Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3231332e302f32342d3234203d3e20313339393934.roa
File:                     3134302e3231332e3231332e302f32342d3234203d3e20313339393934.roa (raw, json)
Hash identifier:          Y2/I/1Bx3yuUqyXz07sO23SBKWhKmw3MpLpHcJWoKCU=
Subject key identifier:   33:9D:5B:10:DD:FD:D9:74:7B:CA:C2:E3:C2:11:2E:FE:65:56:65:B1
Certificate issuer:       /CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B
Certificate serial:       2E48F84DDA776DBFCEAB56412E84CE4EDFD72FF2
Authority key identifier: 10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3231332e302f32342d3234203d3e20313339393934.roa
Signing time:             Sat 08 Jan 2022 17:34:57 +0000
ROA not before:           Sat 08 Jan 2022 17:29:57 +0000
ROA not after:            Sun 08 Jan 2023 17:34:57 +0000
asID:                     139994
IP address blocks:        140.213.213.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:48:f8:4d:da:77:6d:bf:ce:ab:56:41:2e:84:ce:4e:df:d7:2f:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B
        Validity
            Not Before: Jan  8 17:29:57 2022 GMT
            Not After : Jan  8 17:34:57 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:1c:b7:22:e1:c7:8a:68:5f:34:64:4f:92:eb:
                    df:c2:3f:69:b4:35:e6:2a:b7:1f:a2:6a:ba:ba:af:
                    31:c3:4e:04:3e:be:05:2b:b3:14:71:61:6d:e6:40:
                    66:db:1a:3f:ae:c2:ba:b7:94:38:4f:f1:98:37:97:
                    1d:69:cd:74:2b:1c:06:af:69:b7:9a:30:1b:ed:bf:
                    ba:39:dc:e3:68:eb:77:f2:39:05:ab:39:19:aa:96:
                    1e:96:36:f5:7c:92:6e:d4:c3:7a:1d:e1:f0:6d:c3:
                    0f:8f:df:5e:4f:cd:bc:e0:63:08:60:99:7e:d0:02:
                    cc:c5:67:84:09:6a:f2:55:05:0f:74:d9:18:26:e3:
                    47:f0:87:4d:df:90:f7:dd:21:ca:e7:f0:b4:7a:12:
                    14:84:5b:62:39:5a:78:9e:2b:53:a2:35:0b:ab:8a:
                    aa:ab:b9:14:30:6d:85:87:68:a6:b1:df:0b:78:3f:
                    1c:97:42:c3:cf:c9:f7:b2:7d:4f:a7:a2:7d:a3:4d:
                    e1:9d:bd:8b:7e:9f:e9:d1:e9:97:b3:e3:16:54:1d:
                    51:76:1b:cf:68:3c:bb:d8:3d:af:27:96:3c:f4:68:
                    57:72:d0:01:f0:7e:79:13:3c:93:47:4c:23:d5:da:
                    fe:29:c3:92:af:24:14:f2:67:dd:72:33:c1:e0:8d:
                    00:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:9D:5B:10:DD:FD:D9:74:7B:CA:C2:E3:C2:11:2E:FE:65:56:65:B1
            X509v3 Authority Key Identifier:
                keyid:10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3231332e302f32342d3234203d3e20313339393934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.213.213.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4f:f2:45:ab:d2:79:59:3c:b3:1a:b8:59:6d:9c:eb:c4:da:af:
         17:3a:b4:95:ea:ad:1d:01:52:64:73:71:90:4b:a3:91:f8:60:
         0c:7e:79:b2:ff:9c:5a:ca:9c:7f:2c:62:15:86:9c:69:5e:23:
         a6:2d:27:9d:ab:d6:ec:a0:99:29:ca:d2:3b:64:f7:43:a5:ab:
         a7:ea:5d:77:68:ad:4a:6e:7a:29:fe:67:d1:cc:98:b6:97:d2:
         95:4a:4b:52:8f:b9:3a:98:02:14:fc:0a:79:15:2a:30:a2:cc:
         f7:3c:aa:1b:63:0f:e8:51:5d:92:56:61:cc:46:f5:0c:6f:df:
         04:0c:ef:83:82:4d:f9:08:b7:fe:0a:f0:ac:c5:76:22:66:17:
         c7:8f:eb:12:02:dd:82:76:61:b1:49:bb:10:cf:77:b3:d5:f7:
         8d:c3:01:ac:8d:7f:26:e7:ce:c4:90:a5:87:43:39:3c:66:06:
         21:5c:22:9b:7d:f5:83:48:1d:61:c2:bf:0f:50:d8:66:61:97:
         ef:46:a7:e0:14:a6:82:2a:8c:97:2e:4f:00:4a:72:61:30:6b:
         2b:f7:9f:a3:b7:73:86:e4:fe:e5:f3:49:99:1c:3e:04:9b:4b:
         54:12:07:e6:b3:a6:1a:8b:9e:06:b3:d5:07:29:93:43:5a:12:
         ea:77:6c:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:06 2024 by rpki-client on console-fra.rpki-client.org