Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3131352e3137382e3135322e302f32322d3234203d3e20313331373336.roa
File:                     3131352e3137382e3135322e302f32322d3234203d3e20313331373336.roa (raw, json)
Hash identifier:          vzWqADDQA/HeyVa9N0V8RIQHcfB4lMnA0siun3W1Y8M=
Subject key identifier:   F3:16:89:54:DE:F3:27:17:F5:FC:E1:77:99:69:80:30:D6:98:5F:9F
Certificate issuer:       /CN=09A6F1FA4FC532D6B4E13462FC234C9C763CF361
Certificate serial:       17088F4BFEBBD0BA461306818D8C1F2EF209FF5E
Authority key identifier: 09:A6:F1:FA:4F:C5:32:D6:B4:E1:34:62:FC:23:4C:9C:76:3C:F3:61
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3131352e3137382e3135322e302f32322d3234203d3e20313331373336.roa
Signing time:             Wed 16 Mar 2022 07:37:45 +0000
ROA not before:           Wed 16 Mar 2022 07:32:45 +0000
ROA not after:            Wed 15 Mar 2023 07:37:45 +0000
asID:                     131736
IP address blocks:        115.178.152.0/22 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:08:8f:4b:fe:bb:d0:ba:46:13:06:81:8d:8c:1f:2e:f2:09:ff:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09A6F1FA4FC532D6B4E13462FC234C9C763CF361
        Validity
            Not Before: Mar 16 07:32:45 2022 GMT
            Not After : Mar 15 07:37:45 2023 GMT
        Subject: CN=F3168954DEF32717F5FCE17799698030D6985F9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:ac:57:2f:1f:e8:17:6a:41:5f:f9:7b:d6:30:
                    b5:03:6f:ae:b0:70:3e:bc:01:9b:8f:00:e6:04:a4:
                    19:f8:34:09:80:24:d9:8f:f4:8b:67:d7:d6:5a:02:
                    52:1f:92:43:4e:bf:6a:23:e7:b3:b7:fe:be:ce:14:
                    d7:fd:f3:d5:5e:88:41:72:da:cd:5e:5e:a8:92:7f:
                    de:b1:e6:b7:da:87:42:d9:89:a0:46:df:fc:8f:04:
                    b4:f7:ba:9f:5c:43:bd:6d:7c:76:23:58:0a:04:0d:
                    d3:f9:61:52:97:51:3a:da:3c:98:ea:1c:00:e7:11:
                    38:86:05:da:70:19:0e:b8:92:3c:97:f6:87:c6:f4:
                    54:62:a6:c5:18:a5:8c:ee:c7:5a:61:17:8a:b5:d1:
                    70:5c:6f:ea:db:73:72:b8:b2:78:c5:b8:2e:c5:39:
                    55:d4:89:d7:fa:b0:47:e8:1f:25:18:82:6f:5b:40:
                    cd:cf:19:80:86:40:9d:75:d0:a1:59:ff:ad:2d:0e:
                    1a:0c:7f:77:3f:cd:17:1c:d9:8e:fe:ee:f0:99:14:
                    86:d7:08:25:57:e4:de:6e:06:ae:9e:10:ae:32:b0:
                    a9:ab:30:d6:20:40:76:2f:d1:55:b6:76:50:04:b6:
                    06:ae:1c:63:28:2f:7f:39:50:72:0a:b7:29:86:26:
                    da:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:16:89:54:DE:F3:27:17:F5:FC:E1:77:99:69:80:30:D6:98:5F:9F
            X509v3 Authority Key Identifier:
                keyid:09:A6:F1:FA:4F:C5:32:D6:B4:E1:34:62:FC:23:4C:9C:76:3C:F3:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3131352e3137382e3135322e302f32322d3234203d3e20313331373336.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.178.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         01:e4:cb:c9:b0:0b:ee:04:26:0e:32:2e:92:13:3c:2b:fd:23:
         55:1e:2d:5e:fd:e4:d2:ec:b3:f6:40:19:6e:7c:37:53:a7:f4:
         1a:30:c3:43:2b:d9:ad:b6:09:1a:96:b9:90:54:85:b5:a5:df:
         d0:a3:f0:62:34:97:b7:18:ce:ec:38:fc:01:92:a0:8a:93:ac:
         fe:52:55:f4:a6:2f:8b:54:10:1f:45:a2:6f:31:28:81:da:4e:
         07:89:f4:38:88:6d:3f:ab:d5:55:01:88:a6:b6:fb:7d:ba:d6:
         68:75:98:0d:ec:16:1e:7c:6e:84:5c:87:a8:d1:7a:76:e6:df:
         51:24:83:64:75:0a:4e:4c:28:ec:5f:f9:73:ba:09:14:c0:54:
         13:2d:62:f6:ac:fb:a6:d5:bf:0a:3c:89:0c:90:72:25:4d:a0:
         8a:de:2d:2f:09:ee:b0:6b:ee:f1:05:6f:d6:2d:02:15:9a:bf:
         f0:d7:82:69:2e:90:a2:cc:46:6e:c3:5c:83:04:c3:1c:82:1e:
         64:45:cd:aa:6e:60:67:68:f0:08:3c:65:73:4e:8f:12:fd:15:
         bd:2b:f3:f2:c6:47:4e:9b:e1:83:8d:85:c9:6f:33:32:67:fd:
         ed:9b:f0:7e:1a:d1:99:da:0d:67:2e:4b:91:3a:96:41:ac:78:
         ad:98:3c:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:07 2023 by rpki-client on console-fra.rpki-client.org