Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3133312e302f32342d3234203d3e203234323033.roa
File:                     3134302e3231332e3133312e302f32342d3234203d3e203234323033.roa (raw, json)
Hash identifier:          KfSKnNJHhCUvrYCq1QJb36sxOAFMq3AvV/OPwsi9JWw=
Subject key identifier:   B8:40:58:EC:5D:96:04:F7:FF:44:83:CA:A6:22:CE:DB:FA:81:7A:9A
Certificate issuer:       /CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B
Certificate serial:       043DEB3A9957D4823983C8380E0E52B2C07FF3E7
Authority key identifier: 10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3133312e302f32342d3234203d3e203234323033.roa
Signing time:             Sat 08 Jan 2022 17:16:47 +0000
ROA not before:           Sat 08 Jan 2022 17:11:47 +0000
ROA not after:            Sun 08 Jan 2023 17:16:47 +0000
asID:                     24203
IP address blocks:        140.213.131.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:3d:eb:3a:99:57:d4:82:39:83:c8:38:0e:0e:52:b2:c0:7f:f3:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B
        Validity
            Not Before: Jan  8 17:11:47 2022 GMT
            Not After : Jan  8 17:16:47 2023 GMT
        Subject: CN=3082010A0282010100BE65028C2C7BD7670277CB8532657BF8B43B68D9BD58A2F94ACA76F643320AE783A7CC8F0D9D78686858C1AA58DB1DFB46FD8989FD16654D3285CACE50D2336DCA9FA9D95F50DAC71D91187FA931FCEDC763577DD28AEF981A06E9F64FE970EB518037EC0BE1A64E7D16FAC925D5FBE0211EAB1782C5224C8AB8D49DFCB01C98E9174D0EC66B68285B0AE292557CB26DE2086A206DB137BAC94AF618E7617C86ABDC9E86325E7FBC890CEB9173CC3BDA90294301B8A93E1D9B8BA7CC705697A68567A30CEE3CFA85DEA682D3B8A07166C01492EF4D03494F8B1A37CC0E6A1236F9CD76C8A79907896F846EA68C5393832B3FB8AE70B2D4DBD038527378C204830203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:65:02:8c:2c:7b:d7:67:02:77:cb:85:32:65:
                    7b:f8:b4:3b:68:d9:bd:58:a2:f9:4a:ca:76:f6:43:
                    32:0a:e7:83:a7:cc:8f:0d:9d:78:68:68:58:c1:aa:
                    58:db:1d:fb:46:fd:89:89:fd:16:65:4d:32:85:ca:
                    ce:50:d2:33:6d:ca:9f:a9:d9:5f:50:da:c7:1d:91:
                    18:7f:a9:31:fc:ed:c7:63:57:7d:d2:8a:ef:98:1a:
                    06:e9:f6:4f:e9:70:eb:51:80:37:ec:0b:e1:a6:4e:
                    7d:16:fa:c9:25:d5:fb:e0:21:1e:ab:17:82:c5:22:
                    4c:8a:b8:d4:9d:fc:b0:1c:98:e9:17:4d:0e:c6:6b:
                    68:28:5b:0a:e2:92:55:7c:b2:6d:e2:08:6a:20:6d:
                    b1:37:ba:c9:4a:f6:18:e7:61:7c:86:ab:dc:9e:86:
                    32:5e:7f:bc:89:0c:eb:91:73:cc:3b:da:90:29:43:
                    01:b8:a9:3e:1d:9b:8b:a7:cc:70:56:97:a6:85:67:
                    a3:0c:ee:3c:fa:85:de:a6:82:d3:b8:a0:71:66:c0:
                    14:92:ef:4d:03:49:4f:8b:1a:37:cc:0e:6a:12:36:
                    f9:cd:76:c8:a7:99:07:89:6f:84:6e:a6:8c:53:93:
                    83:2b:3f:b8:ae:70:b2:d4:db:d0:38:52:73:78:c2:
                    04:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:40:58:EC:5D:96:04:F7:FF:44:83:CA:A6:22:CE:DB:FA:81:7A:9A
            X509v3 Authority Key Identifier:
                keyid:10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3133312e302f32342d3234203d3e203234323033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.213.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:14:7c:2c:34:69:d8:9c:38:1a:0a:25:9c:8f:29:80:d9:c0:
         36:92:fc:45:4e:bd:f5:98:1e:67:33:be:1b:58:c1:f7:fc:2c:
         87:9a:6d:29:ed:0f:e2:80:0c:77:96:21:bd:44:77:27:e9:ad:
         bb:f3:e2:4e:c8:0b:91:02:9f:d4:33:17:90:6f:bc:24:42:b7:
         44:d4:92:71:28:f3:1d:cc:24:38:4f:09:37:52:47:84:6b:52:
         f3:91:5b:f9:3d:a8:64:37:06:d2:62:fa:99:87:27:5f:1d:88:
         e9:c6:10:d0:07:ed:b6:e6:89:52:3d:6c:98:a5:89:84:85:a2:
         af:2c:5f:31:fa:43:c4:96:fc:ce:47:22:9a:d3:7b:94:5f:1c:
         0c:8c:61:f5:9a:60:84:f8:80:c5:22:73:e5:05:35:11:20:f0:
         dd:0a:5f:e4:60:38:ef:b4:e0:6e:b0:20:71:4f:44:13:ca:58:
         d6:b3:d1:8d:66:6b:bc:d3:d3:3d:17:3e:fd:b9:3c:fe:8a:78:
         dc:b2:58:41:ba:25:01:ae:eb:00:0e:4e:6a:4f:2d:32:24:5c:
         ed:08:28:47:08:0d:93:e8:16:d2:15:b6:91:34:7a:fa:2c:ee:
         51:0b:bf:cb:46:2b:6a:87:c8:4e:ae:88:79:b2:20:00:1b:90:
         cf:48:20:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:06 2024 by rpki-client on console-fra.rpki-client.org