Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3131352e3137382e3134342e302f32322d3234203d3e20313331373336.roa
File:                     3131352e3137382e3134342e302f32322d3234203d3e20313331373336.roa (raw, json)
Hash identifier:          2Zbg3mdyCBYflhpGOeHi8UKSX+dD8AQGKMCMgzme2qA=
Subject key identifier:   4C:7A:57:80:AB:6F:57:C5:6F:70:09:8B:FD:88:22:22:5A:D8:4A:D7
Certificate issuer:       /CN=09A6F1FA4FC532D6B4E13462FC234C9C763CF361
Certificate serial:       7FA09AA94429092AC06CD6B64FEE6D66E8F0E836
Authority key identifier: 09:A6:F1:FA:4F:C5:32:D6:B4:E1:34:62:FC:23:4C:9C:76:3C:F3:61
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3131352e3137382e3134342e302f32322d3234203d3e20313331373336.roa
Signing time:             Wed 16 Mar 2022 07:37:07 +0000
ROA not before:           Wed 16 Mar 2022 07:32:07 +0000
ROA not after:            Wed 15 Mar 2023 07:37:07 +0000
asID:                     131736
IP address blocks:        115.178.144.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:a0:9a:a9:44:29:09:2a:c0:6c:d6:b6:4f:ee:6d:66:e8:f0:e8:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09A6F1FA4FC532D6B4E13462FC234C9C763CF361
        Validity
            Not Before: Mar 16 07:32:07 2022 GMT
            Not After : Mar 15 07:37:07 2023 GMT
        Subject: CN=4C7A5780AB6F57C56F70098BFD8822225AD84AD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:7a:82:fc:49:e0:37:23:33:2e:95:e0:d1:40:
                    b5:78:1a:15:3c:05:5e:a5:d2:05:6e:f3:7c:3e:33:
                    12:7a:a9:ee:5a:52:2d:b9:77:89:69:0a:b7:a6:ce:
                    da:9c:64:54:2a:1e:ba:91:13:9f:b3:56:1a:4a:e4:
                    c0:32:5d:85:09:8d:43:47:0d:a4:39:22:54:57:c5:
                    d8:44:cb:7f:e9:7c:a7:b9:42:a4:d3:64:99:45:91:
                    24:29:ff:ff:7a:a5:39:a7:3e:2f:6f:4f:75:c5:53:
                    2f:f8:c4:7f:e5:1b:83:0b:16:5e:46:7e:9f:55:0e:
                    d4:95:ef:84:1f:d7:f8:3d:08:ea:25:f3:e6:59:0f:
                    7b:16:d4:d3:a4:2c:e0:3a:f0:16:31:a0:77:dc:dc:
                    a2:85:16:14:49:03:18:b7:17:74:7d:0b:7a:a4:98:
                    71:5d:f7:b9:2a:4c:50:9c:42:13:b2:ee:f5:97:c4:
                    6b:cf:c4:6c:da:74:fb:d5:55:8e:4d:9e:45:7f:6a:
                    3a:1d:2e:ff:c3:cd:b5:9a:88:25:50:14:40:4e:47:
                    ee:b5:83:39:e0:5a:c7:6d:ee:84:0c:cd:b7:1f:fb:
                    1e:4d:9e:e6:84:aa:95:ee:c4:14:67:11:d9:df:f0:
                    c5:5d:78:3b:1c:85:53:ea:47:90:9e:3b:6d:fa:73:
                    8b:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:7A:57:80:AB:6F:57:C5:6F:70:09:8B:FD:88:22:22:5A:D8:4A:D7
            X509v3 Authority Key Identifier:
                keyid:09:A6:F1:FA:4F:C5:32:D6:B4:E1:34:62:FC:23:4C:9C:76:3C:F3:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3131352e3137382e3134342e302f32322d3234203d3e20313331373336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.178.144.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bc:3d:28:0f:38:14:97:57:57:1e:e6:71:4c:56:df:d7:ed:09:
         a5:c7:26:83:95:21:85:95:0c:92:2a:43:76:83:e4:c0:87:9e:
         26:f1:62:b9:23:11:2d:36:78:0d:8e:06:81:0d:ea:f4:45:a3:
         58:43:d4:1f:e1:70:ff:64:33:2c:89:48:48:7e:91:56:4c:12:
         36:e8:7f:59:5e:8c:08:f4:3a:b8:c5:4a:12:7d:7b:7e:87:08:
         48:99:17:df:ed:3f:15:d4:42:0f:58:5b:ee:c6:7b:7d:b4:71:
         2d:f4:0b:87:db:6a:03:09:28:b0:5e:d0:d7:6b:03:ee:2f:59:
         29:47:62:36:83:12:27:96:bf:f1:d4:a8:31:3d:eb:8f:39:78:
         2a:ff:83:54:75:41:45:be:b8:61:7d:11:f4:27:41:50:03:81:
         97:88:26:62:94:31:b0:38:9c:bb:5e:24:c7:36:a2:cc:f1:45:
         c0:02:78:a0:1f:74:a1:ad:cf:e7:66:03:a2:59:ee:d3:6c:bf:
         0c:20:cb:a9:a5:43:52:fc:d0:13:22:3f:c8:0d:79:83:6f:1e:
         d6:2c:4b:78:a4:d7:4f:bb:bf:fe:0f:93:0f:9f:bf:30:53:da:
         82:0e:e5:6c:9e:a7:ae:68:fa:b4:cb:2b:4e:61:5d:60:97:16:
         b8:b2:e7:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:07 2023 by rpki-client on console-fra.rpki-client.org