Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3232342e302f32342d3234203d3e203234323033.roa
File:                     3134302e3231332e3232342e302f32342d3234203d3e203234323033.roa (raw, json)
Hash identifier:          DyDnkKvFmOugsfXkMXnDbO3CCrqO+jt5hGonrp1uVN0=
Subject key identifier:   DA:59:2E:17:4C:F9:0D:24:5F:FE:74:3D:2B:B6:C1:27:B3:F9:6C:DB
Certificate issuer:       /CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B
Certificate serial:       66C544C4E24A80E63C8E1C088798FA097BD4B915
Authority key identifier: 10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3232342e302f32342d3234203d3e203234323033.roa
Signing time:             Fri 02 Jul 2021 06:36:34 +0000
ROA not before:           Fri 02 Jul 2021 06:31:34 +0000
ROA not after:            Sat 02 Jul 2022 06:36:34 +0000
asID:                     24203
IP address blocks:        140.213.224.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:c5:44:c4:e2:4a:80:e6:3c:8e:1c:08:87:98:fa:09:7b:d4:b9:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B
        Validity
            Not Before: Jul  2 06:31:34 2021 GMT
            Not After : Jul  2 06:36:34 2022 GMT
        Subject: CN=3082010A0282010100AF83EDFBDA88C66B48E34DBAE63893B2377B6D471A9627B258270B50CD06329E06D4FFFF6EDFD675EA7539D925A2D925E635A36EE669B8EAC70DC38C8C9139185F21064F76AA23E0923508346A2B497FC63E84BFC772890500E2874F3DA39896DB3BBE81C72742149890F6311F7F9D5E4171AFE51333EC5A4A93D83F98635DB9F5A3604C56220AB05F2BB39E6013BBE989B7F4D912F6C3B5F2306C5DE09178D096441993F9FB78E5CF7EE5B5189822697FE1A21AC65D6949A95322D838405ECFC45E904217A49301D303CE33C39347AA9CEC330435E4041D75492427F41B1F5F66E86A938C3EBA80DC27966506E95C428A0534E71CCF2DDE636A2EF6A0F738430203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:83:ed:fb:da:88:c6:6b:48:e3:4d:ba:e6:38:
                    93:b2:37:7b:6d:47:1a:96:27:b2:58:27:0b:50:cd:
                    06:32:9e:06:d4:ff:ff:6e:df:d6:75:ea:75:39:d9:
                    25:a2:d9:25:e6:35:a3:6e:e6:69:b8:ea:c7:0d:c3:
                    8c:8c:91:39:18:5f:21:06:4f:76:aa:23:e0:92:35:
                    08:34:6a:2b:49:7f:c6:3e:84:bf:c7:72:89:05:00:
                    e2:87:4f:3d:a3:98:96:db:3b:be:81:c7:27:42:14:
                    98:90:f6:31:1f:7f:9d:5e:41:71:af:e5:13:33:ec:
                    5a:4a:93:d8:3f:98:63:5d:b9:f5:a3:60:4c:56:22:
                    0a:b0:5f:2b:b3:9e:60:13:bb:e9:89:b7:f4:d9:12:
                    f6:c3:b5:f2:30:6c:5d:e0:91:78:d0:96:44:19:93:
                    f9:fb:78:e5:cf:7e:e5:b5:18:98:22:69:7f:e1:a2:
                    1a:c6:5d:69:49:a9:53:22:d8:38:40:5e:cf:c4:5e:
                    90:42:17:a4:93:01:d3:03:ce:33:c3:93:47:aa:9c:
                    ec:33:04:35:e4:04:1d:75:49:24:27:f4:1b:1f:5f:
                    66:e8:6a:93:8c:3e:ba:80:dc:27:96:65:06:e9:5c:
                    42:8a:05:34:e7:1c:cf:2d:de:63:6a:2e:f6:a0:f7:
                    38:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:59:2E:17:4C:F9:0D:24:5F:FE:74:3D:2B:B6:C1:27:B3:F9:6C:DB
            X509v3 Authority Key Identifier:
                keyid:10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3232342e302f32342d3234203d3e203234323033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.213.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         69:78:33:9e:04:dd:17:2a:c7:9e:a1:be:98:42:d5:d0:94:ba:
         2a:df:a4:66:24:01:41:e8:e7:e7:d7:cd:aa:00:78:43:69:b4:
         58:4a:3c:f3:80:9b:af:f3:23:cf:26:50:7c:f3:32:ce:6a:59:
         3e:82:5a:b8:0d:ea:84:b1:58:4c:65:f6:44:7c:34:4f:9c:d9:
         67:1a:a0:0c:3e:c9:15:50:da:2d:65:c1:eb:f9:cb:8a:0f:ef:
         f9:80:26:2a:58:4c:b3:13:42:ab:5a:74:ea:68:57:77:96:3e:
         8f:43:ed:3c:0b:23:22:db:04:90:0b:a3:9d:0d:85:e2:be:95:
         8b:b8:c4:73:66:ce:a9:2b:7a:6d:54:c9:95:4c:72:8a:15:65:
         9d:a0:05:5d:b1:1d:f0:c0:7f:44:af:13:ff:19:58:43:13:d5:
         fe:18:42:11:cb:b2:76:54:e4:82:87:25:69:82:0c:f5:e3:19:
         91:ea:a3:81:e7:c8:3d:c2:4c:4b:ae:94:5a:42:14:90:e5:11:
         a1:f8:91:e2:94:f9:3e:eb:80:6b:0c:50:ac:e0:44:04:6e:41:
         af:55:0c:e7:17:c4:bf:6b:b6:f6:4b:6c:a6:79:a8:b1:52:ea:
         21:f8:ea:ea:c2:c4:ee:ea:62:37:fa:03:6e:73:31:79:9e:86:
         ac:0a:d9:a4
-----BEGIN CERTIFICATE-----
MIIHJjCCBg6gAwIBAgIUZsVExOJKgOY8jhwIh5j6CXvUuRUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTBCQUI3OTA3RDk1M0EwRDVGREVCNUMyMEM5RjI5QkNG
QzY2MEExQjAeFw0yMTA3MDIwNjMxMzRaFw0yMjA3MDIwNjM2MzRaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQUY4M0VERkJEQTg4QzY2QjQ4
RTM0REJBRTYzODkzQjIzNzdCNkQ0NzFBOTYyN0IyNTgyNzBCNTBDRDA2MzI5RTA2
RDRGRkZGNkVERkQ2NzVFQTc1MzlEOTI1QTJEOTI1RTYzNUEzNkVFNjY5QjhFQUM3
MERDMzhDOEM5MTM5MTg1RjIxMDY0Rjc2QUEyM0UwOTIzNTA4MzQ2QTJCNDk3RkM2
M0U4NEJGQzc3Mjg5MDUwMEUyODc0RjNEQTM5ODk2REIzQkJFODFDNzI3NDIxNDk4
OTBGNjMxMUY3RjlENUU0MTcxQUZFNTEzMzNFQzVBNEE5M0Q4M0Y5ODYzNURCOUY1
QTM2MDRDNTYyMjBBQjA1RjJCQjM5RTYwMTNCQkU5ODlCN0Y0RDkxMkY2QzNCNUYy
MzA2QzVERTA5MTc4RDA5NjQ0MTk5M0Y5RkI3OEU1Q0Y3RUU1QjUxODk4MjI2OTdG
RTFBMjFBQzY1RDY5NDlBOTUzMjJEODM4NDA1RUNGQzQ1RTkwNDIxN0E0OTMwMUQz
MDNDRTMzQzM5MzQ3QUE5Q0VDMzMwNDM1RTQwNDFENzU0OTI0MjdGNDFCMUY1RjY2
RTg2QTkzOEMzRUJBODBEQzI3OTY2NTA2RTk1QzQyOEEwNTM0RTcxQ0NGMkRERTYz
NkEyRUY2QTBGNzM4NDMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAr4Pt+9qIxmtI40265jiTsjd7bUcalieyWCcLUM0GMp4G1P//bt/W
dep1Odklotkl5jWjbuZpuOrHDcOMjJE5GF8hBk92qiPgkjUINGorSX/GPoS/x3KJ
BQDih089o5iW2zu+gccnQhSYkPYxH3+dXkFxr+UTM+xaSpPYP5hjXbn1o2BMViIK
sF8rs55gE7vpibf02RL2w7XyMGxd4JF40JZEGZP5+3jlz37ltRiYIml/4aIaxl1p
SalTItg4QF7PxF6QQhekkwHTA84zw5NHqpzsMwQ15AQddUkkJ/QbH19m6GqTjD66
gNwnlmUG6VxCigU05xzPLd5jai72oPc4QwIDAQABo4ICNDCCAjAwHQYDVR0OBBYE
FNpZLhdM+Q0kX/50PSu2wSez+WzbMB8GA1UdIwQYMBaAFBC6t5B9lToNX961wgyf
Kbz8ZgobMA4GA1UdDwEB/wQEAwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGJkYjFlMGEtYTRlYy00OWRiLWJl
ODktOGQ3ZTdmYzJjMjI3LzEvMTBCQUI3OTA3RDk1M0EwRDVGREVCNUMyMEM5RjI5
QkNGQzY2MEExQi5jcmwwdAYIKwYBBQUHAQEEaDBmMGQGCCsGAQUFBzAChlhyc3lu
YzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8xLzEwQkFCNzkw
N0Q5NTNBMEQ1RkRFQjVDMjBDOUYyOUJDRkM2NjBBMUIuY2VyMIGkBggrBgEFBQcB
CwSBlzCBlDCBkQYIKwYBBQUHMAuGgYRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby80YmRiMWUwYS1hNGVjLTQ5ZGItYmU4OS04ZDdlN2ZjMmMyMjcvMS8z
MTM0MzAyZTMyMzEzMzJlMzIzMjM0MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIz
NDMyMzAzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEAIzV4DANBgkqhkiG9w0BAQsFAAOCAQEAaXgzngTd
FyrHnqG+mELV0JS6Kt+kZiQBQejn59fNqgB4Q2m0WEo884Cbr/MjzyZQfPMyzmpZ
PoJauA3qhLFYTGX2RHw0T5zZZxqgDD7JFVDaLWXB6/nLig/v+YAmKlhMsxNCq1p0
6mhXd5Y+j0PtPAsjItsEkAujnQ2F4r6Vi7jEc2bOqSt6bVTJlUxyihVlnaAFXbEd
8MB/RK8T/xlYQxPV/hhCEcuydlTkgoclaYIM9eMZkeqjgefIPcJMS66UWkIUkOUR
ofiR4pT5PuuAawxQrOBEBG5Br1UM5xfEv2u29ktspnmosVLqIfjq6sLE7upiN/oD
bnMxeZ6GrArZpA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:40 2024 by rpki-client on console-ams.rpki-client.org