Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3139322e302f32342d3234203d3e20313339393934.roa
File:                     3134302e3231332e3139322e302f32342d3234203d3e20313339393934.roa (raw, json)
Hash identifier:          CeaSEOo5VNtBVRZ4nphtXAVhESu3cM8dxddZFxHDMgw=
Subject key identifier:   13:B0:09:D8:E0:6D:B4:68:20:3B:5D:FF:D7:02:56:36:AE:CC:4F:09
Certificate issuer:       /CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B
Certificate serial:       5F01C135824A6B51B597E53F0C9AF17E84D00FC6
Authority key identifier: 10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3139322e302f32342d3234203d3e20313339393934.roa
Signing time:             Fri 14 Jan 2022 06:59:34 +0000
ROA not before:           Fri 14 Jan 2022 06:54:34 +0000
ROA not after:            Sat 14 Jan 2023 06:59:34 +0000
asID:                     139994
IP address blocks:        140.213.192.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:01:c1:35:82:4a:6b:51:b5:97:e5:3f:0c:9a:f1:7e:84:d0:0f:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B
        Validity
            Not Before: Jan 14 06:54:34 2022 GMT
            Not After : Jan 14 06:59:34 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:99:df:33:20:75:84:cd:c2:92:bb:50:3a:48:
                    e3:7a:19:97:c8:ef:84:84:17:dc:08:52:cf:6e:96:
                    86:6f:5c:c2:69:9d:b5:2a:59:ff:ba:66:5e:b3:6a:
                    c3:2f:de:1c:ec:fe:7c:ba:27:73:e3:96:82:17:c4:
                    8a:9d:fe:cb:56:b8:22:27:9e:3a:34:df:51:ed:c8:
                    b2:59:9a:d3:15:35:e8:c8:0e:02:af:b8:04:08:fd:
                    68:2d:d9:8e:be:88:21:62:5d:5c:3c:00:7f:e2:d9:
                    d7:60:40:e3:0d:0b:14:a5:db:39:2d:58:45:35:31:
                    d3:cb:e9:27:50:0f:43:f7:65:19:1d:6e:0a:10:96:
                    ba:a5:73:4c:f1:16:a4:8a:cc:ef:63:80:0c:40:cc:
                    c1:ba:f4:8d:0f:da:45:2c:db:3d:a5:c1:c2:a9:29:
                    75:d0:7f:24:5b:db:34:1b:31:1e:a8:9f:38:6d:1c:
                    92:d2:89:7b:77:d2:5d:98:f2:8c:16:fa:fc:a7:4f:
                    f2:ca:ad:44:3a:4b:5d:d4:4f:20:c9:43:f9:f6:f3:
                    d6:ad:62:3f:f5:62:ab:22:ef:2c:f4:5a:82:fc:a6:
                    7b:92:78:4a:f0:69:38:28:ec:45:35:ca:36:8e:61:
                    68:9d:5d:c1:bc:e3:c2:b8:9a:3f:c7:1e:46:05:3a:
                    e2:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:B0:09:D8:E0:6D:B4:68:20:3B:5D:FF:D7:02:56:36:AE:CC:4F:09
            X509v3 Authority Key Identifier:
                keyid:10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3139322e302f32342d3234203d3e20313339393934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.213.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         39:b2:a1:29:52:68:77:15:52:02:ed:ef:ef:b8:4d:fe:f6:b2:
         b0:81:93:82:cd:36:f1:fc:2c:73:52:87:2e:fc:24:b0:4b:a9:
         31:94:ae:62:2b:05:18:8b:aa:da:16:13:97:42:60:e2:ec:7d:
         69:74:16:e5:f0:b9:cb:39:86:78:4c:89:cf:d0:d4:27:98:d0:
         8c:9b:49:27:e3:57:53:18:a0:74:bf:9f:6a:5a:7c:25:6f:9b:
         78:92:18:32:70:ac:04:06:05:7d:de:3b:da:f1:97:81:a3:98:
         69:06:24:9a:62:b4:b5:e7:14:4e:2e:1a:2a:30:8f:b9:03:36:
         6e:ba:2a:62:01:6e:a1:6e:60:14:f3:4c:8d:47:30:e3:cd:57:
         59:9a:71:84:2c:d5:80:b7:59:a8:7e:04:23:7c:56:2c:8c:56:
         38:e6:1b:eb:0f:07:5c:05:e9:07:2f:c2:b1:b6:88:bd:fd:3d:
         20:7c:b3:94:13:c1:9f:c9:17:b1:33:91:7d:5a:ed:eb:84:94:
         bf:11:d1:be:91:1c:56:c0:b1:39:90:0b:78:d9:c6:e5:f6:06:
         11:03:63:37:c5:5a:c6:7a:d4:74:f7:a1:c6:fe:4b:31:ca:62:
         e0:be:57:e4:ec:96:48:81:9e:9a:2e:22:8f:4e:58:e0:fa:11:
         4a:ab:bd:f1
-----BEGIN CERTIFICATE-----
MIIHKDCCBhCgAwIBAgIUXwHBNYJKa1G1l+U/DJrxfoTQD8YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTBCQUI3OTA3RDk1M0EwRDVGREVCNUMyMEM5RjI5QkNG
QzY2MEExQjAeFw0yMjAxMTQwNjU0MzRaFw0yMzAxMTQwNjU5MzRaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQ0Y5OURGMzMyMDc1ODRDREMy
OTJCQjUwM0E0OEUzN0ExOTk3QzhFRjg0ODQxN0RDMDg1MkNGNkU5Njg2NkY1Q0My
Njk5REI1MkE1OUZGQkE2NjVFQjM2QUMzMkZERTFDRUNGRTdDQkEyNzczRTM5Njgy
MTdDNDhBOURGRUNCNTZCODIyMjc5RTNBMzRERjUxRURDOEIyNTk5QUQzMTUzNUU4
QzgwRTAyQUZCODA0MDhGRDY4MkREOThFQkU4ODIxNjI1RDVDM0MwMDdGRTJEOUQ3
NjA0MEUzMEQwQjE0QTVEQjM5MkQ1ODQ1MzUzMUQzQ0JFOTI3NTAwRjQzRjc2NTE5
MUQ2RTBBMTA5NkJBQTU3MzRDRjExNkE0OEFDQ0VGNjM4MDBDNDBDQ0MxQkFGNDhE
MEZEQTQ1MkNEQjNEQTVDMUMyQTkyOTc1RDA3RjI0NUJEQjM0MUIzMTFFQTg5RjM4
NkQxQzkyRDI4OTdCNzdEMjVEOThGMjhDMTZGQUZDQTc0RkYyQ0FBRDQ0M0E0QjVE
RDQ0RjIwQzk0M0Y5RjZGM0Q2QUQ2MjNGRjU2MkFCMjJFRjJDRjQ1QTgyRkNBNjdC
OTI3ODRBRjA2OTM4MjhFQzQ1MzVDQTM2OEU2MTY4OUQ1REMxQkNFM0MyQjg5QTNG
QzcxRTQ2MDUzQUUyMkQwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAz5nfMyB1hM3CkrtQOkjjehmXyO+EhBfcCFLPbpaGb1zCaZ21Kln/
umZes2rDL94c7P58uidz45aCF8SKnf7LVrgiJ546NN9R7ciyWZrTFTXoyA4Cr7gE
CP1oLdmOvoghYl1cPAB/4tnXYEDjDQsUpds5LVhFNTHTy+knUA9D92UZHW4KEJa6
pXNM8RakiszvY4AMQMzBuvSND9pFLNs9pcHCqSl10H8kW9s0GzEeqJ84bRyS0ol7
d9JdmPKMFvr8p0/yyq1EOktd1E8gyUP59vPWrWI/9WKrIu8s9FqC/KZ7knhK8Gk4
KOxFNco2jmFonV3BvOPCuJo/xx5GBTriLQIDAQABo4ICNjCCAjIwHQYDVR0OBBYE
FBOwCdjgbbRoIDtd/9cCVjauzE8JMB8GA1UdIwQYMBaAFBC6t5B9lToNX961wgyf
Kbz8ZgobMA4GA1UdDwEB/wQEAwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGJkYjFlMGEtYTRlYy00OWRiLWJl
ODktOGQ3ZTdmYzJjMjI3LzEvMTBCQUI3OTA3RDk1M0EwRDVGREVCNUMyMEM5RjI5
QkNGQzY2MEExQi5jcmwwdAYIKwYBBQUHAQEEaDBmMGQGCCsGAQUFBzAChlhyc3lu
YzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8xLzEwQkFCNzkw
N0Q5NTNBMEQ1RkRFQjVDMjBDOUYyOUJDRkM2NjBBMUIuY2VyMIGmBggrBgEFBQcB
CwSBmTCBljCBkwYIKwYBBQUHMAuGgYZyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby80YmRiMWUwYS1hNGVjLTQ5ZGItYmU4OS04ZDdlN2ZjMmMyMjcvMS8z
MTM0MzAyZTMyMzEzMzJlMzEzOTMyMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEz
MzM5MzkzOTM0LnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUF
BwEHAQH/BBAwDjAMBAIAATAGAwQAjNXAMA0GCSqGSIb3DQEBCwUAA4IBAQA5sqEp
Umh3FVIC7e/vuE3+9rKwgZOCzTbx/CxzUocu/CSwS6kxlK5iKwUYi6raFhOXQmDi
7H1pdBbl8LnLOYZ4TInP0NQnmNCMm0kn41dTGKB0v59qWnwlb5t4khgycKwEBgV9
3jva8ZeBo5hpBiSaYrS15xROLhoqMI+5AzZuuipiAW6hbmAU80yNRzDjzVdZmnGE
LNWAt1mofgQjfFYsjFY45hvrDwdcBekHL8Kxtoi9/T0gfLOUE8GfyRexM5F9Wu3r
hJS/EdG+kRxWwLE5kAt42cbl9gYRA2M3xVrGetR096HG/ksxymLgvlfk7JZIgZ6a
LiKPTljg+hFKq73x
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:40 2024 by rpki-client on console-ams.rpki-client.org