Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3232382e302f32342d3234203d3e203234323033.roa
File:                     3134302e3231332e3232382e302f32342d3234203d3e203234323033.roa (raw, json)
Hash identifier:          H4GapYC4i7IIzNY9Y8jVlKUm3bM89GV5yxqhRxKzxMQ=
Subject key identifier:   E0:4A:B7:81:BB:CE:CD:2E:A5:43:5A:03:5E:6E:FD:C7:94:75:EE:CA
Certificate issuer:       /CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B
Certificate serial:       57CBDDB980CD7F36742B0D1F0C4CD3581BBA8769
Authority key identifier: 10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3232382e302f32342d3234203d3e203234323033.roa
Signing time:             Sat 08 Jan 2022 17:36:59 +0000
ROA not before:           Sat 08 Jan 2022 17:31:59 +0000
ROA not after:            Sun 08 Jan 2023 17:36:59 +0000
asID:                     24203
IP address blocks:        140.213.228.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:cb:dd:b9:80:cd:7f:36:74:2b:0d:1f:0c:4c:d3:58:1b:ba:87:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B
        Validity
            Not Before: Jan  8 17:31:59 2022 GMT
            Not After : Jan  8 17:36:59 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:e0:fd:f6:66:b8:78:03:a6:e3:4b:27:e5:1d:
                    8b:14:26:74:82:5f:75:1b:53:8a:da:ea:b7:6a:f5:
                    8f:6b:47:56:19:45:fe:5b:9e:73:07:ed:46:e8:c5:
                    3b:8b:62:36:78:11:0f:1c:d7:5a:82:a8:60:ef:c6:
                    b0:13:29:73:24:0a:8e:1a:15:d8:37:80:b1:2e:99:
                    f8:18:22:37:93:56:fc:72:6f:58:81:f9:a9:53:ae:
                    5a:16:59:c0:b0:50:1d:2a:dc:cd:cd:1e:4c:b8:1d:
                    69:11:e3:0f:47:64:fe:c6:2e:5e:36:2e:7c:3d:21:
                    1c:28:c0:66:ed:dd:33:86:14:95:26:4e:c3:b2:aa:
                    5e:41:73:85:7b:ff:ec:ae:e5:a4:3c:96:9a:3a:26:
                    22:a0:d8:59:24:a8:62:d7:a2:61:0d:4c:a7:43:b6:
                    cc:2c:67:d2:27:28:34:04:d3:3b:8a:0a:b6:63:55:
                    a8:9d:92:c3:1a:41:0a:94:0e:9b:49:58:f1:b1:2f:
                    d6:6d:67:40:bd:4d:31:1a:e5:a9:f4:5c:7a:4f:88:
                    b5:6f:a0:00:8f:7f:21:5f:ef:41:3e:01:8f:7a:fd:
                    8a:5c:76:13:f2:ef:41:a5:0d:db:8f:26:81:a9:8c:
                    2d:94:7e:ab:a0:9d:2d:41:b7:6a:42:03:98:f1:04:
                    60:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:4A:B7:81:BB:CE:CD:2E:A5:43:5A:03:5E:6E:FD:C7:94:75:EE:CA
            X509v3 Authority Key Identifier:
                keyid:10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3232382e302f32342d3234203d3e203234323033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.213.228.0/24

    Signature Algorithm: sha256WithRSAEncryption
         93:2f:f6:1c:27:97:bc:a8:e1:5e:9a:05:31:b0:71:13:cf:50:
         02:5b:90:23:fb:77:78:88:f4:1e:ab:ef:92:71:0b:fb:9f:22:
         cc:64:32:7f:ea:90:4f:c8:8c:0f:f0:d3:c8:6d:c7:c6:d8:55:
         de:74:5b:97:87:f4:9b:be:95:89:aa:ce:99:47:a5:49:5a:3f:
         6e:f6:9a:70:df:7a:10:e0:46:47:85:68:6e:21:77:3e:63:88:
         09:57:ca:47:c3:96:ff:37:1d:e2:4d:04:f5:33:6e:be:b2:b5:
         e7:80:b8:23:fc:35:0e:07:ec:36:13:24:f5:ff:3f:5b:03:0a:
         5d:d3:f3:24:1e:b4:0b:94:74:db:26:20:ad:a3:bf:69:ff:34:
         3b:5f:85:3b:68:06:1d:9e:29:08:fd:a5:61:b8:54:e4:50:f0:
         6b:5f:90:f7:55:7a:69:5a:39:78:0a:9f:10:9a:68:95:76:04:
         69:71:ec:0b:84:06:0c:64:c5:83:bf:33:15:2d:0a:26:61:c7:
         71:d5:49:e8:da:6a:13:5c:97:ba:28:24:e7:f0:2f:38:ee:98:
         bf:77:ee:5d:b4:a0:d7:5c:77:66:8b:4a:4e:a8:5d:8d:5c:0d:
         28:52:fd:f3:05:99:87:ee:b7:3c:f0:4b:4d:3b:4c:f0:c9:d7:
         1e:5b:7e:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:40 2024 by rpki-client on console-ams.rpki-client.org