Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3133342e302f32342d3234203d3e203234323033.roa
File:                     3134302e3231332e3133342e302f32342d3234203d3e203234323033.roa (raw, json)
Hash identifier:          4+KRlLHVMLF6UIXzSq5XGQj4lq4tk8LxEI2/+flbA94=
Subject key identifier:   F0:A7:1D:A5:85:D3:CC:79:78:41:66:5A:FA:43:54:A7:6F:49:96:0E
Certificate issuer:       /CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B
Certificate serial:       218FCD0C66FDDEE8BBAF315E8969094F4E3C26B3
Authority key identifier: 10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3133342e302f32342d3234203d3e203234323033.roa
Signing time:             Sat 08 Jan 2022 17:17:48 +0000
ROA not before:           Sat 08 Jan 2022 17:12:48 +0000
ROA not after:            Sun 08 Jan 2023 17:17:48 +0000
asID:                     24203
IP address blocks:        140.213.134.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:8f:cd:0c:66:fd:de:e8:bb:af:31:5e:89:69:09:4f:4e:3c:26:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B
        Validity
            Not Before: Jan  8 17:12:48 2022 GMT
            Not After : Jan  8 17:17:48 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ab:70:cb:d6:08:59:12:d5:a6:d3:c3:8f:48:
                    5e:dc:e1:86:eb:b9:d8:52:90:a1:b1:8d:7d:2d:ea:
                    2b:a8:a4:61:e7:4d:97:43:f6:d5:d8:a4:aa:99:c0:
                    1b:40:b8:43:8b:82:d2:39:91:92:fe:ef:d3:ee:64:
                    29:12:e7:00:90:3e:cc:74:8a:4e:d6:94:a0:70:86:
                    b3:11:d1:25:b7:fb:d6:7e:73:0a:67:99:10:34:fe:
                    44:78:48:9b:68:c5:59:e0:36:da:25:89:ae:fc:20:
                    a7:c5:f3:42:5e:0d:05:15:90:83:c2:0b:1b:cd:f2:
                    6e:24:e3:d7:9d:01:2f:65:e7:44:85:45:f8:9f:4a:
                    a9:1a:84:02:81:d4:c3:13:f7:72:bc:69:a0:37:9a:
                    47:c9:95:81:71:5c:fe:f5:4c:ee:af:6c:68:3b:fa:
                    4a:f4:d5:5f:1d:c5:2c:ea:2e:74:39:98:d4:2c:ee:
                    a5:b2:bf:4a:71:01:58:89:a9:de:39:ea:5d:91:4c:
                    2a:64:88:ce:39:65:e9:73:0f:1e:2e:b2:69:6a:54:
                    91:42:e1:51:da:b8:13:84:b6:a7:8a:ea:15:44:1c:
                    89:8e:ad:f4:89:df:2e:89:2a:b1:1b:4b:fd:17:4f:
                    e5:7a:fb:a1:d5:6b:e2:90:09:f7:1b:27:e5:6d:ed:
                    06:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:A7:1D:A5:85:D3:CC:79:78:41:66:5A:FA:43:54:A7:6F:49:96:0E
            X509v3 Authority Key Identifier:
                keyid:10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3133342e302f32342d3234203d3e203234323033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.213.134.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7e:08:e7:30:5a:0f:41:34:2b:11:50:37:c7:bc:80:6c:0d:50:
         af:a6:17:28:1f:ec:cd:4f:4c:1a:e9:10:4f:ff:9a:57:4b:a9:
         30:d8:c4:27:58:c6:60:1f:40:49:4a:d2:7e:d9:da:3e:64:13:
         56:d7:06:c8:5e:50:c7:d6:92:65:01:b8:0c:0e:51:1c:8c:e2:
         6c:b9:df:25:75:2c:78:4d:69:3a:81:ba:24:be:21:06:f4:f0:
         ea:6e:c8:f8:68:bd:dc:05:b6:62:3a:1c:ae:84:d7:d1:1c:11:
         92:3c:60:ec:ab:a5:2e:75:64:05:bf:ca:be:eb:18:5f:c6:2c:
         7f:7a:ca:2c:f5:21:7a:5a:aa:8e:74:f0:11:79:aa:da:76:3d:
         0b:29:be:24:7c:42:83:9c:29:ed:37:36:a1:90:07:ca:8e:5f:
         5e:1b:26:63:f3:5a:ae:ec:6c:2e:98:b4:16:8d:23:de:c0:e8:
         c3:68:74:18:e6:90:f7:80:56:8c:9e:a4:78:29:31:4a:51:5c:
         d4:49:a0:a5:59:d0:09:d9:0b:27:95:43:cb:85:cd:25:3f:e6:
         95:6c:9b:b7:b4:1b:79:bd:0a:5c:3f:f4:fd:39:57:32:5c:23:
         4d:3c:ce:0b:9b:af:ac:9e:52:dd:3b:85:af:03:5f:1b:1e:6f:
         ca:21:9e:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:40 2024 by rpki-client on console-ams.rpki-client.org