Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3133322e302f32342d3234203d3e203234323033.roa
File:                     3134302e3231332e3133322e302f32342d3234203d3e203234323033.roa (raw, json)
Hash identifier:          iYS7gIg4RONwWLGXWi55MqXXN4xuRWn0s4iTXUMPZtg=
Subject key identifier:   E9:BD:D6:75:96:52:9B:FA:C9:AC:F5:A2:00:B8:5A:BE:90:E7:AA:5E
Certificate issuer:       /CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B
Certificate serial:       5C3B99DE627A83897EB96869ABB787828A751D00
Authority key identifier: 10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3133322e302f32342d3234203d3e203234323033.roa
Signing time:             Sat 08 Jan 2022 17:17:07 +0000
ROA not before:           Sat 08 Jan 2022 17:12:07 +0000
ROA not after:            Sun 08 Jan 2023 17:17:07 +0000
asID:                     24203
IP address blocks:        140.213.132.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:3b:99:de:62:7a:83:89:7e:b9:68:69:ab:b7:87:82:8a:75:1d:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B
        Validity
            Not Before: Jan  8 17:12:07 2022 GMT
            Not After : Jan  8 17:17:07 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:ef:e4:74:d8:74:e4:49:ad:f1:9f:50:f8:fb:
                    40:d9:8f:5c:5e:27:87:8f:27:c0:92:53:01:64:d6:
                    17:fe:1c:86:76:15:d1:e0:c3:db:61:e0:39:d1:56:
                    9d:1d:8e:dc:a3:ed:ee:3e:0c:41:75:02:3b:dc:1d:
                    ce:1c:bb:10:b0:c5:bc:cb:94:88:92:4c:0c:53:4a:
                    79:00:76:57:0d:db:8a:b1:58:a9:1e:31:5e:3e:0d:
                    b9:23:89:f0:c7:0e:2b:cf:15:17:8f:28:16:21:3e:
                    8f:1d:de:ee:8f:aa:69:dc:ae:24:d1:11:b5:5f:66:
                    16:dd:d4:10:18:3e:60:8c:a8:4e:4b:6c:de:4d:64:
                    aa:42:93:a6:f1:83:c6:02:e1:c6:ba:99:67:5d:a0:
                    81:e2:aa:b7:39:c8:44:6f:ae:e5:26:07:c1:6a:76:
                    eb:62:de:a8:98:02:2f:f9:f4:67:b7:d6:44:a5:ca:
                    78:43:ec:9c:91:d3:85:66:a2:6a:7a:19:93:0d:e8:
                    8b:b7:76:36:0a:f3:cc:59:93:3f:5a:07:19:05:a3:
                    83:34:85:03:72:12:b6:10:59:eb:98:33:2c:03:12:
                    a9:0e:dc:af:ec:02:04:aa:dd:de:cd:e4:c7:17:40:
                    05:f8:54:95:1c:e6:b6:51:55:b8:ad:0d:ca:f1:b5:
                    79:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:BD:D6:75:96:52:9B:FA:C9:AC:F5:A2:00:B8:5A:BE:90:E7:AA:5E
            X509v3 Authority Key Identifier:
                keyid:10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3133322e302f32342d3234203d3e203234323033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.213.132.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c2:ab:8d:6a:71:aa:0f:92:a2:27:4b:ec:85:26:6d:37:07:ac:
         49:de:fa:57:f5:7d:ea:7a:ff:0d:11:fc:8d:75:85:18:07:63:
         91:fe:80:d5:18:c9:de:64:7a:cb:09:c8:64:5f:4d:ed:40:50:
         7b:e2:b8:87:2c:23:9c:ca:89:56:4b:1a:57:ac:7b:3b:f1:39:
         eb:d0:53:2b:d8:1b:f0:d4:80:e4:2a:f1:83:c3:98:e7:42:28:
         5a:5b:c5:88:12:66:20:6b:f7:4b:f8:1d:23:89:29:86:c7:aa:
         8e:b3:54:a3:e2:b2:d1:cd:3b:d6:ff:02:89:9d:c4:f3:ae:e3:
         28:32:82:27:d6:c7:65:17:57:d9:08:05:50:73:31:e5:82:47:
         66:ff:b6:28:d8:34:74:8d:0f:df:a8:3f:bb:96:d2:7a:bc:7c:
         10:e3:da:62:0c:16:e2:b8:a1:a6:b5:13:0c:eb:fe:9a:83:b6:
         f7:0f:0f:7e:ca:97:53:36:f1:cb:3e:21:66:d7:6f:d0:b9:b0:
         35:41:54:43:e1:34:8b:fa:f5:58:ce:ae:9c:de:37:a1:60:d8:
         ef:52:10:32:b7:5b:53:de:7d:a4:fd:8d:fb:dc:0b:f3:83:06:
         a4:52:61:51:8a:d8:c5:78:ee:94:b3:b2:8e:85:1d:38:60:10:
         60:14:03:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:40 2024 by rpki-client on console-ams.rpki-client.org