Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3139382e302f32342d3234203d3e20313339393934.roa
File:                     3134302e3231332e3139382e302f32342d3234203d3e20313339393934.roa (raw, json)
Hash identifier:          Tl3mmiVahZAQG60usX1YC5iTm9nTqHpn0eMD0Hvfn0o=
Subject key identifier:   E7:CA:3A:D8:4B:36:2D:31:F5:61:CE:27:3D:39:26:23:99:02:A2:38
Certificate issuer:       /CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B
Certificate serial:       6C3AC48E78D98A3585D23C4140BECF9455E173AF
Authority key identifier: 10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3139382e302f32342d3234203d3e20313339393934.roa
Signing time:             Sat 08 Jan 2022 17:33:18 +0000
ROA not before:           Sat 08 Jan 2022 17:28:18 +0000
ROA not after:            Sun 08 Jan 2023 17:33:18 +0000
asID:                     139994
IP address blocks:        140.213.198.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:3a:c4:8e:78:d9:8a:35:85:d2:3c:41:40:be:cf:94:55:e1:73:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B
        Validity
            Not Before: Jan  8 17:28:18 2022 GMT
            Not After : Jan  8 17:33:18 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:ac:5b:71:07:27:29:e0:4f:d5:a6:c3:eb:fe:
                    6f:67:a6:b2:b7:ab:d8:f7:c9:8f:28:95:fa:7b:67:
                    99:32:0a:b5:a0:f7:7d:dd:22:15:6d:cd:55:a5:24:
                    68:15:8f:9f:3b:2c:c1:dc:32:c9:de:10:a2:51:89:
                    fa:e4:a0:c4:d6:05:40:7c:fd:d2:37:a2:d1:d7:1b:
                    27:98:0d:70:de:80:37:60:46:dd:86:4f:94:05:5b:
                    5a:b0:c1:2c:39:a5:dd:f6:86:0c:8a:22:2d:cf:0b:
                    34:e5:27:a6:11:b9:53:38:ef:91:ae:8f:7e:42:d8:
                    52:51:b6:9a:de:0c:be:8a:67:ee:d5:2e:53:4d:8e:
                    ab:33:ef:d0:6b:d0:80:ea:75:b4:03:00:5d:a5:1d:
                    1d:39:3b:43:41:73:61:c2:20:8d:fa:e8:bc:57:d3:
                    0f:62:c7:d7:d4:9a:74:f6:3f:ac:33:4f:b9:05:e9:
                    9a:81:6d:83:99:17:af:07:62:51:88:eb:89:47:20:
                    1d:cd:29:9e:3f:84:58:6a:e2:a2:6c:4e:49:c5:67:
                    b5:8f:36:6b:56:0c:56:85:b7:f7:4e:b5:a9:89:bc:
                    9c:5b:19:a3:e5:85:18:c9:6e:af:62:75:83:26:bf:
                    b9:7e:cd:d8:f0:e6:aa:cf:d7:d2:17:81:ab:d2:61:
                    26:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:CA:3A:D8:4B:36:2D:31:F5:61:CE:27:3D:39:26:23:99:02:A2:38
            X509v3 Authority Key Identifier:
                keyid:10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3139382e302f32342d3234203d3e20313339393934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.213.198.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:41:56:3b:66:e0:ec:99:40:14:93:bc:bb:f4:fc:d2:f3:46:
         21:0e:e5:4d:ec:87:0a:28:2b:8c:5e:d0:e3:6c:9f:40:c5:ea:
         e6:d8:1d:44:0b:c4:1a:93:b3:33:cf:e4:f1:75:b7:d5:bd:b7:
         9d:fd:d4:68:05:e4:1e:7b:71:f1:7f:2f:95:eb:11:6e:c4:f8:
         5f:1b:2e:8d:fd:fd:e0:0e:c6:ed:48:52:96:48:1c:4d:85:5b:
         17:a3:a2:5d:b1:64:3d:e6:25:14:9b:7f:55:93:4f:9b:60:93:
         3b:76:bc:4f:93:35:50:2e:0b:41:54:ee:fc:ee:e5:f2:3c:c6:
         ff:fa:40:d6:fb:0c:5a:d1:28:23:11:89:43:53:4f:8e:33:4b:
         de:8a:4e:e8:35:20:3d:d6:c7:87:3c:1a:18:9b:84:b8:66:f4:
         ad:fc:da:e5:3b:75:ac:d3:d8:80:fc:5f:6c:48:f7:59:af:11:
         b3:37:c1:8e:ea:ae:3e:12:9a:9a:2c:22:bd:d7:bd:26:eb:80:
         d4:e1:5a:e3:94:c1:2c:95:a2:3d:07:31:05:dd:83:af:c4:00:
         f2:4f:71:a3:f0:99:11:0d:bb:40:07:f1:dd:4d:f1:75:8e:db:
         ad:45:3c:a0:57:ad:6c:2d:24:93:47:a6:37:f8:05:8e:73:9e:
         e3:b8:39:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:06 2024 by rpki-client on console-fra.rpki-client.org