Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3231342e302f32342d3234203d3e20313339393934.roa
File:                     3134302e3231332e3231342e302f32342d3234203d3e20313339393934.roa (raw, json)
Hash identifier:          HzPWwdk8XU6HH9qnDI+xrrLo1QJHg26SrmzMC3Xumos=
Subject key identifier:   A5:3A:4A:5C:82:A8:B5:0B:B6:AA:46:A7:9B:1A:AD:D3:E7:41:C7:AF
Certificate issuer:       /CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B
Certificate serial:       77ABE32393BCD011DE5268515823A1B09D982974
Authority key identifier: 10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3231342e302f32342d3234203d3e20313339393934.roa
Signing time:             Sat 08 Jan 2022 17:35:06 +0000
ROA not before:           Sat 08 Jan 2022 17:30:06 +0000
ROA not after:            Sun 08 Jan 2023 17:35:06 +0000
asID:                     139994
IP address blocks:        140.213.214.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:ab:e3:23:93:bc:d0:11:de:52:68:51:58:23:a1:b0:9d:98:29:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B
        Validity
            Not Before: Jan  8 17:30:06 2022 GMT
            Not After : Jan  8 17:35:06 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:24:ed:e2:20:e7:38:27:1e:fc:03:f4:9c:3e:
                    70:f1:f7:3d:03:b6:be:77:05:3a:1a:9a:94:cc:12:
                    0a:31:3a:a0:ee:c1:0d:6f:40:a1:e2:3b:ee:cc:33:
                    cb:65:78:de:66:83:d9:aa:fa:75:4f:36:11:9a:c3:
                    1c:0a:4a:df:27:f1:d1:70:e0:33:ac:f5:45:c0:bf:
                    9b:ef:72:b2:13:0e:da:f3:46:27:ef:88:b4:8f:2e:
                    c6:8d:7e:60:b2:c6:8c:a2:6c:8b:d2:36:6a:c2:b7:
                    7c:f3:f4:65:46:8a:7c:2a:f8:0b:e9:b6:cc:23:23:
                    1f:f5:bf:d2:9f:40:d8:a0:b8:23:e6:79:d0:87:3e:
                    56:c6:2d:92:3c:95:81:e3:2a:c8:4b:5a:ec:d6:b3:
                    81:0b:58:90:10:98:47:1c:1f:29:cf:d3:c7:87:f2:
                    d3:36:50:25:1d:fa:84:23:d7:a6:46:aa:87:48:fb:
                    98:f5:ec:44:07:53:95:45:37:38:1f:79:3f:f5:45:
                    81:8f:42:51:cb:af:ef:28:87:9c:52:45:b1:0e:95:
                    08:44:94:47:e0:b8:20:3e:f5:0c:eb:fa:70:d7:9a:
                    f5:1f:14:a2:fa:32:dc:57:25:9d:fa:fe:c4:a1:8a:
                    dd:ff:8e:e3:bc:60:43:5e:85:b1:fb:c0:3a:49:ff:
                    30:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:3A:4A:5C:82:A8:B5:0B:B6:AA:46:A7:9B:1A:AD:D3:E7:41:C7:AF
            X509v3 Authority Key Identifier:
                keyid:10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3231342e302f32342d3234203d3e20313339393934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.213.214.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:53:f5:b1:97:d1:7e:30:e2:bb:5b:0f:94:5f:dc:a6:0c:51:
         24:8e:f9:cf:93:49:ec:c0:40:3d:60:19:30:a8:fe:71:49:ba:
         0b:8e:d6:b4:d4:56:36:43:b0:e1:39:1e:f5:ea:1c:29:4a:2d:
         d8:a6:f4:bb:cf:e5:7e:dc:22:3d:ff:08:13:b5:41:6e:f3:de:
         f7:ed:8c:e5:52:49:b1:e1:bf:a9:14:21:2a:a7:14:b8:4d:75:
         0c:f9:9f:6d:18:b0:46:00:64:30:04:eb:58:93:50:f9:5c:a0:
         5d:0c:1a:d1:d6:ec:22:7c:bc:d8:50:b2:c1:e1:3c:cf:19:15:
         ac:3c:67:19:b4:11:ec:9f:3f:3b:8f:3c:fb:19:79:3e:47:df:
         4d:2d:70:a5:f5:1e:ec:a6:08:45:52:9a:bf:b7:a8:9e:2d:c6:
         07:bb:12:57:66:c1:71:c0:22:c0:6f:ff:9f:f1:45:d6:e6:c3:
         70:1e:43:1e:58:4e:af:a8:52:f6:0d:49:a8:f2:fc:45:ba:8d:
         d8:a4:bc:43:b8:75:68:43:40:85:50:20:11:a5:c0:d0:63:c1:
         7a:5e:a0:39:63:6b:75:b6:4b:b4:ab:b4:36:c2:0a:38:b3:2f:
         0e:ce:8c:12:5d:9f:0d:83:c3:73:04:ca:a8:48:2d:ed:95:b5:
         e6:66:64:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:40 2024 by rpki-client on console-ams.rpki-client.org