Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3231362e302f32342d3234203d3e20313339393934.roa
File:                     3134302e3231332e3231362e302f32342d3234203d3e20313339393934.roa (raw, json)
Hash identifier:          hr9ZrZv7JqSxbLoa8Caxm555N65hU9UrAhop/qAPrjI=
Subject key identifier:   FA:87:01:EE:A4:74:91:41:B9:EF:6A:65:E7:7A:B8:9B:40:48:4C:95
Certificate issuer:       /CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B
Certificate serial:       6A5826B50F7E28C9766B809D05F83D837ED65E26
Authority key identifier: 10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3231362e302f32342d3234203d3e20313339393934.roa
Signing time:             Sat 08 Jan 2022 17:35:29 +0000
ROA not before:           Sat 08 Jan 2022 17:30:29 +0000
ROA not after:            Sun 08 Jan 2023 17:35:29 +0000
asID:                     139994
IP address blocks:        140.213.216.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:58:26:b5:0f:7e:28:c9:76:6b:80:9d:05:f8:3d:83:7e:d6:5e:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B
        Validity
            Not Before: Jan  8 17:30:29 2022 GMT
            Not After : Jan  8 17:35:29 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:5a:61:fd:d5:62:f9:f7:e9:14:3c:de:10:36:
                    e6:2b:48:17:8a:2e:93:c2:ce:96:4e:3e:ba:c2:a8:
                    45:d8:d2:33:e0:25:93:7a:e1:61:f5:61:e0:34:01:
                    cf:e9:a6:f2:84:3e:c2:1a:ff:a0:b0:4d:60:c6:76:
                    e7:c3:87:af:6a:1b:60:02:d9:0e:37:b5:bb:ee:60:
                    7f:14:50:16:5a:45:18:02:a6:93:39:0c:e0:59:8d:
                    27:5e:3f:7e:31:00:51:ec:fb:34:5e:b0:54:02:cb:
                    b5:13:62:56:08:1e:1c:6e:6b:4f:c4:f8:dd:f8:54:
                    33:e0:a5:40:4a:f6:c8:ee:37:8d:d4:08:b6:3f:11:
                    e3:25:e0:94:3a:27:ce:6d:85:02:23:fc:89:8f:4d:
                    44:c0:05:e4:8f:39:84:86:e6:12:da:87:0d:a4:68:
                    f9:89:18:fa:e7:25:69:c5:ab:eb:58:e6:15:1a:f8:
                    fa:38:f1:fb:67:32:d8:d6:38:b8:9e:1e:28:0c:10:
                    55:b2:48:7e:8d:c6:10:f8:35:90:bb:0b:14:e4:ab:
                    c7:7b:02:9a:b9:a0:3a:e0:09:54:5a:3d:6b:3c:e1:
                    56:b2:7c:1e:98:60:2e:32:3d:47:c6:ac:d8:4b:6e:
                    f1:24:c9:c5:6c:64:03:3c:ae:24:6e:85:a3:b5:da:
                    7d:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:87:01:EE:A4:74:91:41:B9:EF:6A:65:E7:7A:B8:9B:40:48:4C:95
            X509v3 Authority Key Identifier:
                keyid:10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3231362e302f32342d3234203d3e20313339393934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.213.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c4:16:21:ed:ef:f6:13:4e:bb:5e:5c:4e:b8:97:ce:75:ab:5d:
         bf:fe:65:fe:0d:a7:1f:72:f9:e4:59:5c:eb:18:cc:93:4a:ee:
         2e:4a:40:c6:a8:6d:42:e1:ca:60:90:64:16:4e:3d:10:59:c6:
         dd:c8:0d:cf:18:fd:02:21:00:08:6f:52:07:b4:17:7e:ce:8c:
         63:08:52:1d:3c:c3:83:72:37:36:68:2f:bc:85:cd:46:83:20:
         0b:6c:7a:31:5c:d2:fb:71:54:d9:15:4b:60:20:d9:30:32:8b:
         fa:47:9f:48:0e:d2:08:e0:5f:09:76:08:a7:73:2f:0f:06:3d:
         dc:8f:15:90:6c:79:a6:0f:7a:27:38:01:8a:5a:ca:3c:c5:1e:
         ea:e3:8f:e1:2e:4b:4c:a7:90:db:26:33:82:cb:11:93:23:61:
         78:cb:7c:d7:68:39:59:54:89:9b:aa:37:ea:0d:58:ab:f9:fd:
         bc:ca:6f:d0:8a:e2:e0:5a:30:36:60:90:d2:50:52:18:4e:40:
         f6:14:aa:19:b5:15:a6:5c:fc:b8:c3:f4:3f:0d:3d:8e:1c:09:
         17:fe:ea:79:b3:71:dc:d3:f3:1c:86:ad:1c:28:ce:00:7e:0f:
         4b:fb:99:ce:56:35:36:36:af:9e:93:0d:cc:58:f0:30:be:20:
         bc:e2:2f:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:40 2024 by rpki-client on console-ams.rpki-client.org