Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3230302e302f32342d3234203d3e20313339393934.roa
File:                     3134302e3231332e3230302e302f32342d3234203d3e20313339393934.roa (raw, json)
Hash identifier:          ER0MRZXsYzfeBHGjJewDo0BXQGDnLsThOtbWorjcyqE=
Subject key identifier:   CC:91:4F:BA:DE:93:05:F2:B3:88:48:10:33:34:22:C8:78:40:9F:66
Certificate issuer:       /CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B
Certificate serial:       100669B1495329B891B0748EAF0513AC70D446FB
Authority key identifier: 10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3230302e302f32342d3234203d3e20313339393934.roa
Signing time:             Sat 08 Jan 2022 17:33:42 +0000
ROA not before:           Sat 08 Jan 2022 17:28:42 +0000
ROA not after:            Sun 08 Jan 2023 17:33:42 +0000
asID:                     139994
IP address blocks:        140.213.200.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:06:69:b1:49:53:29:b8:91:b0:74:8e:af:05:13:ac:70:d4:46:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B
        Validity
            Not Before: Jan  8 17:28:42 2022 GMT
            Not After : Jan  8 17:33:42 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:8e:16:70:c5:98:74:79:7a:50:59:77:8f:f4:
                    1e:0c:a3:e8:f0:bf:ef:14:96:4e:7d:66:77:94:ab:
                    9b:3e:02:3a:cd:07:27:09:69:34:b6:23:3a:9d:f4:
                    78:f2:27:70:69:19:a4:95:9a:89:1f:2c:ec:c2:9e:
                    1c:89:f3:f4:02:b8:6a:7e:3a:10:f5:54:a3:07:59:
                    95:ae:18:3f:1e:37:aa:2d:f4:ef:9f:5a:40:ec:f8:
                    2b:97:0d:1e:8a:83:42:51:52:f7:f3:a0:3c:e0:84:
                    73:04:e0:8b:10:6a:ba:93:69:e3:fc:2d:06:fc:95:
                    f3:d2:2d:a5:a5:84:5f:b6:a7:49:c2:52:48:9c:9b:
                    85:bc:ff:31:80:a4:ce:2c:ac:a1:46:d8:62:ee:4a:
                    7b:f4:eb:8b:18:4e:bf:63:58:34:5e:eb:ce:94:66:
                    61:3b:ad:99:da:15:20:d3:ea:5d:10:55:14:01:63:
                    01:81:28:e2:a2:00:72:78:8b:a4:29:92:00:32:b9:
                    14:54:e6:fb:f7:b4:03:80:9b:f3:b2:78:64:c8:2d:
                    00:22:65:0c:91:3f:2a:ce:51:82:65:14:ff:08:2f:
                    86:17:65:cb:e9:b0:a7:db:6c:41:d9:65:06:b4:e8:
                    d5:df:82:bd:ac:c5:6c:1e:3f:3f:e7:26:c5:86:14:
                    07:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:91:4F:BA:DE:93:05:F2:B3:88:48:10:33:34:22:C8:78:40:9F:66
            X509v3 Authority Key Identifier:
                keyid:10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3230302e302f32342d3234203d3e20313339393934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.213.200.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b4:a9:34:c9:41:36:57:2b:c7:6b:9f:ee:69:5f:e6:35:4f:74:
         90:50:b6:f3:81:34:3b:ad:0d:cd:d3:b5:94:3a:c2:e1:ec:c4:
         3c:97:ff:b4:3d:6a:aa:e9:be:f8:33:53:8b:8c:b4:f7:da:e5:
         5b:ef:63:04:a6:d7:03:c1:c2:28:f5:a0:26:58:a2:2c:81:02:
         8c:f6:64:9f:ef:8d:23:0b:d0:11:9d:e7:59:b6:6b:9d:9a:1b:
         0d:87:25:21:83:79:d8:c0:2d:67:0a:ce:31:65:0c:88:ff:a1:
         ef:be:56:73:c1:cd:b6:fe:4e:5f:8e:c8:50:b9:57:9a:7f:76:
         41:4e:2d:64:65:11:6b:3b:78:27:52:f0:ee:71:c7:16:e0:e7:
         b4:f6:b3:90:20:6c:e5:c1:4a:f5:bf:fb:5f:da:9a:7b:a7:9c:
         d5:c6:af:b3:66:66:8d:cd:c6:6a:9d:a3:89:d1:e0:c3:68:89:
         22:68:41:6f:87:84:c2:cb:6f:65:eb:cb:4c:1d:17:cd:67:d5:
         41:ca:2a:79:17:a3:18:9b:72:8c:15:1d:f8:73:b3:12:39:01:
         a9:46:ea:eb:61:87:41:71:41:7f:90:c9:bf:bc:69:02:e5:ee:
         af:9d:f1:9d:ea:f1:93:31:a3:96:81:01:35:c1:e1:d2:cf:01:
         e4:9b:ff:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:40 2024 by rpki-client on console-ams.rpki-client.org