Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3139352e302f32342d3234203d3e20313339393934.roa
File:                     3134302e3231332e3139352e302f32342d3234203d3e20313339393934.roa (raw, json)
Hash identifier:          6s11Bt1KkfcPjgBstjCizIGwBheHmNfm/yZH6WGwDVY=
Subject key identifier:   10:BA:4A:E7:49:33:63:16:0A:BF:A4:6D:31:E9:BE:BC:20:2E:72:64
Certificate issuer:       /CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B
Certificate serial:       7BD6772B44832469CC272B56BF652B94D86E62A4
Authority key identifier: 10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3139352e302f32342d3234203d3e20313339393934.roa
Signing time:             Fri 14 Jan 2022 07:00:21 +0000
ROA not before:           Fri 14 Jan 2022 06:55:21 +0000
ROA not after:            Sat 14 Jan 2023 07:00:21 +0000
asID:                     139994
IP address blocks:        140.213.195.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:d6:77:2b:44:83:24:69:cc:27:2b:56:bf:65:2b:94:d8:6e:62:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B
        Validity
            Not Before: Jan 14 06:55:21 2022 GMT
            Not After : Jan 14 07:00:21 2023 GMT
        Subject: CN=3082010A0282010100D9A6B91F0A8F94376345074DE9585CA8C0FED1F764F12431E1DE80CF8C74C6159293B161321CD68474AAFBCBEB79B7BFCD13122BEEB0FB756EABC7EC3B9F68171885B251A83197B7B5854770CEFA746578A5B3E2B94323684CFE793602BEED0670881B6E034055E265F703DE407FB0E4F4A144FCC2555A1450C85AC5AB4E27823CCBDFED3D7091BD512F1A49AD69A1AB6A81018F6BA3CCECB37DB6B5C51598B4F47CC4571AE51A4749B5EB26CFB5E150DE562AFD7862D88DD37FA6B6200057AE52E1D5AD8085D7216D0BFA166DE2EF7D8AF733C821F9519AEE6D7FA5719EC01050D85688CB25BAB047881651977F8076C04AA5C5DC7F98086458729FA93559530203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:a6:b9:1f:0a:8f:94:37:63:45:07:4d:e9:58:
                    5c:a8:c0:fe:d1:f7:64:f1:24:31:e1:de:80:cf:8c:
                    74:c6:15:92:93:b1:61:32:1c:d6:84:74:aa:fb:cb:
                    eb:79:b7:bf:cd:13:12:2b:ee:b0:fb:75:6e:ab:c7:
                    ec:3b:9f:68:17:18:85:b2:51:a8:31:97:b7:b5:85:
                    47:70:ce:fa:74:65:78:a5:b3:e2:b9:43:23:68:4c:
                    fe:79:36:02:be:ed:06:70:88:1b:6e:03:40:55:e2:
                    65:f7:03:de:40:7f:b0:e4:f4:a1:44:fc:c2:55:5a:
                    14:50:c8:5a:c5:ab:4e:27:82:3c:cb:df:ed:3d:70:
                    91:bd:51:2f:1a:49:ad:69:a1:ab:6a:81:01:8f:6b:
                    a3:cc:ec:b3:7d:b6:b5:c5:15:98:b4:f4:7c:c4:57:
                    1a:e5:1a:47:49:b5:eb:26:cf:b5:e1:50:de:56:2a:
                    fd:78:62:d8:8d:d3:7f:a6:b6:20:00:57:ae:52:e1:
                    d5:ad:80:85:d7:21:6d:0b:fa:16:6d:e2:ef:7d:8a:
                    f7:33:c8:21:f9:51:9a:ee:6d:7f:a5:71:9e:c0:10:
                    50:d8:56:88:cb:25:ba:b0:47:88:16:51:97:7f:80:
                    76:c0:4a:a5:c5:dc:7f:98:08:64:58:72:9f:a9:35:
                    59:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:BA:4A:E7:49:33:63:16:0A:BF:A4:6D:31:E9:BE:BC:20:2E:72:64
            X509v3 Authority Key Identifier:
                keyid:10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3139352e302f32342d3234203d3e20313339393934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.213.195.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:38:d8:ab:54:1f:8c:ef:2d:4b:61:38:23:c5:bb:41:9c:c7:
         8e:fb:87:50:dd:7b:3e:44:0f:5a:23:a3:69:b2:f8:ca:9a:92:
         65:85:4d:d4:98:a9:e1:4a:9c:4f:45:1d:77:da:73:be:eb:1f:
         3b:94:f3:0b:d0:31:1e:a8:95:c0:22:db:21:84:90:28:5f:1c:
         3d:fd:85:d8:82:9d:06:06:69:bd:7a:e7:15:99:48:4b:e7:3e:
         19:77:9c:21:dd:b5:08:dc:06:bc:d7:b4:6a:bd:1c:67:aa:01:
         5f:02:66:65:09:e1:53:bb:d2:13:2c:74:f7:ff:55:fb:8c:4d:
         fe:bc:2d:66:29:02:ca:55:6a:fe:ff:01:0c:3a:bf:86:61:22:
         6f:6b:31:80:ca:95:ee:19:66:79:eb:94:12:77:10:55:e7:26:
         24:3a:4d:84:1b:d6:87:e2:13:13:83:fe:4c:de:70:da:b1:a0:
         c5:98:88:dd:e1:57:d9:83:c2:31:24:36:da:c5:ea:4c:ab:46:
         3b:79:7c:8e:14:30:ee:c6:1c:53:96:3b:e8:76:f5:3d:f0:ae:
         fd:29:db:12:84:60:6e:96:e1:5e:7e:b3:ea:65:ad:b9:2c:c7:
         5d:8e:86:10:99:15:2c:52:d2:8f:b4:27:01:85:10:3d:93:bc:
         cf:da:29:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:06 2024 by rpki-client on console-fra.rpki-client.org