Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3230382e302f32342d3234203d3e203234323033.roa
File:                     3134302e3231332e3230382e302f32342d3234203d3e203234323033.roa (raw, json)
Hash identifier:          bxEf4y4RJIZy+9q7NEb38ZGLABJV1BFJ9i3CSeV+bv4=
Subject key identifier:   B7:36:C0:23:FB:97:26:D8:B8:6C:65:EF:74:59:3A:9C:3F:86:2D:EB
Certificate issuer:       /CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B
Certificate serial:       32B957973E6797394A5C182AEEC5B429BBC27442
Authority key identifier: 10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3230382e302f32342d3234203d3e203234323033.roa
Signing time:             Tue 02 Nov 2021 02:23:08 +0000
ROA not before:           Tue 02 Nov 2021 02:18:08 +0000
ROA not after:            Wed 02 Nov 2022 02:23:08 +0000
asID:                     24203
IP address blocks:        140.213.208.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:b9:57:97:3e:67:97:39:4a:5c:18:2a:ee:c5:b4:29:bb:c2:74:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B
        Validity
            Not Before: Nov  2 02:18:08 2021 GMT
            Not After : Nov  2 02:23:08 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:8a:ed:d5:b7:25:3a:a1:b0:67:8b:84:a5:a6:
                    a2:95:c7:f3:fc:d6:9d:08:24:1a:15:be:fd:7d:46:
                    03:ab:e1:bd:cb:30:1a:44:d4:2a:5b:d8:87:49:85:
                    63:35:6c:76:18:1a:0c:e3:0d:f3:1c:58:3e:62:3a:
                    38:cb:79:f8:0d:ee:02:f4:70:e3:96:5f:1f:1e:f4:
                    36:8e:90:06:a6:86:75:9b:fd:b5:e7:95:39:57:56:
                    92:c4:15:40:34:c2:34:a9:ff:c7:c3:ea:e0:4b:d5:
                    98:fd:db:da:40:12:96:88:f5:56:a8:a4:09:fd:5e:
                    eb:80:e6:ed:46:38:87:f0:7c:86:5e:1e:7e:c8:30:
                    5d:25:a9:60:ee:ff:6e:3f:3a:57:5c:b0:16:f6:ff:
                    e4:2a:3f:07:0b:cb:d7:1d:0f:78:14:b3:b3:ac:37:
                    92:99:1e:a0:f1:86:63:58:48:29:02:fa:eb:67:43:
                    bf:ab:83:96:13:e5:3d:b2:69:30:9e:63:3d:cd:8b:
                    30:5c:c2:cf:e6:6c:ab:d7:a8:da:8a:6f:35:8f:87:
                    35:40:e1:de:a5:7f:d9:ef:62:21:73:c9:2f:db:8e:
                    74:67:12:9b:be:7c:90:22:2b:59:63:a9:2f:ac:00:
                    31:13:1a:aa:4a:a6:b8:4f:8c:b0:32:de:15:a4:81:
                    73:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:36:C0:23:FB:97:26:D8:B8:6C:65:EF:74:59:3A:9C:3F:86:2D:EB
            X509v3 Authority Key Identifier:
                keyid:10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3230382e302f32342d3234203d3e203234323033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.213.208.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:1d:08:55:e6:c4:35:39:9e:e1:44:31:9c:03:c9:a4:04:86:
         62:8c:90:89:30:45:1d:7d:19:9f:2a:04:e6:80:10:35:c1:51:
         ff:8b:3e:25:a8:09:e0:59:1a:91:10:c1:6b:d8:b7:03:d3:ef:
         53:ab:37:39:0f:f0:a0:a9:b7:cc:44:e7:c6:4d:c6:af:5c:b4:
         dc:ff:a4:ad:59:a3:95:f5:db:fb:55:9e:43:53:19:1d:45:3f:
         e6:bf:64:52:df:6e:37:f9:c2:75:56:52:40:b9:85:27:48:60:
         9e:d8:9d:fb:a7:fe:97:ea:c7:e5:80:a7:da:1c:a4:ae:90:3f:
         72:bc:1b:42:bc:ce:6f:dc:7f:85:68:b0:20:5f:56:eb:e5:12:
         51:5c:36:83:64:c4:34:b3:5d:f7:a3:13:6a:d3:91:3d:30:0f:
         bd:44:07:d9:a3:7a:9e:d5:8f:36:c3:f4:8d:70:2a:d7:fc:aa:
         8f:88:92:7e:8a:86:cf:ba:f4:38:ee:a5:bd:b6:c1:cf:e3:13:
         21:96:7c:7f:7c:92:66:31:91:aa:fb:c2:44:91:c9:01:52:d1:
         e0:83:a5:b7:ba:d0:e3:7f:24:96:2f:d0:5d:4c:08:3f:a0:f0:
         df:be:1d:c1:a7:e5:56:1d:e7:3b:b5:52:fc:72:6b:40:85:41:
         1a:f5:1e:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:40 2024 by rpki-client on console-ams.rpki-client.org