Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3132382e302f32342d3234203d3e203234323033.roa
File:                     3134302e3231332e3132382e302f32342d3234203d3e203234323033.roa (raw, json)
Hash identifier:          V7BYkGA2RDbkUYBwqKbFtt3lZ/zoa96IgO4oAHsLa58=
Subject key identifier:   B5:DB:1C:6C:C8:F8:3F:9C:F9:86:8D:7A:DE:59:4C:6A:9D:06:C7:AC
Certificate issuer:       /CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B
Certificate serial:       5D196B53D0CCEEEEDD80CDE745BA980F0A0D5A3D
Authority key identifier: 10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3132382e302f32342d3234203d3e203234323033.roa
Signing time:             Sat 08 Jan 2022 17:15:37 +0000
ROA not before:           Sat 08 Jan 2022 17:10:37 +0000
ROA not after:            Sun 08 Jan 2023 17:15:37 +0000
asID:                     24203
IP address blocks:        140.213.128.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:19:6b:53:d0:cc:ee:ee:dd:80:cd:e7:45:ba:98:0f:0a:0d:5a:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B
        Validity
            Not Before: Jan  8 17:10:37 2022 GMT
            Not After : Jan  8 17:15:37 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e6:38:f5:20:40:b2:70:a6:6c:6e:50:5a:e3:
                    fe:d2:ff:51:fc:93:c3:30:c1:24:98:df:14:c8:9d:
                    78:71:f1:b2:30:9d:e5:58:94:dc:7d:2f:29:6e:5e:
                    b3:98:14:77:18:78:f2:99:44:ce:ed:96:e6:a4:41:
                    46:a3:34:fa:5d:d0:08:d5:02:a7:d8:f5:70:0d:5a:
                    df:e6:3b:13:a4:ad:3b:c7:49:41:e5:c5:14:0d:59:
                    1e:44:87:5c:d9:cf:ff:c5:d1:7c:17:81:27:65:fe:
                    e2:65:a0:0a:4a:e1:f0:8a:f2:df:b0:ed:36:6b:a7:
                    43:1c:a3:a6:e3:81:79:e9:ba:ba:c9:5c:d3:4e:1e:
                    c1:19:1b:5e:ed:9f:8d:26:89:ef:d2:f2:42:46:c6:
                    02:8e:28:72:78:76:43:c8:ec:01:e9:1b:f7:13:b7:
                    c1:27:12:cf:22:9f:ed:b8:cb:57:0b:2b:a9:3c:05:
                    13:f5:e7:2c:40:27:77:f3:a0:78:b6:2d:68:24:45:
                    53:8d:77:bf:72:97:66:90:39:d7:4d:53:a3:ce:2b:
                    de:db:4b:2d:15:f7:a3:56:32:e5:cb:9c:c3:8d:22:
                    13:09:21:c6:e6:cc:7d:f5:ed:31:be:54:6b:1a:36:
                    bc:b0:5f:8f:a2:e5:72:dc:41:80:75:69:7e:92:a7:
                    3e:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:DB:1C:6C:C8:F8:3F:9C:F9:86:8D:7A:DE:59:4C:6A:9D:06:C7:AC
            X509v3 Authority Key Identifier:
                keyid:10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3132382e302f32342d3234203d3e203234323033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.213.128.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:10:15:ac:fc:c9:9d:8d:37:0c:e0:d2:d5:ed:cb:17:cc:fd:
         29:3d:53:04:0d:40:78:25:7c:69:39:5a:ba:bc:34:26:95:a2:
         55:62:0e:d5:6a:9e:a7:95:22:c8:e9:bf:c8:fe:37:df:4c:f4:
         ff:be:ae:20:6c:7a:ed:f4:be:35:ff:84:1d:61:36:fc:4a:77:
         e0:17:57:d0:9f:00:3d:ef:52:5a:2b:8b:73:89:4c:8d:91:3f:
         a8:83:ad:b6:10:b5:c3:25:14:43:ea:70:eb:4e:24:cd:36:a4:
         fe:7d:93:4e:84:8f:ed:c4:04:c0:4d:68:1e:bb:56:f0:39:1a:
         f9:90:2a:4f:66:49:5a:78:4b:ba:ac:65:9b:80:50:08:25:d5:
         59:78:da:f2:32:f6:1e:0a:b0:5e:b0:ec:72:76:8e:e2:b3:56:
         6b:9b:19:2b:ce:e8:72:6a:fa:70:28:21:e1:d7:2a:82:d5:f3:
         e9:c6:21:c7:4a:ac:a0:ca:05:13:83:ca:aa:79:ce:ba:36:0a:
         e5:1b:d0:69:90:80:fb:b3:ea:9f:57:fe:3a:28:1b:b3:1a:e0:
         46:0d:62:30:7d:e9:56:e4:cc:85:02:3c:bc:cf:03:c3:f4:62:
         a8:bf:07:41:7c:81:61:bf:e9:82:2e:d2:7a:2f:e6:c8:a7:12:
         5e:64:ba:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:06 2024 by rpki-client on console-fra.rpki-client.org