Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3231322e302f32342d3234203d3e20313339393934.roa
File:                     3134302e3231332e3231322e302f32342d3234203d3e20313339393934.roa (raw, json)
Hash identifier:          5TAHPVH3G2u8grJzXx40Y598KpsC3lvXwmrBcPiwqyw=
Subject key identifier:   99:5E:11:FB:89:E6:54:A9:A2:14:BF:FB:83:5B:42:41:9B:9C:9B:69
Certificate issuer:       /CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B
Certificate serial:       60E64B2752993E7AF11DC2C29785FE0F59B5DCA3
Authority key identifier: 10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3231322e302f32342d3234203d3e20313339393934.roa
Signing time:             Sat 08 Jan 2022 17:34:48 +0000
ROA not before:           Sat 08 Jan 2022 17:29:48 +0000
ROA not after:            Sun 08 Jan 2023 17:34:48 +0000
asID:                     139994
IP address blocks:        140.213.212.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:e6:4b:27:52:99:3e:7a:f1:1d:c2:c2:97:85:fe:0f:59:b5:dc:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B
        Validity
            Not Before: Jan  8 17:29:48 2022 GMT
            Not After : Jan  8 17:34:48 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:c8:30:66:57:43:ad:f0:99:96:97:12:8f:e2:
                    99:8f:d0:bb:e5:7c:f3:ac:37:06:7d:90:7d:f0:20:
                    2d:22:fb:21:75:87:71:ea:db:5c:a2:23:6a:c2:6f:
                    b6:dd:9a:16:c8:55:76:dc:24:05:46:20:49:4f:c5:
                    93:40:33:83:90:5d:a4:5c:48:b6:fa:22:a6:d3:b7:
                    c7:cf:3c:40:23:b9:fe:80:d8:23:4e:fe:4c:40:28:
                    26:7d:9a:e0:6c:ff:9a:0c:1d:9d:55:da:64:7e:72:
                    ca:72:89:02:28:10:90:b7:60:f9:6f:b9:ab:b6:6d:
                    e2:8b:a6:a9:4b:28:2a:dd:52:2c:f2:99:ad:8e:12:
                    6e:98:a3:d3:85:f0:30:12:9b:5c:98:42:a9:2b:7d:
                    ac:8c:e0:c8:36:3c:35:c9:f9:1d:0d:24:7b:1f:e9:
                    69:08:c0:de:db:45:f3:ae:10:92:f7:e6:eb:24:1b:
                    85:ea:b6:31:04:73:0f:33:f2:2a:df:ba:83:b0:17:
                    de:cc:88:e0:26:d1:f1:cc:62:e5:e7:72:d6:7f:a4:
                    04:0e:ad:74:81:50:4f:27:d7:01:8c:85:5e:a7:48:
                    c5:e8:a8:a2:0c:bb:04:36:23:4c:f0:25:42:f8:38:
                    a4:60:21:29:53:b6:e2:fd:e9:c0:c7:ee:56:cb:a7:
                    83:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:5E:11:FB:89:E6:54:A9:A2:14:BF:FB:83:5B:42:41:9B:9C:9B:69
            X509v3 Authority Key Identifier:
                keyid:10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3231322e302f32342d3234203d3e20313339393934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.213.212.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9f:56:c0:d7:37:1f:2e:3c:9e:f2:e9:77:15:3d:db:fe:77:df:
         fc:32:34:db:04:59:83:08:19:28:a0:13:f7:51:ec:74:32:9a:
         82:5a:ae:9e:d5:d8:47:d8:15:92:dd:0c:9f:61:6e:4b:f6:51:
         ac:88:0c:a3:8e:7e:dd:ed:26:da:31:bd:e8:b1:e9:af:40:ce:
         7a:b2:55:14:28:d1:23:59:5a:ec:a3:49:f0:33:f5:1d:c4:41:
         c2:92:d6:87:7e:3d:5a:42:d9:30:22:de:21:cf:cb:c7:60:65:
         91:ec:c5:63:13:19:bb:57:66:85:29:87:c3:25:e3:ae:20:8c:
         09:13:89:9d:b9:74:1a:b6:df:1e:7b:e8:7f:f4:a2:6b:6a:4b:
         eb:39:ad:a4:5b:18:70:7d:a5:bb:d9:d2:3e:c5:14:62:08:30:
         0d:cb:56:12:63:e6:2c:79:78:6e:98:dc:3d:35:7a:48:c1:60:
         a8:b5:bf:2e:cf:7e:b0:42:1a:4c:d7:21:8d:e1:bc:88:fa:4f:
         dc:d9:57:04:d8:19:82:e7:79:70:58:df:e1:67:ea:41:aa:45:
         d5:14:3a:c1:58:43:c0:91:30:71:97:b0:75:41:32:36:e3:34:
         6c:43:de:b5:10:2e:ef:90:c8:b1:0b:75:8d:6f:9c:1e:dd:6a:
         5a:df:88:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:40 2024 by rpki-client on console-ams.rpki-client.org