Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3231372e302f32342d3234203d3e20313339393934.roa
File:                     3134302e3231332e3231372e302f32342d3234203d3e20313339393934.roa (raw, json)
Hash identifier:          kAnTOWak3jb4U4huj5Rd4h5hcROzU+DgXPRUtfNcVz8=
Subject key identifier:   55:78:EB:23:54:3B:29:E4:95:AA:23:2E:67:F8:61:AC:B5:D2:CC:0D
Certificate issuer:       /CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B
Certificate serial:       52EE9050BDFA3575652952F634C3304DD2DC70D1
Authority key identifier: 10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3231372e302f32342d3234203d3e20313339393934.roa
Signing time:             Sat 08 Jan 2022 17:35:39 +0000
ROA not before:           Sat 08 Jan 2022 17:30:39 +0000
ROA not after:            Sun 08 Jan 2023 17:35:39 +0000
asID:                     139994
IP address blocks:        140.213.217.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:ee:90:50:bd:fa:35:75:65:29:52:f6:34:c3:30:4d:d2:dc:70:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B
        Validity
            Not Before: Jan  8 17:30:39 2022 GMT
            Not After : Jan  8 17:35:39 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:9e:04:fd:d3:b7:fb:98:1e:b4:03:df:c5:14:
                    47:78:3c:62:80:bf:f9:c0:c0:a5:48:90:af:f5:f0:
                    63:f3:58:a0:36:e7:54:f8:27:c1:ca:76:44:3a:f0:
                    20:92:66:c7:ca:b9:42:34:7e:b9:d1:ba:89:83:ae:
                    01:31:2d:7b:ce:ef:6e:0e:92:ef:08:8c:4f:22:ec:
                    32:0d:f5:60:ac:2f:e2:6d:8c:8c:c3:04:92:fe:7a:
                    8b:c2:fb:b4:df:43:1b:18:fa:4f:9f:69:3b:1b:64:
                    25:fd:e2:0b:db:0e:ce:59:bc:a0:8a:34:94:98:01:
                    80:61:9e:89:b8:cc:4b:3a:7f:cf:4c:16:9e:2d:f6:
                    3f:2c:da:76:98:5a:e8:a3:f0:8e:85:6c:cf:a8:47:
                    9e:9a:37:0f:99:ff:72:46:c0:74:d6:25:44:8c:c2:
                    7e:02:6f:e2:18:20:0c:5e:44:c3:c7:98:db:af:8c:
                    b4:14:9c:18:9d:86:e9:8b:da:dc:25:0f:56:8c:f9:
                    a8:eb:51:5b:19:10:7b:d0:4c:12:5f:36:8a:f0:94:
                    dd:cb:a7:c7:5c:0a:e3:8b:bf:c9:37:b7:04:d8:d7:
                    36:0b:79:8a:61:e0:09:17:61:32:5b:bc:d0:29:24:
                    5f:8f:54:ea:ff:e9:c3:ad:78:e1:48:6d:fd:59:23:
                    b5:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:78:EB:23:54:3B:29:E4:95:AA:23:2E:67:F8:61:AC:B5:D2:CC:0D
            X509v3 Authority Key Identifier:
                keyid:10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3231372e302f32342d3234203d3e20313339393934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.213.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         32:d2:b8:42:ab:1a:e6:f4:df:fc:c5:45:94:b2:5e:f0:3c:73:
         89:9d:38:fb:44:b2:65:de:be:0a:c5:c4:34:cd:38:dc:3f:a1:
         82:77:80:3e:2c:ae:e3:df:0e:d2:34:c1:69:a1:0a:28:51:69:
         40:ae:56:4e:dc:e5:e5:7d:4f:7d:4b:79:55:ec:5e:97:f6:ae:
         e7:18:8b:21:13:b1:bc:19:12:49:c0:05:3c:ce:22:23:d5:3f:
         f6:63:71:89:b7:e0:63:2e:7a:f6:f8:99:1c:ea:a2:20:9d:cb:
         38:0a:ed:2f:42:c7:28:bb:1b:c8:8c:39:e6:87:7c:1f:06:f4:
         81:7f:ee:74:a5:57:1a:9d:02:ec:16:fd:e6:48:42:5e:ba:dc:
         96:04:82:bf:aa:11:5f:57:ca:3d:ce:12:b4:f0:4a:9f:20:88:
         35:65:7b:72:ff:e7:5f:4b:bf:e6:66:bb:c2:aa:35:eb:41:c8:
         1a:9b:52:02:94:1d:d7:6f:a6:eb:54:17:a7:2d:96:18:7f:73:
         43:60:52:22:1f:96:8a:df:29:73:c2:a2:cd:c2:7c:5a:65:ce:
         68:bc:90:eb:65:73:6b:2f:ad:63:fa:32:2e:d0:25:14:88:45:
         cf:e5:ab:ee:cc:99:55:e0:71:0e:5f:27:a8:e2:56:45:f6:f0:
         92:0d:66:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:40 2024 by rpki-client on console-ams.rpki-client.org