Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3139332e302f32342d3234203d3e20313339393934.roa
File:                     3134302e3231332e3139332e302f32342d3234203d3e20313339393934.roa (raw, json)
Hash identifier:          yYX83iGpEZsaukJWlbumjDm5pOiwzQVCdKEZ2XaV3BE=
Subject key identifier:   B4:AF:FC:92:08:9C:35:08:FD:8D:7D:59:6B:7D:E5:38:22:44:44:B9
Certificate issuer:       /CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B
Certificate serial:       539617B6C69D6466B8C06114993E9D05EB349A64
Authority key identifier: 10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3139332e302f32342d3234203d3e20313339393934.roa
Signing time:             Fri 14 Jan 2022 06:59:52 +0000
ROA not before:           Fri 14 Jan 2022 06:54:52 +0000
ROA not after:            Sat 14 Jan 2023 06:59:52 +0000
asID:                     139994
IP address blocks:        140.213.193.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:96:17:b6:c6:9d:64:66:b8:c0:61:14:99:3e:9d:05:eb:34:9a:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B
        Validity
            Not Before: Jan 14 06:54:52 2022 GMT
            Not After : Jan 14 06:59:52 2023 GMT
        Subject: CN=3082010A0282010100C0BBEA84A58691F998C3E2BC1E6419BFE1F65C70FF0D8E5F0AB30C330DFA1625AF106ADC70647CC364D4405D010E4D6F0F45FBF588FC75AC2254AAB4140F68615BE7D33D6BE639BC9730621BEA950D9DA7F1FCFD70262B0B474151569FA2406AAFB17D37B739074B0CEBAB9BF53274D4EF4B4E56F07EF64EB3F42E08E61E59FE30B8B242530B28B154F4FF7EE3A58EF0D8202C97BB0B34C3DF0045566E4AA72ADD2382C53F31F14F3B719195A450269E2DB420C5008E52F35731D3DC0CFC8E7FB71384B617FBA32A8E84726C1248EDDC20FDA1C33A5EB127017B919658C09680E1D58A759D7D61DF5F2249C7CCBEB68D4C8A7ECA22758DFAD8CDFBFC1A1CB5670203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:bb:ea:84:a5:86:91:f9:98:c3:e2:bc:1e:64:
                    19:bf:e1:f6:5c:70:ff:0d:8e:5f:0a:b3:0c:33:0d:
                    fa:16:25:af:10:6a:dc:70:64:7c:c3:64:d4:40:5d:
                    01:0e:4d:6f:0f:45:fb:f5:88:fc:75:ac:22:54:aa:
                    b4:14:0f:68:61:5b:e7:d3:3d:6b:e6:39:bc:97:30:
                    62:1b:ea:95:0d:9d:a7:f1:fc:fd:70:26:2b:0b:47:
                    41:51:56:9f:a2:40:6a:af:b1:7d:37:b7:39:07:4b:
                    0c:eb:ab:9b:f5:32:74:d4:ef:4b:4e:56:f0:7e:f6:
                    4e:b3:f4:2e:08:e6:1e:59:fe:30:b8:b2:42:53:0b:
                    28:b1:54:f4:ff:7e:e3:a5:8e:f0:d8:20:2c:97:bb:
                    0b:34:c3:df:00:45:56:6e:4a:a7:2a:dd:23:82:c5:
                    3f:31:f1:4f:3b:71:91:95:a4:50:26:9e:2d:b4:20:
                    c5:00:8e:52:f3:57:31:d3:dc:0c:fc:8e:7f:b7:13:
                    84:b6:17:fb:a3:2a:8e:84:72:6c:12:48:ed:dc:20:
                    fd:a1:c3:3a:5e:b1:27:01:7b:91:96:58:c0:96:80:
                    e1:d5:8a:75:9d:7d:61:df:5f:22:49:c7:cc:be:b6:
                    8d:4c:8a:7e:ca:22:75:8d:fa:d8:cd:fb:fc:1a:1c:
                    b5:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:AF:FC:92:08:9C:35:08:FD:8D:7D:59:6B:7D:E5:38:22:44:44:B9
            X509v3 Authority Key Identifier:
                keyid:10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3139332e302f32342d3234203d3e20313339393934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.213.193.0/24

    Signature Algorithm: sha256WithRSAEncryption
         22:78:c0:61:d8:9d:36:e5:e9:e5:a8:49:f4:fe:cb:0a:14:82:
         b7:e6:0f:1d:69:ac:e1:2e:20:e7:f0:c4:60:5c:8c:de:b7:19:
         e3:e9:ee:7e:c5:44:c2:65:b9:51:d7:51:f0:6f:3d:99:7f:f4:
         83:ae:c0:52:24:97:7b:89:20:9f:3b:8c:2b:55:52:bf:68:80:
         55:e7:c9:46:67:ba:c5:98:de:f4:40:16:69:8d:65:36:a3:8c:
         af:d1:9d:0d:20:6b:ae:dd:45:1c:bb:23:e7:00:b1:4d:f0:76:
         2c:10:46:61:98:e5:32:8a:df:04:0e:f0:a2:e6:2d:fb:22:9c:
         d3:a1:a1:df:d8:1c:8c:b2:d8:d4:f8:d0:00:9f:65:ed:42:85:
         7e:a3:c7:3f:68:ca:06:d6:48:ba:06:d3:0d:6f:a3:c9:1b:0a:
         d3:55:c4:d9:74:f8:ce:23:34:35:5c:91:26:ea:2d:51:79:01:
         6e:37:c1:93:6e:23:4c:23:7b:2a:55:85:d2:72:2c:d5:86:8c:
         fd:ee:dc:bf:b6:b4:f8:b9:87:7d:92:18:60:fe:58:8a:38:24:
         11:e5:be:4f:04:9a:71:ae:72:5c:39:97:3c:3d:1b:0a:d0:12:
         8a:09:b5:a1:d9:de:10:37:3a:4c:3f:c7:7c:bb:07:a5:1c:8e:
         af:ac:ff:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:40 2024 by rpki-client on console-ams.rpki-client.org