Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/3132302e38392e39312e302f32342d3234203d3e20313335343737.roa
File:                     3132302e38392e39312e302f32342d3234203d3e20313335343737.roa (raw, json)
Hash identifier:          zmqZcc9sjDvSxj+AbUqFnpqg6n6cmm7RmlcIygow4rk=
Subject key identifier:   76:18:21:9B:5C:C3:7A:E5:8A:B8:AE:DA:3D:F3:9A:3D:6D:E4:4B:C9
Certificate issuer:       /CN=80A57D92B8D4C3FF17E71C0305D9AD829B9410E9
Certificate serial:       408E278A43224031CD0FCA6AFB22893772808A11
Authority key identifier: 80:A5:7D:92:B8:D4:C3:FF:17:E7:1C:03:05:D9:AD:82:9B:94:10:E9
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/3132302e38392e39312e302f32342d3234203d3e20313335343737.roa
Signing time:             Wed 19 Jan 2022 08:00:01 +0000
ROA not before:           Wed 19 Jan 2022 07:55:01 +0000
ROA not after:            Thu 19 Jan 2023 08:00:01 +0000
asID:                     135477
IP address blocks:        120.89.91.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:8e:27:8a:43:22:40:31:cd:0f:ca:6a:fb:22:89:37:72:80:8a:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80A57D92B8D4C3FF17E71C0305D9AD829B9410E9
        Validity
            Not Before: Jan 19 07:55:01 2022 GMT
            Not After : Jan 19 08:00:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:1d:32:81:78:d7:13:10:64:d9:58:8d:4d:f4:
                    49:c6:6c:30:bb:20:bd:7d:ac:38:ec:ae:da:e3:00:
                    1d:e6:9f:6d:61:4e:83:dd:3f:7f:55:96:b2:98:dc:
                    e0:be:6a:9b:98:5f:bb:8b:1b:21:29:30:f2:5c:eb:
                    6e:69:14:c0:45:db:7a:88:03:ef:f4:7d:b2:11:8b:
                    d5:21:2f:c6:4a:8e:9a:70:3e:f1:c2:b3:d8:82:a3:
                    4e:01:61:ca:c4:e6:78:41:38:f7:a2:f1:49:0c:f6:
                    3c:e0:c3:a7:99:c7:20:32:87:40:40:79:bd:c3:a2:
                    04:f5:b5:e6:1c:1e:28:e9:aa:bc:2e:39:1c:8f:cf:
                    37:50:b6:4a:23:62:0c:52:65:54:ab:6a:96:dc:7c:
                    0c:81:5c:91:6d:f3:87:a7:4d:d1:ab:4b:68:e5:2b:
                    d9:2e:3d:51:ea:bc:30:d2:97:70:a6:84:55:ee:3d:
                    ba:36:37:1d:ec:6f:96:b2:cd:13:31:3c:ac:8e:66:
                    79:cd:d8:b6:b9:7e:e9:8d:e4:cd:70:17:20:59:5c:
                    3a:fe:8c:fc:3c:37:14:33:d2:43:f7:ab:59:32:d5:
                    91:35:24:58:7f:d8:eb:d2:06:b6:1a:f4:92:b7:c4:
                    51:6d:18:b9:0a:74:7b:8e:9b:6c:07:71:f1:93:d1:
                    17:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:18:21:9B:5C:C3:7A:E5:8A:B8:AE:DA:3D:F3:9A:3D:6D:E4:4B:C9
            X509v3 Authority Key Identifier:
                keyid:80:A5:7D:92:B8:D4:C3:FF:17:E7:1C:03:05:D9:AD:82:9B:94:10:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/80A57D92B8D4C3FF17E71C0305D9AD829B9410E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a7fdf43e-4a4c-4dbc-b785-dd7cbf1a67b7/0/3132302e38392e39312e302f32342d3234203d3e20313335343737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  120.89.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         26:52:ab:38:7b:44:58:cd:0e:5a:31:f2:92:f1:37:82:de:53:
         5c:56:6c:bc:f4:5a:f4:6d:fb:88:0a:ba:61:02:6d:7c:d1:67:
         79:ca:3e:8f:fe:cc:eb:82:7b:17:ce:a4:7a:3e:5e:fd:03:51:
         6e:ed:0e:3e:4b:45:9b:65:0a:7e:a2:91:df:0f:3f:64:cd:3a:
         73:21:3a:53:a7:84:f6:81:60:7c:cf:81:85:b9:91:76:e6:2e:
         a4:1a:0d:a3:e8:08:5e:d6:bb:3a:47:2e:91:74:64:99:3e:5a:
         94:0e:d5:62:76:45:1c:d2:cd:34:04:e3:d2:da:68:52:d6:dd:
         f0:41:ff:df:72:8b:e4:b0:64:8c:9c:9a:87:4e:d6:6c:31:29:
         e9:c9:fc:69:89:5f:56:59:18:35:a6:d7:70:54:1a:8a:81:b0:
         4c:b1:0b:35:2a:18:e8:46:14:2c:af:5f:ff:8e:1d:18:bc:3d:
         c0:95:6d:3d:a6:9f:b5:c2:7e:0c:b2:14:56:5c:4b:8a:d9:30:
         45:f2:76:94:da:36:40:5e:7a:c3:a5:2c:5c:54:95:43:bb:17:
         b3:fc:fc:0f:bf:15:3e:3f:13:72:96:96:e7:31:28:bd:e6:87:
         48:a2:f2:fb:22:33:bf:b2:df:cd:d5:50:11:51:1c:7e:83:3a:
         d4:c3:23:be
-----BEGIN CERTIFICATE-----
MIIHJDCCBgygAwIBAgIUQI4nikMiQDHND8pq+yKJN3KAihEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoODBBNTdEOTJCOEQ0QzNGRjE3RTcxQzAzMDVEOUFEODI5
Qjk0MTBFOTAeFw0yMjAxMTkwNzU1MDFaFw0yMzAxMTkwODAwMDFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzUxRDMyODE3OEQ3MTMxMDY0
RDk1ODhENERGNDQ5QzY2QzMwQkIyMEJEN0RBQzM4RUNBRURBRTMwMDFERTY5RjZE
NjE0RTgzREQzRjdGNTU5NkIyOThEQ0UwQkU2QTlCOTg1RkJCOEIxQjIxMjkzMEYy
NUNFQjZFNjkxNEMwNDVEQjdBODgwM0VGRjQ3REIyMTE4QkQ1MjEyRkM2NEE4RTlB
NzAzRUYxQzJCM0Q4ODJBMzRFMDE2MUNBQzRFNjc4NDEzOEY3QTJGMTQ5MENGNjND
RTBDM0E3OTlDNzIwMzI4NzQwNDA3OUJEQzNBMjA0RjVCNUU2MUMxRTI4RTlBQUJD
MkUzOTFDOEZDRjM3NTBCNjRBMjM2MjBDNTI2NTU0QUI2QTk2REM3QzBDODE1Qzkx
NkRGMzg3QTc0REQxQUI0QjY4RTUyQkQ5MkUzRDUxRUFCQzMwRDI5NzcwQTY4NDU1
RUUzREJBMzYzNzFERUM2Rjk2QjJDRDEzMzEzQ0FDOEU2Njc5Q0REOEI2Qjk3RUU5
OERFNENENzAxNzIwNTk1QzNBRkU4Q0ZDM0MzNzE0MzNEMjQzRjdBQjU5MzJENTkx
MzUyNDU4N0ZEOEVCRDIwNkI2MUFGNDkyQjdDNDUxNkQxOEI5MEE3NDdCOEU5QjZD
MDc3MUYxOTNEMTE3RDcwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAxR0ygXjXExBk2ViNTfRJxmwwuyC9faw47K7a4wAd5p9tYU6D3T9/
VZaymNzgvmqbmF+7ixshKTDyXOtuaRTARdt6iAPv9H2yEYvVIS/GSo6acD7xwrPY
gqNOAWHKxOZ4QTj3ovFJDPY84MOnmccgModAQHm9w6IE9bXmHB4o6aq8Ljkcj883
ULZKI2IMUmVUq2qW3HwMgVyRbfOHp03Rq0to5SvZLj1R6rww0pdwpoRV7j26Njcd
7G+Wss0TMTysjmZ5zdi2uX7pjeTNcBcgWVw6/oz8PDcUM9JD96tZMtWRNSRYf9jr
0ga2GvSSt8RRbRi5CnR7jptsB3Hxk9EX1wIDAQABo4ICMjCCAi4wHQYDVR0OBBYE
FHYYIZtcw3rliriu2j3zmj1t5EvJMB8GA1UdIwQYMBaAFIClfZK41MP/F+ccAwXZ
rYKblBDpMA4GA1UdDwEB/wQEAwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vYTdmZGY0M2UtNGE0Yy00ZGJjLWI3
ODUtZGQ3Y2JmMWE2N2I3LzAvODBBNTdEOTJCOEQ0QzNGRjE3RTcxQzAzMDVEOUFE
ODI5Qjk0MTBFOS5jcmwwdAYIKwYBBQUHAQEEaDBmMGQGCCsGAQUFBzAChlhyc3lu
YzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8yLzgwQTU3RDky
QjhENEMzRkYxN0U3MUMwMzA1RDlBRDgyOUI5NDEwRTkuY2VyMIGiBggrBgEFBQcB
CwSBlTCBkjCBjwYIKwYBBQUHMAuGgYJyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby9hN2ZkZjQzZS00YTRjLTRkYmMtYjc4NS1kZDdjYmYxYTY3YjcvMC8z
MTMyMzAyZTM4MzkyZTM5MzEyZTMwMmYzMjM0MmQzMjM0MjAzZDNlMjAzMTMzMzUz
NDM3Mzcucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBAB4WVswDQYJKoZIhvcNAQELBQADggEBACZSqzh7RFjN
Dlox8pLxN4LeU1xWbLz0WvRt+4gKumECbXzRZ3nKPo/+zOuCexfOpHo+Xv0DUW7t
Dj5LRZtlCn6ikd8PP2TNOnMhOlOnhPaBYHzPgYW5kXbmLqQaDaPoCF7WuzpHLpF0
ZJk+WpQO1WJ2RRzSzTQE49LaaFLW3fBB/99yi+SwZIycmodO1mwxKenJ/GmJX1ZZ
GDWm13BUGoqBsEyxCzUqGOhGFCyvX/+OHRi8PcCVbT2mn7XCfgyyFFZcS4rZMEXy
dpTaNkBeesOlLFxUlUO7F7P8/A+/FT4/E3KWlucxKL3mh0ii8vsiM7+y383VUBFR
HH6DOtTDI74=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:49 2024 by rpki-client on console-ams.rpki-client.org