Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3131352e3137382e3134382e302f32322d3234203d3e20313331373336.roa
File:                     3131352e3137382e3134382e302f32322d3234203d3e20313331373336.roa (raw, json)
Hash identifier:          c6Z1fa3Zaz8vVTzGfAl8d2OzUTgsmRYlTDozXfV2AlA=
Subject key identifier:   8F:ED:38:67:C4:2D:C6:12:35:D5:03:E9:65:65:29:3E:31:96:70:C4
Certificate issuer:       /CN=09A6F1FA4FC532D6B4E13462FC234C9C763CF361
Certificate serial:       0EB02EB1BD43243351F0755AFB29C66310138FB7
Authority key identifier: 09:A6:F1:FA:4F:C5:32:D6:B4:E1:34:62:FC:23:4C:9C:76:3C:F3:61
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3131352e3137382e3134382e302f32322d3234203d3e20313331373336.roa
Signing time:             Wed 16 Mar 2022 07:37:26 +0000
ROA not before:           Wed 16 Mar 2022 07:32:26 +0000
ROA not after:            Wed 15 Mar 2023 07:37:26 +0000
asID:                     131736
IP address blocks:        115.178.148.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:b0:2e:b1:bd:43:24:33:51:f0:75:5a:fb:29:c6:63:10:13:8f:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09A6F1FA4FC532D6B4E13462FC234C9C763CF361
        Validity
            Not Before: Mar 16 07:32:26 2022 GMT
            Not After : Mar 15 07:37:26 2023 GMT
        Subject: CN=8FED3867C42DC61235D503E96565293E319670C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:87:5e:01:96:be:eb:5d:45:eb:29:ad:7f:fb:
                    44:de:c8:8f:04:df:ab:b1:3a:60:68:64:25:38:ee:
                    6a:d2:45:ac:b4:c5:1e:15:cf:73:67:a6:5e:0e:3c:
                    0e:32:0b:39:e4:8d:bf:4e:f1:24:51:80:39:bd:15:
                    0e:11:e6:62:80:bb:68:c8:11:64:ce:b5:e4:8f:15:
                    a7:6d:71:da:0d:9b:59:f3:e9:bc:1c:cd:98:2b:af:
                    1e:e1:f8:1f:a4:64:c0:92:5b:2a:bf:31:a9:f4:1c:
                    fa:cf:b0:1e:f4:b2:ad:65:99:02:a3:63:d2:d0:f5:
                    35:d8:4e:df:c6:25:09:88:3e:99:3d:34:88:44:82:
                    ed:48:13:5b:37:f2:65:f2:45:72:71:4f:ad:d3:04:
                    92:8c:67:0c:0a:04:f1:fc:59:3a:05:90:22:99:61:
                    e0:df:9f:9e:68:d0:eb:d4:d9:2a:80:c0:ee:e0:2d:
                    7b:2a:b2:1c:b3:a6:28:d8:bc:85:7f:1f:bb:87:58:
                    c5:24:3a:d2:3c:8a:b6:34:33:89:41:61:6d:61:53:
                    15:f1:54:37:3d:d3:de:29:ec:6b:0b:88:68:1d:f6:
                    08:84:a1:8e:79:e1:f5:e7:1c:5f:83:2d:9e:6c:47:
                    74:01:a2:df:39:6f:cf:db:1a:3a:98:1d:bd:62:de:
                    94:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:ED:38:67:C4:2D:C6:12:35:D5:03:E9:65:65:29:3E:31:96:70:C4
            X509v3 Authority Key Identifier:
                keyid:09:A6:F1:FA:4F:C5:32:D6:B4:E1:34:62:FC:23:4C:9C:76:3C:F3:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3131352e3137382e3134382e302f32322d3234203d3e20313331373336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.178.148.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7a:6a:d2:8a:96:f3:ba:54:e4:d0:44:7e:fc:4f:bf:19:4a:f2:
         b1:84:26:f3:ca:ab:f5:fe:94:a5:8a:7f:4e:85:a4:d6:ff:0a:
         aa:ab:92:41:54:f3:1d:24:67:1e:fb:39:3f:3e:05:dc:ed:bd:
         3e:a2:5d:a0:42:1c:cd:b7:80:9f:8c:b3:64:6b:51:6f:bb:57:
         6d:14:5c:f8:e9:41:0c:19:ce:7f:6e:99:75:fd:db:a5:48:bb:
         ed:ea:80:9e:b0:17:4c:79:4e:3b:44:2d:7a:ce:b1:a3:79:18:
         a8:c0:21:35:8f:ee:93:56:96:18:3a:ef:0e:b9:6e:d0:ff:62:
         37:07:16:21:90:c6:b6:e0:86:00:b5:3d:78:61:fc:b7:e1:26:
         d0:10:21:3f:c7:7f:79:8b:b8:93:05:e8:bf:94:bf:94:ad:13:
         0f:c5:d8:60:25:ac:62:86:1c:e4:be:5f:94:df:d6:e5:ff:0c:
         60:ca:63:97:99:56:90:69:48:99:6b:5c:87:ad:34:c6:3f:2f:
         52:c9:4e:36:c3:82:52:69:d2:36:7b:4f:62:24:c6:c7:4d:13:
         f9:ca:d3:71:ab:71:5e:87:2d:95:43:ea:a0:6c:6e:58:5f:0e:
         b2:8e:30:0e:43:a7:a0:3e:f3:4c:a4:73:8b:8a:58:3d:0d:09:
         21:ea:b8:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:16 2024 by rpki-client on console-fra.rpki-client.org