c:f1:57:e6:2c:da:d7:c9:85:93:a6:a6:ad:
         12:17:a7:39:86:9f:40:ef:f9:eb:79:0a:d0:08:96:77:05:f7:
         d4:35:6e:b2:44:dd:2d:40:71:1c:3e:ee:4a:0f:e7:17:ef:17:
         a7:03:1f:7d:92:b4:65:85:b6:9b:15:4b:b4:60:7e:88:79:37:
         a3:aa:df:33:8b:50:71:36:05:d9:41:e1:94:17:a5:9c:03:5f:
         23:85:84:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:41 2024 by rpki-client on console-ams.rpki-client.org