Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3133332e302f32342d3234203d3e203234323033.roa
File:                     3134302e3231332e3133332e302f32342d3234203d3e203234323033.roa (raw, json)
Hash identifier:          F1MVgG/eX54mbRG2ErWdFuh8yeguLWBT/hwusyCcc3I=
Subject key identifier:   05:F6:3C:0C:FF:3C:74:99:A4:44:82:D2:45:61:C1:D9:C2:6E:30:BA
Certificate issuer:       /CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B
Certificate serial:       6782B49E4EF6240184F02D1B56E40C235234D306
Authority key identifier: 10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3133332e302f32342d3234203d3e203234323033.roa
Signing time:             Sat 08 Jan 2022 17:17:28 +0000
ROA not before:           Sat 08 Jan 2022 17:12:28 +0000
ROA not after:            Sun 08 Jan 2023 17:17:28 +0000
asID:                     24203
IP address blocks:        140.213.133.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:82:b4:9e:4e:f6:24:01:84:f0:2d:1b:56:e4:0c:23:52:34:d3:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B
        Validity
            Not Before: Jan  8 17:12:28 2022 GMT
            Not After : Jan  8 17:17:28 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:1a:58:2f:35:33:af:1e:36:1d:da:c2:6e:ca:
                    03:b3:38:82:dd:82:00:ab:1b:b4:f4:04:6a:c4:17:
                    a7:af:6b:21:aa:38:a5:b1:6e:95:77:9f:ee:c6:e2:
                    8e:88:59:5b:09:22:b9:a8:e2:cd:07:b6:ad:3c:31:
                    ad:19:3f:f2:3a:30:d3:c3:ce:40:7b:14:73:0b:a0:
                    87:a0:c2:79:f3:f3:34:3d:7a:f2:81:45:66:45:9a:
                    c5:79:f1:78:29:cc:9b:ef:04:61:03:fd:84:08:42:
                    94:d3:59:1f:41:ea:cb:97:d3:97:10:cc:fb:53:f5:
                    e6:0a:1e:a3:72:0a:43:5a:78:77:98:3c:87:c9:ab:
                    23:a9:aa:ea:f0:42:44:c9:8f:1b:ae:4e:1c:30:e6:
                    70:4b:cd:d1:44:85:30:e6:26:1e:72:34:f8:61:01:
                    2b:31:c6:46:29:91:40:79:9a:42:5c:43:df:59:c7:
                    20:e8:aa:4d:fd:4f:14:11:33:6b:57:6c:94:e0:2c:
                    5b:f8:52:d6:b1:20:70:4a:89:c8:2d:df:2b:d6:f2:
                    f9:55:36:4b:72:1f:0d:27:ff:26:b2:48:7f:98:a2:
                    5b:cb:d0:f2:15:4d:62:be:fd:63:7f:23:8a:85:ef:
                    6a:c4:f2:04:54:d9:04:a6:32:d3:72:de:a1:b5:91:
                    71:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:F6:3C:0C:FF:3C:74:99:A4:44:82:D2:45:61:C1:D9:C2:6E:30:BA
            X509v3 Authority Key Identifier:
                keyid:10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3133332e302f32342d3234203d3e203234323033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.213.133.0/24

    Signature Algorithm: sha256WithRSAEncryption
         17:0e:b9:02:ad:3f:a6:22:0a:98:51:ad:8a:21:9b:82:92:01:
         b3:50:91:16:3f:e4:48:58:52:3e:17:9f:5d:67:56:6c:e4:d1:
         e3:2a:bf:6a:ed:30:44:09:91:35:44:bd:f7:f0:30:f6:64:fa:
         fe:a8:54:51:1a:09:c0:5e:fe:4f:8a:5d:54:b8:04:7a:50:51:
         47:a1:6e:8c:70:9c:c9:de:9a:14:88:19:01:fa:92:aa:e6:39:
         2e:59:42:6c:7b:bb:59:02:d5:b1:70:7e:33:ca:3e:91:01:37:
         b6:2e:84:b5:c6:7e:d5:20:94:68:99:24:90:ed:84:0c:af:0e:
         ab:e4:02:67:e0:85:b6:45:91:55:7a:b1:e9:eb:7b:6b:59:5c:
         31:62:bb:cd:a1:90:b4:52:bf:e1:3d:58:6f:e6:65:95:1f:2d:
         37:08:b0:6b:1a:26:98:a4:46:ef:3c:d0:f0:29:3d:63:f7:8d:
         ec:f3:3c:49:11:9d:df:93:ff:e9:7c:6b:a1:0a:1d:a8:3c:d6:
         43:bf:3b:87:e1:01:8e:8a:13:a3:19:5f:38:c6:4e:13:08:2b:
         ff:97:b0:0d:93:a0:04:c1:76:85:8c:cc:c1:eb:37:62:41:b0:
         9f:7f:d0:60:2b:9f:06:4b:38:9c:de:bf:37:9a:24:fb:92:9d:
         ea:e7:20:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:06 2024 by rpki-client on console-fra.rpki-client.org