Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3133362e302f32342d3234203d3e203234323033.roa
File:                     3134302e3231332e3133362e302f32342d3234203d3e203234323033.roa (raw, json)
Hash identifier:          e6w1xJOD3YQhxZ4gYVtSl7yA/VSawV7Yp4VXnNJiORE=
Subject key identifier:   8B:C6:73:83:8B:67:AB:07:09:7D:C2:5B:F4:BE:AC:D1:AF:6A:8C:92
Certificate issuer:       /CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B
Certificate serial:       70E938D471507CD273548E7E7BF7DF40F2A425B2
Authority key identifier: 10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3133362e302f32342d3234203d3e203234323033.roa
Signing time:             Sat 08 Jan 2022 17:18:29 +0000
ROA not before:           Sat 08 Jan 2022 17:13:29 +0000
ROA not after:            Sun 08 Jan 2023 17:18:29 +0000
asID:                     24203
IP address blocks:        140.213.136.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:e9:38:d4:71:50:7c:d2:73:54:8e:7e:7b:f7:df:40:f2:a4:25:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B
        Validity
            Not Before: Jan  8 17:13:29 2022 GMT
            Not After : Jan  8 17:18:29 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ed:b8:b8:c5:74:04:63:3b:9a:68:59:0e:33:
                    14:37:24:80:a3:67:bc:15:3c:11:bd:6c:1d:5b:0a:
                    f8:14:ee:4c:85:d4:e6:5e:0c:e3:55:27:01:cf:2e:
                    97:15:46:ba:fb:c1:42:a7:7f:2b:41:14:82:48:41:
                    fe:fd:8c:30:29:19:49:74:4f:a1:fc:0a:52:95:06:
                    28:79:9e:f7:85:60:5c:46:c6:13:d4:e4:cf:c9:5c:
                    4c:f3:b7:6d:78:80:6f:23:8f:23:8c:f7:05:1a:3b:
                    25:8c:73:b9:ea:ec:b2:7f:6e:81:7e:4a:48:a0:aa:
                    0b:9e:1d:4e:21:48:9f:cf:47:a3:36:ab:d1:8f:f4:
                    4b:19:20:2f:53:0b:d5:5a:e2:7b:15:32:ef:76:7e:
                    4d:94:01:cd:b1:fe:c3:53:36:36:bf:04:f9:0e:a2:
                    68:79:01:69:fe:25:da:4f:77:8b:33:68:0d:7a:97:
                    4a:79:21:9e:15:03:f5:22:82:b8:ec:76:64:0e:62:
                    56:ec:ec:79:7d:af:30:3f:87:4d:20:08:2a:69:9e:
                    72:b6:de:06:4c:33:49:44:70:2b:7b:39:5d:44:2f:
                    de:60:6d:e3:74:62:d4:be:05:59:a3:31:2a:90:73:
                    df:3e:0f:d5:94:00:a7:e4:08:a5:a4:06:8e:70:84:
                    10:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:C6:73:83:8B:67:AB:07:09:7D:C2:5B:F4:BE:AC:D1:AF:6A:8C:92
            X509v3 Authority Key Identifier:
                keyid:10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3133362e302f32342d3234203d3e203234323033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.213.136.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b6:65:5d:67:11:43:54:c7:fc:64:18:7b:9e:66:56:1b:86:78:
         38:41:8b:31:56:c5:b4:4c:da:5b:9a:fb:5a:81:e0:f9:41:3b:
         68:cc:4b:32:d8:75:e7:14:cd:e5:1a:7a:e8:74:d4:05:88:1d:
         7a:b9:bc:63:9c:c8:c5:5b:0c:d7:b2:b4:0f:78:a1:70:70:3d:
         12:7f:fd:f4:5e:fd:3a:1b:4e:59:f8:f9:68:b3:ba:68:86:c1:
         3f:7d:45:48:d8:3f:bf:c4:6f:0d:33:22:46:df:a5:1b:cc:11:
         bc:09:63:37:e2:3d:52:77:d8:b1:c7:25:6b:cc:76:fc:b4:a6:
         4d:83:b4:d8:37:66:c1:d4:b5:13:cd:6a:8d:48:42:c6:a6:c0:
         a5:60:3c:f3:14:83:96:e8:25:5e:82:93:b0:22:9e:21:e4:4c:
         b1:01:88:56:bf:00:b7:41:6f:30:4d:f4:37:ea:d6:12:93:b8:
         9e:ec:13:c1:37:0b:7e:91:53:88:dd:50:e3:e6:37:7a:6b:2e:
         47:17:b5:fc:45:f2:db:bf:1b:61:33:60:d8:b5:f2:53:40:ed:
         06:76:a4:17:1f:c2:14:34:7c:19:06:2a:e3:59:63:d0:c5:e2:
         ff:21:8b:c1:08:e8:cc:7f:1f:cf:04:42:02:e4:5a:ff:db:ee:
         e9:19:73:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:40 2024 by rpki-client on console-ams.rpki-client.org