Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3133372e302f32342d3234203d3e203234323033.roa
File:                     3134302e3231332e3133372e302f32342d3234203d3e203234323033.roa (raw, json)
Hash identifier:          96XcSWrzjmLGqhxIQ+ZYRYCkkcgh3lPidSoogp6vAfk=
Subject key identifier:   09:C8:F0:8E:40:A3:E3:45:AF:94:E8:03:02:2E:C0:6D:45:29:F9:78
Certificate issuer:       /CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B
Certificate serial:       63D042D7B75CAAED510587D936981C09E87D13FA
Authority key identifier: 10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3133372e302f32342d3234203d3e203234323033.roa
Signing time:             Sat 08 Jan 2022 17:18:49 +0000
ROA not before:           Sat 08 Jan 2022 17:13:49 +0000
ROA not after:            Sun 08 Jan 2023 17:18:49 +0000
asID:                     24203
IP address blocks:        140.213.137.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:d0:42:d7:b7:5c:aa:ed:51:05:87:d9:36:98:1c:09:e8:7d:13:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B
        Validity
            Not Before: Jan  8 17:13:49 2022 GMT
            Not After : Jan  8 17:18:49 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d6:08:8c:07:e3:fb:d0:1c:1c:3a:07:ee:d7:
                    64:6c:bb:91:9b:62:98:05:25:49:32:8e:be:50:eb:
                    ae:0a:b2:ce:fc:f9:aa:44:18:28:2c:39:c3:cb:11:
                    ac:ce:a3:25:6c:95:97:7f:28:3d:cd:44:c1:10:00:
                    e5:9f:0a:3d:2c:24:fe:ed:5b:e7:7e:36:c2:8a:38:
                    fd:c8:83:19:64:4e:9d:cb:be:a6:35:f1:bd:28:06:
                    96:a0:f7:c1:7b:e9:3c:f6:4f:c4:26:d9:4b:91:b8:
                    8a:c4:33:74:b2:87:fa:14:4b:04:0a:4c:76:57:e4:
                    b6:fc:21:81:be:86:8e:46:b7:5b:82:16:8b:d5:d1:
                    fc:d6:b5:77:8a:fd:35:15:34:52:4c:04:ac:a8:83:
                    36:6f:85:bc:84:32:87:a6:65:df:6e:c6:99:6c:52:
                    3b:1e:ee:27:8b:64:41:7d:48:f4:97:3d:da:d3:e9:
                    e9:93:24:c4:c3:92:1b:05:8b:50:64:94:16:c1:57:
                    1a:44:aa:a1:17:fb:bf:43:6d:4d:f3:cb:77:86:3d:
                    e9:2f:07:02:e9:db:13:7d:77:51:79:e1:a5:56:09:
                    01:ed:35:cc:92:6e:40:8e:69:53:35:22:8b:04:be:
                    2b:01:c0:a1:2e:6b:25:0b:21:00:03:70:01:da:68:
                    21:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:C8:F0:8E:40:A3:E3:45:AF:94:E8:03:02:2E:C0:6D:45:29:F9:78
            X509v3 Authority Key Identifier:
                keyid:10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3133372e302f32342d3234203d3e203234323033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.213.137.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:b2:20:7b:3b:de:2f:e9:88:dc:d3:ba:98:0a:36:d3:d5:f4:
         8a:e6:78:8f:4c:8e:cd:90:9b:80:5c:29:74:0d:a5:e7:56:d0:
         ad:d8:d1:38:fc:83:38:0b:75:26:93:d6:2f:0c:34:f2:9a:8a:
         5b:7a:84:bb:17:3b:2e:12:d5:1a:00:41:62:a1:fb:3d:27:15:
         84:13:3b:18:c0:35:07:bb:16:4a:4e:d9:25:e6:5e:7f:ee:ad:
         87:54:f3:d9:a9:9b:62:fa:45:e3:cc:7f:c6:df:a4:9e:4a:71:
         db:b2:8d:f5:d6:d0:f3:f4:0c:16:bf:e5:6f:36:d1:7e:ef:fb:
         90:a1:ee:69:4e:66:d1:ad:52:fd:43:89:d9:70:55:e4:75:be:
         52:ca:ac:2b:1a:fb:b5:a7:9e:4e:c5:cf:40:a9:e3:97:0a:2f:
         73:d8:15:2f:7f:d4:b6:bf:e6:a5:f6:a0:04:27:12:f3:42:b1:
         4a:62:6c:a7:46:86:5f:60:cc:79:7e:a9:d8:63:31:91:cf:4e:
         81:5a:8d:08:46:d3:82:f5:71:56:99:b2:a2:96:b2:a5:16:f5:
         07:49:25:c4:4c:cd:19:7d:c3:01:3d:70:9c:53:40:09:9f:9a:
         3e:5f:3d:c9:f8:82:ff:ad:ed:7e:2c:0d:24:4f:ca:c3:bb:bb:
         eb:15:0a:b3
-----BEGIN CERTIFICATE-----
MIIHJjCCBg6gAwIBAgIUY9BC17dcqu1RBYfZNpgcCeh9E/owDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTBCQUI3OTA3RDk1M0EwRDVGREVCNUMyMEM5RjI5QkNG
QzY2MEExQjAeFw0yMjAxMDgxNzEzNDlaFw0yMzAxMDgxNzE4NDlaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQkNENjA4OEMwN0UzRkJEMDFD
MUMzQTA3RUVENzY0NkNCQjkxOUI2Mjk4MDUyNTQ5MzI4RUJFNTBFQkFFMEFCMkNF
RkNGOUFBNDQxODI4MkMzOUMzQ0IxMUFDQ0VBMzI1NkM5NTk3N0YyODNEQ0Q0NEMx
MTAwMEU1OUYwQTNEMkMyNEZFRUQ1QkU3N0UzNkMyOEEzOEZEQzg4MzE5NjQ0RTlE
Q0JCRUE2MzVGMUJEMjgwNjk2QTBGN0MxN0JFOTNDRjY0RkM0MjZEOTRCOTFCODhB
QzQzMzc0QjI4N0ZBMTQ0QjA0MEE0Qzc2NTdFNEI2RkMyMTgxQkU4NjhFNDZCNzVC
ODIxNjhCRDVEMUZDRDZCNTc3OEFGRDM1MTUzNDUyNEMwNEFDQTg4MzM2NkY4NUJD
ODQzMjg3QTY2NURGNkVDNjk5NkM1MjNCMUVFRTI3OEI2NDQxN0Q0OEY0OTczRERB
RDNFOUU5OTMyNEM0QzM5MjFCMDU4QjUwNjQ5NDE2QzE1NzFBNDRBQUExMTdGQkJG
NDM2RDRERjNDQjc3ODYzREU5MkYwNzAyRTlEQjEzN0Q3NzUxNzlFMUE1NTYwOTAx
RUQzNUNDOTI2RTQwOEU2OTUzMzUyMjhCMDRCRTJCMDFDMEExMkU2QjI1MEIyMTAw
MDM3MDAxREE2ODIxMUYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAvNYIjAfj+9AcHDoH7tdkbLuRm2KYBSVJMo6+UOuuCrLO/PmqRBgo
LDnDyxGszqMlbJWXfyg9zUTBEADlnwo9LCT+7VvnfjbCijj9yIMZZE6dy76mNfG9
KAaWoPfBe+k89k/EJtlLkbiKxDN0sof6FEsECkx2V+S2/CGBvoaORrdbghaL1dH8
1rV3iv01FTRSTASsqIM2b4W8hDKHpmXfbsaZbFI7Hu4ni2RBfUj0lz3a0+npkyTE
w5IbBYtQZJQWwVcaRKqhF/u/Q21N88t3hj3pLwcC6dsTfXdReeGlVgkB7TXMkm5A
jmlTNSKLBL4rAcChLmslCyEAA3AB2mghHwIDAQABo4ICNDCCAjAwHQYDVR0OBBYE
FAnI8I5Ao+NFr5ToAwIuwG1FKfl4MB8GA1UdIwQYMBaAFBC6t5B9lToNX961wgyf
Kbz8ZgobMA4GA1UdDwEB/wQEAwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGJkYjFlMGEtYTRlYy00OWRiLWJl
ODktOGQ3ZTdmYzJjMjI3LzEvMTBCQUI3OTA3RDk1M0EwRDVGREVCNUMyMEM5RjI5
QkNGQzY2MEExQi5jcmwwdAYIKwYBBQUHAQEEaDBmMGQGCCsGAQUFBzAChlhyc3lu
YzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8xLzEwQkFCNzkw
N0Q5NTNBMEQ1RkRFQjVDMjBDOUYyOUJDRkM2NjBBMUIuY2VyMIGkBggrBgEFBQcB
CwSBlzCBlDCBkQYIKwYBBQUHMAuGgYRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby80YmRiMWUwYS1hNGVjLTQ5ZGItYmU4OS04ZDdlN2ZjMmMyMjcvMS8z
MTM0MzAyZTMyMzEzMzJlMzEzMzM3MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIz
NDMyMzAzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEAIzViTANBgkqhkiG9w0BAQsFAAOCAQEAkbIgezve
L+mI3NO6mAo209X0iuZ4j0yOzZCbgFwpdA2l51bQrdjROPyDOAt1JpPWLww08pqK
W3qEuxc7LhLVGgBBYqH7PScVhBM7GMA1B7sWSk7ZJeZef+6th1Tz2ambYvpF48x/
xt+knkpx27KN9dbQ8/QMFr/lbzbRfu/7kKHuaU5m0a1S/UOJ2XBV5HW+UsqsKxr7
taeeTsXPQKnjlwovc9gVL3/Utr/mpfagBCcS80KxSmJsp0aGX2DMeX6p2GMxkc9O
gVqNCEbTgvVxVpmyopaypRb1B0klxEzNGX3DAT1wnFNACZ+aPl89yfiC/63tfiwN
JE/Kw7u76xUKsw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:06 2024 by rpki-client on console-fra.rpki-client.org