Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3139372e302f32342d3234203d3e20313339393934.roa
File:                     3134302e3231332e3139372e302f32342d3234203d3e20313339393934.roa (raw, json)
Hash identifier:          pUuBICOs+thusdRYmIOVhNj2OTWyX1BUZ8wISAiSI5s=
Subject key identifier:   C7:35:77:A6:4F:F1:05:43:45:2E:65:E6:BD:85:1C:46:B5:61:DA:6D
Certificate issuer:       /CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B
Certificate serial:       1EC7050BEE66B88E7BC44ABC43DB0732425D6B5D
Authority key identifier: 10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3139372e302f32342d3234203d3e20313339393934.roa
Signing time:             Sat 08 Jan 2022 17:36:02 +0000
ROA not before:           Sat 08 Jan 2022 17:31:02 +0000
ROA not after:            Sun 08 Jan 2023 17:36:02 +0000
asID:                     139994
IP address blocks:        140.213.197.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:c7:05:0b:ee:66:b8:8e:7b:c4:4a:bc:43:db:07:32:42:5d:6b:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B
        Validity
            Not Before: Jan  8 17:31:02 2022 GMT
            Not After : Jan  8 17:36:02 2023 GMT
        Subject: CN=3082010A028201010092FBF55064E0582AED596FE7384265EDDE309591C3C476806F4673B11AC9D793DD3EDA853BF7FDB079378F056677C2D8108AD17E94E00B7D59F58C46B2C4BE243B335B76CA5DB594EF75B6908839D9756BE987D9300F6C8B2F2B2B1C778C93BED07E403C66656809E4C52CE7593C77058E981813B53F22FD8504FFD032D2DD62174B38C5FD085859DC63B64C360681DC37C9AA8E5AB7618C36CFC0CD4CE4E56B5994DC0F77E110FAF0D44E456D244F76C7018CDB6846329A81B4DBC52BF418578C1662E93AC9FEED164CA8F2D8F2C3AD61152AA13B11665B29CACF426D73904D3CDFE53CEAC1DB6CFA9E008408F5244FBB33A846EFB72B84CE924760F05552950203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:fb:f5:50:64:e0:58:2a:ed:59:6f:e7:38:42:
                    65:ed:de:30:95:91:c3:c4:76:80:6f:46:73:b1:1a:
                    c9:d7:93:dd:3e:da:85:3b:f7:fd:b0:79:37:8f:05:
                    66:77:c2:d8:10:8a:d1:7e:94:e0:0b:7d:59:f5:8c:
                    46:b2:c4:be:24:3b:33:5b:76:ca:5d:b5:94:ef:75:
                    b6:90:88:39:d9:75:6b:e9:87:d9:30:0f:6c:8b:2f:
                    2b:2b:1c:77:8c:93:be:d0:7e:40:3c:66:65:68:09:
                    e4:c5:2c:e7:59:3c:77:05:8e:98:18:13:b5:3f:22:
                    fd:85:04:ff:d0:32:d2:dd:62:17:4b:38:c5:fd:08:
                    58:59:dc:63:b6:4c:36:06:81:dc:37:c9:aa:8e:5a:
                    b7:61:8c:36:cf:c0:cd:4c:e4:e5:6b:59:94:dc:0f:
                    77:e1:10:fa:f0:d4:4e:45:6d:24:4f:76:c7:01:8c:
                    db:68:46:32:9a:81:b4:db:c5:2b:f4:18:57:8c:16:
                    62:e9:3a:c9:fe:ed:16:4c:a8:f2:d8:f2:c3:ad:61:
                    15:2a:a1:3b:11:66:5b:29:ca:cf:42:6d:73:90:4d:
                    3c:df:e5:3c:ea:c1:db:6c:fa:9e:00:84:08:f5:24:
                    4f:bb:33:a8:46:ef:b7:2b:84:ce:92:47:60:f0:55:
                    52:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:35:77:A6:4F:F1:05:43:45:2E:65:E6:BD:85:1C:46:B5:61:DA:6D
            X509v3 Authority Key Identifier:
                keyid:10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3139372e302f32342d3234203d3e20313339393934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.213.197.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:4f:b7:ce:c1:40:bd:ef:45:42:d1:ab:d8:35:53:5f:82:47:
         6c:c2:a3:37:dc:86:c5:1f:e6:84:93:f7:91:75:b6:d1:d8:7e:
         67:72:dc:87:84:51:3c:43:c8:cd:71:ce:0b:10:84:56:20:0a:
         ed:82:9a:ef:c7:e8:9b:70:db:54:92:0b:75:6f:b1:8c:b8:0a:
         d2:a1:2e:69:0c:b0:04:e8:a6:8d:6f:44:6f:73:28:22:22:1d:
         a7:a5:5e:4c:33:3e:c0:97:54:9a:b7:0a:f4:b5:55:a9:67:f5:
         6c:65:c7:38:e8:57:19:19:c0:0d:94:00:1d:b1:a8:f9:a9:d7:
         df:8c:06:4e:1e:7c:0a:6b:ee:30:d7:c4:ce:a1:8b:e2:a7:c9:
         c0:5a:fe:14:ef:ed:db:6b:25:33:61:57:59:09:66:d1:67:b6:
         9a:9a:f8:80:87:b1:1f:30:a1:e4:a0:4b:fa:b4:fd:73:12:41:
         3b:7a:e7:83:d5:3e:7d:d0:33:90:0c:c5:00:c8:27:c2:09:b3:
         a5:1f:15:3c:bf:93:54:89:31:b1:ac:d9:da:8f:0e:0e:a6:9c:
         e7:37:ff:23:06:02:85:d8:a7:25:5f:34:17:54:ac:e4:c6:97:
         c3:16:fe:76:e7:2d:98:01:a9:1d:37:5f:e8:73:be:38:d5:30:
         6d:9a:97:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:40 2024 by rpki-client on console-ams.rpki-client.org