Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3231312e302f32342d3234203d3e20313339393934.roa
File:                     3134302e3231332e3231312e302f32342d3234203d3e20313339393934.roa (raw, json)
Hash identifier:          LeCGrX5g4rdBTarNouSv+RHhdAhVdhRVgHI+neZYguQ=
Subject key identifier:   08:F1:82:0F:42:56:F8:57:86:BA:AB:6B:56:FB:01:70:05:2A:62:E1
Certificate issuer:       /CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B
Certificate serial:       159A3852DA9BD02837F5FC3DEEC1FD1641896C29
Authority key identifier: 10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3231312e302f32342d3234203d3e20313339393934.roa
Signing time:             Sat 08 Jan 2022 17:34:38 +0000
ROA not before:           Sat 08 Jan 2022 17:29:38 +0000
ROA not after:            Sun 08 Jan 2023 17:34:38 +0000
asID:                     139994
IP address blocks:        140.213.211.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:9a:38:52:da:9b:d0:28:37:f5:fc:3d:ee:c1:fd:16:41:89:6c:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B
        Validity
            Not Before: Jan  8 17:29:38 2022 GMT
            Not After : Jan  8 17:34:38 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:2c:aa:cf:95:5c:76:a5:a8:d7:04:99:8b:4f:
                    75:84:c9:33:d5:e7:0d:2a:27:5c:7c:51:ba:c5:72:
                    fe:02:ea:bc:2c:ee:32:86:45:43:04:f2:5d:a2:8b:
                    2c:2f:9f:37:d6:c2:75:79:42:23:62:63:b5:9e:de:
                    b1:eb:2e:de:41:f4:fd:29:3e:f1:6e:c9:6f:93:2c:
                    7f:d3:7c:c4:3f:24:b0:14:1e:7f:8e:0b:4c:79:a3:
                    94:7d:07:73:51:ab:d6:06:e6:e6:70:5f:2f:c2:e8:
                    a9:e9:4a:6b:22:41:e9:e1:b2:a0:95:1f:a7:ff:d4:
                    9c:0b:24:71:8d:fd:2c:43:49:d6:a3:18:9c:05:b0:
                    5a:b7:8e:f9:31:f5:f1:4d:9f:26:de:da:27:d9:9c:
                    69:3e:84:ea:83:d5:3a:b0:38:b0:8e:2c:d1:ef:cb:
                    bf:91:7c:f2:04:1a:c2:24:bb:68:57:72:6e:4e:24:
                    a5:47:aa:83:30:67:d4:ea:d0:b8:47:ae:31:14:6b:
                    6f:41:45:06:e2:16:d4:8d:6e:85:b8:6c:c3:64:44:
                    a6:13:a8:79:68:35:9d:78:4e:4e:3e:0d:95:c6:0d:
                    62:3b:82:fa:2a:87:d5:50:0b:ad:3f:6c:d8:6d:57:
                    f9:0b:cc:f5:4c:30:78:f0:9c:ad:fb:32:0c:de:e0:
                    74:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:F1:82:0F:42:56:F8:57:86:BA:AB:6B:56:FB:01:70:05:2A:62:E1
            X509v3 Authority Key Identifier:
                keyid:10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3231312e302f32342d3234203d3e20313339393934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.213.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2e:2f:b8:1e:c5:27:c9:e4:9b:81:89:34:d8:1e:65:b9:db:59:
         57:93:23:5e:c7:99:a7:69:e1:b6:f3:c0:8c:1f:25:93:0e:80:
         3c:22:c4:b9:d2:c1:25:83:9a:c7:0f:ef:0a:dd:da:99:85:f6:
         2e:64:0a:b7:3a:6a:10:72:0b:ae:a3:34:b6:6f:9c:bc:97:b2:
         35:90:04:8d:aa:8b:34:9b:dc:97:2d:59:16:f2:a1:98:22:d9:
         17:61:1c:49:4b:65:e7:67:61:6d:e4:68:ba:b9:13:92:47:88:
         ed:5d:50:29:41:6f:fa:5e:5a:91:71:13:61:9f:ad:44:b6:2d:
         02:ac:a7:7f:54:f5:71:a1:13:ba:d5:42:6c:87:cf:9b:0b:83:
         5b:ee:04:5b:e7:cd:06:34:58:35:2c:0e:cd:43:58:87:12:ab:
         bc:e0:a9:39:d7:c6:fc:ec:8a:97:ac:b8:8f:01:7d:bf:e9:8a:
         54:7f:cc:52:10:22:6c:87:f0:fb:9a:6e:1e:72:8c:f3:5d:5c:
         a7:d7:7e:ac:2f:ce:d5:38:b8:90:22:82:9c:a9:08:ec:99:17:
         fc:f5:08:5b:6b:fd:94:39:1b:d5:8f:f0:c3:d3:09:ce:00:e1:
         c0:28:24:2f:c9:46:18:b0:f6:e5:07:2a:ef:bd:c0:14:00:34:
         a0:9c:c8:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:06 2024 by rpki-client on console-fra.rpki-client.org