Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3230372e302f32342d3234203d3e203234323033.roa
File:                     3134302e3231332e3230372e302f32342d3234203d3e203234323033.roa (raw, json)
Hash identifier:          JkzH5y1oUZp4KubxTVdBb4/DVJ9qVMN7q2Goe0QQHfw=
Subject key identifier:   3E:27:C8:B1:F9:38:BA:B3:24:35:D5:B1:0E:9F:CA:9C:1C:8B:4C:DC
Certificate issuer:       /CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B
Certificate serial:       486DDA067CAFB64AA25568F791D2FF7337E64D0C
Authority key identifier: 10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3230372e302f32342d3234203d3e203234323033.roa
Signing time:             Tue 02 Nov 2021 02:22:51 +0000
ROA not before:           Tue 02 Nov 2021 02:17:51 +0000
ROA not after:            Wed 02 Nov 2022 02:22:51 +0000
asID:                     24203
IP address blocks:        140.213.207.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:6d:da:06:7c:af:b6:4a:a2:55:68:f7:91:d2:ff:73:37:e6:4d:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B
        Validity
            Not Before: Nov  2 02:17:51 2021 GMT
            Not After : Nov  2 02:22:51 2022 GMT
        Subject: CN=3082010A0282010100F15F02D2A90DFAD71A9A92CB52F461365BB7DD1029AE2D9351973B42BEBA910B2E39FE661B315F586C0FC61B8CD99A0750AF72C3EDF1A011E62C59FB0293A7AE5721A890EBCC02D5BE38FC64194E74B4251900C64A1875EC4CEE4D3ADB8807531DB52CB4BCB1E554C5E37236D682507553CA1A800E1C19CF8B9272F1983D88CEB0933316C79F57F00BE5ED28D75A45E70177784824CB955AE279FE844EFE77BA74687BE9954E641A72B4D2020D3780096E2392EAF6044B820B3E16DD4729790194CA7651F6EF4A36FC39D027271D41E9D7C6A790FC7645CDDAF60FFD1E04A501D9BB4E6CCD678D244633748EAF1B762444A3882F8A9E007B559418640578FF550203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:5f:02:d2:a9:0d:fa:d7:1a:9a:92:cb:52:f4:
                    61:36:5b:b7:dd:10:29:ae:2d:93:51:97:3b:42:be:
                    ba:91:0b:2e:39:fe:66:1b:31:5f:58:6c:0f:c6:1b:
                    8c:d9:9a:07:50:af:72:c3:ed:f1:a0:11:e6:2c:59:
                    fb:02:93:a7:ae:57:21:a8:90:eb:cc:02:d5:be:38:
                    fc:64:19:4e:74:b4:25:19:00:c6:4a:18:75:ec:4c:
                    ee:4d:3a:db:88:07:53:1d:b5:2c:b4:bc:b1:e5:54:
                    c5:e3:72:36:d6:82:50:75:53:ca:1a:80:0e:1c:19:
                    cf:8b:92:72:f1:98:3d:88:ce:b0:93:33:16:c7:9f:
                    57:f0:0b:e5:ed:28:d7:5a:45:e7:01:77:78:48:24:
                    cb:95:5a:e2:79:fe:84:4e:fe:77:ba:74:68:7b:e9:
                    95:4e:64:1a:72:b4:d2:02:0d:37:80:09:6e:23:92:
                    ea:f6:04:4b:82:0b:3e:16:dd:47:29:79:01:94:ca:
                    76:51:f6:ef:4a:36:fc:39:d0:27:27:1d:41:e9:d7:
                    c6:a7:90:fc:76:45:cd:da:f6:0f:fd:1e:04:a5:01:
                    d9:bb:4e:6c:cd:67:8d:24:46:33:74:8e:af:1b:76:
                    24:44:a3:88:2f:8a:9e:00:7b:55:94:18:64:05:78:
                    ff:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:27:C8:B1:F9:38:BA:B3:24:35:D5:B1:0E:9F:CA:9C:1C:8B:4C:DC
            X509v3 Authority Key Identifier:
                keyid:10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3230372e302f32342d3234203d3e203234323033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.213.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:33:ce:4b:86:0e:98:4b:8a:57:28:6d:4b:5e:f0:05:ca:3c:
         f0:d5:fa:d7:21:67:85:24:85:b9:a1:53:c9:41:71:27:45:05:
         86:bb:08:59:ed:9d:b9:73:22:95:02:7a:a0:97:26:f8:15:6f:
         f2:ff:b9:dc:5c:3c:ca:2c:18:00:1c:07:7b:7c:8a:e6:14:c8:
         d9:71:4e:65:a3:79:ad:1f:b3:14:f2:9c:10:80:b6:9d:84:7d:
         35:ea:20:f1:75:2e:d7:f8:2d:a6:d6:59:9c:b1:5e:8b:e5:78:
         c6:61:d7:5c:b5:72:6b:5b:19:07:85:63:48:8f:85:bf:ea:d3:
         5a:ba:4f:69:3d:c7:22:79:f0:2d:b0:4a:1e:f6:e0:ef:52:4a:
         e2:bf:58:41:67:89:ed:a7:87:e8:b5:7c:e5:08:06:91:ae:d0:
         22:7f:f2:10:01:7d:0d:83:b5:7b:23:2b:58:ea:1d:32:72:cb:
         df:88:25:02:b9:9a:d4:b6:43:43:5c:bf:84:73:cf:1e:1a:8d:
         a7:15:4e:17:2a:c8:35:aa:62:f7:34:fc:90:f1:1f:76:e1:2c:
         af:5a:7a:82:6c:1e:ec:98:83:22:a4:48:8d:03:cd:f8:6e:00:
         d9:70:9c:4b:01:18:f9:13:fa:a1:1a:e2:9c:dd:92:36:f6:62:
         41:33:56:bd
-----BEGIN CERTIFICATE-----
MIIHJjCCBg6gAwIBAgIUSG3aBnyvtkqiVWj3kdL/czfmTQwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTBCQUI3OTA3RDk1M0EwRDVGREVCNUMyMEM5RjI5QkNG
QzY2MEExQjAeFw0yMTExMDIwMjE3NTFaFw0yMjExMDIwMjIyNTFaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwRjE1RjAyRDJBOTBERkFENzFB
OUE5MkNCNTJGNDYxMzY1QkI3REQxMDI5QUUyRDkzNTE5NzNCNDJCRUJBOTEwQjJF
MzlGRTY2MUIzMTVGNTg2QzBGQzYxQjhDRDk5QTA3NTBBRjcyQzNFREYxQTAxMUU2
MkM1OUZCMDI5M0E3QUU1NzIxQTg5MEVCQ0MwMkQ1QkUzOEZDNjQxOTRFNzRCNDI1
MTkwMEM2NEExODc1RUM0Q0VFNEQzQURCODgwNzUzMURCNTJDQjRCQ0IxRTU1NEM1
RTM3MjM2RDY4MjUwNzU1M0NBMUE4MDBFMUMxOUNGOEI5MjcyRjE5ODNEODhDRUIw
OTMzMzE2Qzc5RjU3RjAwQkU1RUQyOEQ3NUE0NUU3MDE3Nzc4NDgyNENCOTU1QUUy
NzlGRTg0NEVGRTc3QkE3NDY4N0JFOTk1NEU2NDFBNzJCNEQyMDIwRDM3ODAwOTZF
MjM5MkVBRjYwNDRCODIwQjNFMTZERDQ3Mjk3OTAxOTRDQTc2NTFGNkVGNEEzNkZD
MzlEMDI3MjcxRDQxRTlEN0M2QTc5MEZDNzY0NUNEREFGNjBGRkQxRTA0QTUwMUQ5
QkI0RTZDQ0Q2NzhEMjQ0NjMzNzQ4RUFGMUI3NjI0NDRBMzg4MkY4QTlFMDA3QjU1
OTQxODY0MDU3OEZGNTUwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEA8V8C0qkN+tcampLLUvRhNlu33RApri2TUZc7Qr66kQsuOf5mGzFf
WGwPxhuM2ZoHUK9yw+3xoBHmLFn7ApOnrlchqJDrzALVvjj8ZBlOdLQlGQDGShh1
7EzuTTrbiAdTHbUstLyx5VTF43I21oJQdVPKGoAOHBnPi5Jy8Zg9iM6wkzMWx59X
8Avl7SjXWkXnAXd4SCTLlVrief6ETv53unRoe+mVTmQacrTSAg03gAluI5Lq9gRL
ggs+Ft1HKXkBlMp2UfbvSjb8OdAnJx1B6dfGp5D8dkXN2vYP/R4EpQHZu05szWeN
JEYzdI6vG3YkRKOIL4qeAHtVlBhkBXj/VQIDAQABo4ICNDCCAjAwHQYDVR0OBBYE
FD4nyLH5OLqzJDXVsQ6fypwci0zcMB8GA1UdIwQYMBaAFBC6t5B9lToNX961wgyf
Kbz8ZgobMA4GA1UdDwEB/wQEAwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGJkYjFlMGEtYTRlYy00OWRiLWJl
ODktOGQ3ZTdmYzJjMjI3LzEvMTBCQUI3OTA3RDk1M0EwRDVGREVCNUMyMEM5RjI5
QkNGQzY2MEExQi5jcmwwdAYIKwYBBQUHAQEEaDBmMGQGCCsGAQUFBzAChlhyc3lu
YzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8xLzEwQkFCNzkw
N0Q5NTNBMEQ1RkRFQjVDMjBDOUYyOUJDRkM2NjBBMUIuY2VyMIGkBggrBgEFBQcB
CwSBlzCBlDCBkQYIKwYBBQUHMAuGgYRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby80YmRiMWUwYS1hNGVjLTQ5ZGItYmU4OS04ZDdlN2ZjMmMyMjcvMS8z
MTM0MzAyZTMyMzEzMzJlMzIzMDM3MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIz
NDMyMzAzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEAIzVzzANBgkqhkiG9w0BAQsFAAOCAQEAMzPOS4YO
mEuKVyhtS17wBco88NX61yFnhSSFuaFTyUFxJ0UFhrsIWe2duXMilQJ6oJcm+BVv
8v+53Fw8yiwYABwHe3yK5hTI2XFOZaN5rR+zFPKcEIC2nYR9Neog8XUu1/gtptZZ
nLFei+V4xmHXXLVya1sZB4VjSI+Fv+rTWrpPaT3HInnwLbBKHvbg71JK4r9YQWeJ
7aeH6LV85QgGka7QIn/yEAF9DYO1eyMrWOodMnLL34glArma1LZDQ1y/hHPPHhqN
pxVOFyrINapi9zT8kPEfduEsr1p6gmwe7JiDIqRIjQPN+G4A2XCcSwEY+RP6oRri
nN2SNvZiQTNWvQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:40 2024 by rpki-client on console-ams.rpki-client.org