Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3230322e302f32342d3234203d3e20313339393934.roa
File:                     3134302e3231332e3230322e302f32342d3234203d3e20313339393934.roa (raw, json)
Hash identifier:          7i5qhZ3xy8vlxMBFa2tygJwDF9kxk5ztL1trU/VfNx4=
Subject key identifier:   31:13:FD:70:F2:42:61:DC:FB:77:D0:56:3C:5E:4A:8C:AF:A1:69:75
Certificate issuer:       /CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B
Certificate serial:       24DBD07D329BFE93AB12053DDE18E7549DF94DEF
Authority key identifier: 10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3230322e302f32342d3234203d3e20313339393934.roa
Signing time:             Sat 08 Jan 2022 17:34:02 +0000
ROA not before:           Sat 08 Jan 2022 17:29:02 +0000
ROA not after:            Sun 08 Jan 2023 17:34:02 +0000
asID:                     139994
IP address blocks:        140.213.202.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:db:d0:7d:32:9b:fe:93:ab:12:05:3d:de:18:e7:54:9d:f9:4d:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B
        Validity
            Not Before: Jan  8 17:29:02 2022 GMT
            Not After : Jan  8 17:34:02 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:76:02:9f:2a:79:82:49:38:12:a8:05:5e:a3:
                    d0:8f:5c:59:3c:a6:a1:d8:b8:cd:b6:b0:ae:17:61:
                    9e:b5:4f:cf:92:23:6c:74:82:9a:04:4d:91:1b:0d:
                    57:15:db:08:23:50:e5:40:e2:c1:c2:71:82:f6:08:
                    b8:ce:e6:36:61:c1:7d:69:d9:fd:2b:05:67:6e:be:
                    c7:75:f7:c5:0e:00:29:29:3e:a1:79:25:56:48:88:
                    de:85:a0:31:9e:0b:a0:46:37:23:8b:f8:7c:8d:41:
                    c6:8b:4a:f9:07:cf:06:62:f9:50:30:47:1d:03:9f:
                    49:2b:d5:0a:71:3d:4c:5a:9f:9c:97:cb:a9:2e:bd:
                    64:8f:23:d9:0e:b1:3f:cb:fb:da:5e:56:16:1f:55:
                    a6:06:96:f3:19:75:3d:cc:d8:f6:65:e4:e8:be:8f:
                    c1:9d:cc:cd:64:fb:42:3b:0e:98:39:4e:3b:92:f6:
                    dc:07:cd:92:bd:59:28:81:22:6b:08:bd:f3:03:33:
                    cf:e2:16:58:5a:64:0e:76:5f:08:44:c2:3e:9e:62:
                    4a:63:02:ee:f9:b0:79:e5:19:b1:36:21:fb:53:07:
                    e2:2b:4c:0c:2d:24:63:48:ca:39:44:20:1b:bf:db:
                    28:22:0a:ef:6d:42:b5:a5:70:ef:84:c4:31:be:c3:
                    d4:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:13:FD:70:F2:42:61:DC:FB:77:D0:56:3C:5E:4A:8C:AF:A1:69:75
            X509v3 Authority Key Identifier:
                keyid:10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3230322e302f32342d3234203d3e20313339393934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.213.202.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:06:50:37:14:fe:ff:9b:41:82:a1:1d:c2:ee:9e:24:19:38:
         4c:1f:24:71:e8:fe:df:77:7a:a7:90:69:6c:3b:29:0b:0c:b3:
         7d:e1:ed:fb:9e:f1:01:7e:fc:18:61:3f:55:fd:40:72:52:25:
         35:6c:c5:e0:20:ed:8e:27:94:bc:89:2e:1b:2c:8f:5e:20:ac:
         04:0e:c5:4a:d8:be:5a:7b:9d:d7:43:ae:9a:41:c7:46:bd:c5:
         24:48:0e:ec:9f:55:54:69:de:c5:41:d3:8e:50:c0:ef:da:1e:
         54:2b:11:3c:6e:b2:2d:67:35:aa:45:04:c0:d4:7c:c6:ae:08:
         a6:04:1f:c1:6b:4d:6b:7f:f1:6a:d7:03:db:25:ac:54:c0:8d:
         09:24:02:f8:cc:44:7b:49:81:bc:35:9c:61:09:59:05:74:9c:
         ea:f5:e8:62:81:6c:b7:86:a3:2c:b8:84:9f:ca:8b:75:29:21:
         7e:78:c8:85:87:ce:20:88:bc:dc:a0:e5:73:e8:d6:01:2b:1d:
         98:6e:05:7a:63:c0:24:7a:62:50:bd:b4:43:0a:5a:53:4c:fc:
         7b:1b:3a:a3:e2:e4:8d:97:2b:55:fc:c1:75:ea:3e:75:86:c5:
         24:6f:e9:ad:f2:1a:5d:6c:8b:64:be:de:c9:26:af:e9:d0:50:
         cc:88:f0:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:06 2024 by rpki-client on console-fra.rpki-client.org