Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3133352e302f32342d3234203d3e203234323033.roa
File:                     3134302e3231332e3133352e302f32342d3234203d3e203234323033.roa (raw, json)
Hash identifier:          lWRRqL2QjdA6Ah2h2fz0W+pqSrJiNZyOW2AljVavOAE=
Subject key identifier:   7E:83:30:35:44:5C:74:14:D0:47:AD:01:C1:8B:1E:1B:FF:55:97:02
Certificate issuer:       /CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B
Certificate serial:       1E7754ED1FB8BA96AE716FF5DAC9DFB63AB93234
Authority key identifier: 10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3133352e302f32342d3234203d3e203234323033.roa
Signing time:             Sat 08 Jan 2022 17:18:08 +0000
ROA not before:           Sat 08 Jan 2022 17:13:08 +0000
ROA not after:            Sun 08 Jan 2023 17:18:08 +0000
asID:                     24203
IP address blocks:        140.213.135.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:77:54:ed:1f:b8:ba:96:ae:71:6f:f5:da:c9:df:b6:3a:b9:32:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B
        Validity
            Not Before: Jan  8 17:13:08 2022 GMT
            Not After : Jan  8 17:18:08 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:4f:27:b4:02:e3:06:eb:2a:4e:1b:6a:33:85:
                    80:19:a5:68:55:d5:0e:ca:62:ef:80:c0:34:69:90:
                    9f:8e:b1:2b:fe:4a:50:a7:de:ed:bf:8c:1e:b9:77:
                    c3:c2:74:0e:b9:15:94:2a:29:0f:d3:ce:85:87:d9:
                    7f:40:5a:cc:0e:38:d8:a6:7b:b8:2b:9c:1d:33:e4:
                    ec:09:13:d8:13:a0:9a:3e:ed:16:00:15:ac:50:68:
                    f3:5d:a5:f9:9c:6b:82:09:32:7d:f9:8a:67:34:6b:
                    b0:36:08:81:32:b1:0d:97:01:91:80:66:35:07:8e:
                    9f:59:5a:00:81:a2:db:b3:79:ff:6c:f3:9a:7d:e7:
                    d5:d5:44:d9:0b:d6:4a:bb:89:43:db:c5:74:6a:ed:
                    9e:09:90:bf:b8:3f:23:af:9e:d5:7f:d8:82:30:e5:
                    e8:62:0b:de:1e:d5:4a:ec:eb:1d:86:02:d4:cb:2c:
                    dc:b0:ed:1d:1d:bb:35:cd:1b:61:08:c2:77:1f:dc:
                    b3:e8:c2:dc:49:96:51:76:fa:9f:e5:fd:56:3a:e9:
                    0d:1b:e4:54:9f:96:ab:88:0e:99:7a:50:e3:8a:31:
                    e8:f7:81:96:b5:64:2f:b7:1f:0f:4f:df:8c:3d:70:
                    ab:ee:98:79:54:e0:38:cf:eb:30:eb:73:e3:46:f6:
                    e5:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:83:30:35:44:5C:74:14:D0:47:AD:01:C1:8B:1E:1B:FF:55:97:02
            X509v3 Authority Key Identifier:
                keyid:10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3133352e302f32342d3234203d3e203234323033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.213.135.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3e:28:c8:30:b1:c0:ee:48:b7:d4:3d:f6:3d:6e:c3:4f:6b:30:
         22:58:5e:ac:04:3b:c4:72:0c:bf:25:b2:9d:5d:09:cd:fd:46:
         5c:00:6f:1a:de:4c:12:51:3f:e4:bd:4e:3a:d1:d3:13:b2:21:
         51:24:92:51:a0:48:78:9f:4b:29:47:bc:47:2e:f4:bb:51:ca:
         1c:96:89:0c:cc:9e:10:56:3c:e1:b5:a2:58:4b:f9:73:f1:89:
         88:43:a5:ce:81:b9:58:f2:df:ea:76:f5:2f:09:45:9f:25:9f:
         b0:60:e0:e3:15:b4:6f:f8:fa:d3:12:a4:ce:07:0b:2c:34:ea:
         3c:82:23:6a:2e:71:98:ad:e2:40:18:d2:37:ce:c6:f7:65:17:
         76:3a:76:0d:86:66:af:fe:55:fa:5c:77:e5:b5:73:2e:17:0d:
         52:95:0e:94:b0:d8:fb:41:94:e9:38:52:b9:40:bc:9d:7e:4d:
         e7:c5:00:1c:62:32:2b:f9:85:e0:dd:d8:7a:20:fb:52:d6:ca:
         20:3d:45:f3:a3:4e:c3:ef:d2:12:99:8a:18:d2:ec:1b:f2:8a:
         41:bc:a5:73:d4:28:9d:a8:b0:87:b8:83:6c:6b:5e:c4:73:05:
         5d:ae:cb:51:a3:e0:ed:d7:a5:9a:51:a6:ed:cf:49:2a:44:7a:
         79:0d:ae:2e
-----BEGIN CERTIFICATE-----
MIIHJjCCBg6gAwIBAgIUHndU7R+4upaucW/12snftjq5MjQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTBCQUI3OTA3RDk1M0EwRDVGREVCNUMyMEM5RjI5QkNG
QzY2MEExQjAeFw0yMjAxMDgxNzEzMDhaFw0yMzAxMDgxNzE4MDhaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkI0RjI3QjQwMkUzMDZFQjJB
NEUxQjZBMzM4NTgwMTlBNTY4NTVENTBFQ0E2MkVGODBDMDM0Njk5MDlGOEVCMTJC
RkU0QTUwQTdERUVEQkY4QzFFQjk3N0MzQzI3NDBFQjkxNTk0MkEyOTBGRDNDRTg1
ODdEOTdGNDA1QUNDMEUzOEQ4QTY3QkI4MkI5QzFEMzNFNEVDMDkxM0Q4MTNBMDlB
M0VFRDE2MDAxNUFDNTA2OEYzNURBNUY5OUM2QjgyMDkzMjdERjk4QTY3MzQ2QkIw
MzYwODgxMzJCMTBEOTcwMTkxODA2NjM1MDc4RTlGNTk1QTAwODFBMkRCQjM3OUZG
NkNGMzlBN0RFN0Q1RDU0NEQ5MEJENjRBQkI4OTQzREJDNTc0NkFFRDlFMDk5MEJG
QjgzRjIzQUY5RUQ1N0ZEODgyMzBFNUU4NjIwQkRFMUVENTRBRUNFQjFEODYwMkQ0
Q0IyQ0RDQjBFRDFEMURCQjM1Q0QxQjYxMDhDMjc3MUZEQ0IzRThDMkRDNDk5NjUx
NzZGQTlGRTVGRDU2M0FFOTBEMUJFNDU0OUY5NkFCODgwRTk5N0E1MEUzOEEzMUU4
Rjc4MTk2QjU2NDJGQjcxRjBGNEZERjhDM0Q3MEFCRUU5ODc5NTRFMDM4Q0ZFQjMw
RUI3M0UzNDZGNkU1RUIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAu08ntALjBusqThtqM4WAGaVoVdUOymLvgMA0aZCfjrEr/kpQp97t
v4weuXfDwnQOuRWUKikP086Fh9l/QFrMDjjYpnu4K5wdM+TsCRPYE6CaPu0WABWs
UGjzXaX5nGuCCTJ9+YpnNGuwNgiBMrENlwGRgGY1B46fWVoAgaLbs3n/bPOafefV
1UTZC9ZKu4lD28V0au2eCZC/uD8jr57Vf9iCMOXoYgveHtVK7OsdhgLUyyzcsO0d
Hbs1zRthCMJ3H9yz6MLcSZZRdvqf5f1WOukNG+RUn5ariA6ZelDjijHo94GWtWQv
tx8PT9+MPXCr7ph5VOA4z+sw63PjRvbl6wIDAQABo4ICNDCCAjAwHQYDVR0OBBYE
FH6DMDVEXHQU0EetAcGLHhv/VZcCMB8GA1UdIwQYMBaAFBC6t5B9lToNX961wgyf
Kbz8ZgobMA4GA1UdDwEB/wQEAwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGJkYjFlMGEtYTRlYy00OWRiLWJl
ODktOGQ3ZTdmYzJjMjI3LzEvMTBCQUI3OTA3RDk1M0EwRDVGREVCNUMyMEM5RjI5
QkNGQzY2MEExQi5jcmwwdAYIKwYBBQUHAQEEaDBmMGQGCCsGAQUFBzAChlhyc3lu
YzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8xLzEwQkFCNzkw
N0Q5NTNBMEQ1RkRFQjVDMjBDOUYyOUJDRkM2NjBBMUIuY2VyMIGkBggrBgEFBQcB
CwSBlzCBlDCBkQYIKwYBBQUHMAuGgYRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby80YmRiMWUwYS1hNGVjLTQ5ZGItYmU4OS04ZDdlN2ZjMmMyMjcvMS8z
MTM0MzAyZTMyMzEzMzJlMzEzMzM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIz
NDMyMzAzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEAIzVhzANBgkqhkiG9w0BAQsFAAOCAQEAPijIMLHA
7ki31D32PW7DT2swIlherAQ7xHIMvyWynV0Jzf1GXABvGt5MElE/5L1OOtHTE7Ih
USSSUaBIeJ9LKUe8Ry70u1HKHJaJDMyeEFY84bWiWEv5c/GJiEOlzoG5WPLf6nb1
LwlFnyWfsGDg4xW0b/j60xKkzgcLLDTqPIIjai5xmK3iQBjSN87G92UXdjp2DYZm
r/5V+lx35bVzLhcNUpUOlLDY+0GU6ThSuUC8nX5N58UAHGIyK/mF4N3YeiD7UtbK
ID1F86NOw+/SEpmKGNLsG/KKQbylc9Qonaiwh7iDbGtexHMFXa7LUaPg7delmlGm
7c9JKkR6eQ2uLg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:06 2024 by rpki-client on console-fra.rpki-client.org