Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3139342e302f32342d3234203d3e20313339393934.roa
File:                     3134302e3231332e3139342e302f32342d3234203d3e20313339393934.roa (raw, json)
Hash identifier:          EeZJ8Aj90XFVivVXinQz9DUPNnTprJon5MgrtOAav2w=
Subject key identifier:   12:87:E9:FA:8C:3A:71:AF:19:E6:F0:B7:16:C2:DD:E5:F2:BC:5F:A6
Certificate issuer:       /CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B
Certificate serial:       311B79A16D137FC5DFCB5BAC7A7AAF46202766DD
Authority key identifier: 10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3139342e302f32342d3234203d3e20313339393934.roa
Signing time:             Fri 14 Jan 2022 07:01:14 +0000
ROA not before:           Fri 14 Jan 2022 06:56:14 +0000
ROA not after:            Sat 14 Jan 2023 07:01:14 +0000
asID:                     139994
IP address blocks:        140.213.194.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:1b:79:a1:6d:13:7f:c5:df:cb:5b:ac:7a:7a:af:46:20:27:66:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B
        Validity
            Not Before: Jan 14 06:56:14 2022 GMT
            Not After : Jan 14 07:01:14 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:35:ea:e9:64:51:02:61:af:16:25:42:2c:18:
                    94:f9:88:bb:61:bb:0c:5a:7c:16:c5:1c:12:93:a1:
                    1a:46:29:15:61:6a:33:66:0f:e4:d7:0e:9b:c9:0e:
                    ed:3e:90:50:ea:4a:8a:88:41:97:85:e7:27:b6:81:
                    85:4b:19:41:99:09:d2:ec:e0:e6:30:91:c2:19:66:
                    77:b8:2d:b1:d4:57:b2:d9:01:b7:57:42:8b:a2:a1:
                    fb:f7:0d:a6:e4:a6:25:a3:ad:f3:b6:6d:6c:32:8f:
                    a4:2a:79:1c:7a:38:b8:b4:a7:7b:e4:63:15:61:e4:
                    ca:37:d2:5f:ca:4c:0a:a8:58:2f:e8:40:ed:3b:1b:
                    bb:4e:fe:35:ec:4e:df:b4:44:95:d1:9c:15:f7:6c:
                    04:7e:a6:e7:70:f3:81:50:73:4f:4a:6c:dd:13:76:
                    dc:ce:00:80:c8:9b:0a:1d:12:d9:c7:4c:f7:6b:8b:
                    31:29:53:f4:e0:0b:03:aa:9b:68:a1:b6:8a:4f:21:
                    e3:ba:75:10:5b:50:2a:0b:39:47:e3:3a:1c:ec:09:
                    e0:b8:d3:27:1b:b2:c7:67:bb:b1:44:5f:4a:e3:11:
                    db:c6:50:53:82:72:8f:b7:92:9f:6e:f5:8a:fe:33:
                    71:12:1e:93:cd:5d:13:c4:20:e4:64:02:87:ce:bc:
                    eb:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:87:E9:FA:8C:3A:71:AF:19:E6:F0:B7:16:C2:DD:E5:F2:BC:5F:A6
            X509v3 Authority Key Identifier:
                keyid:10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3139342e302f32342d3234203d3e20313339393934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.213.194.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c9:4d:21:4f:ec:cd:71:4e:b4:6e:dd:11:75:70:81:d7:f0:93:
         c5:d8:e1:f2:56:fe:8d:05:81:1b:26:13:23:57:b6:ae:c4:6b:
         5e:0f:3c:45:19:e0:45:4f:fe:7e:03:b5:76:73:4d:9c:90:88:
         c8:ff:e4:9c:d8:d2:fc:ff:28:9e:24:33:84:60:04:13:43:c0:
         33:aa:fc:8f:76:5e:2a:51:1c:4b:68:88:ac:dc:b8:04:3e:0a:
         7b:0d:7b:ae:2b:22:df:f7:87:cd:17:ad:ad:b9:3b:fd:d4:ec:
         c4:4f:93:f5:65:03:a0:c3:6e:6e:09:40:00:32:8c:85:90:14:
         7e:d5:44:e9:d5:3f:9c:ca:b4:04:53:f3:f1:19:37:da:bb:b6:
         b9:88:d9:10:10:df:8b:16:2e:77:50:c2:33:c7:05:bf:5a:c0:
         48:22:19:14:44:c5:cf:ec:c6:c5:94:a9:6a:fd:1a:bb:a3:5c:
         07:c5:e6:5c:36:85:9d:7d:56:e8:5e:91:2d:cc:8d:45:d7:5f:
         82:2f:ec:74:90:d2:4d:60:f1:80:8c:b6:5d:a1:97:c2:9d:ce:
         0d:ec:26:99:5a:6d:fe:1c:af:05:82:e0:94:f4:df:6e:50:ca:
         6f:97:b1:f4:31:71:72:3c:fd:24:8a:e3:b2:ae:f0:81:db:76:
         13:7e:4b:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:40 2024 by rpki-client on console-ams.rpki-client.org