Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3232392e302f32342d3234203d3e203234323033.roa
File:                     3134302e3231332e3232392e302f32342d3234203d3e203234323033.roa (raw, json)
Hash identifier:          /jJRyEUMGjWhgZ9DcPAgu2t5watG/UnSKayZ8rlUVew=
Subject key identifier:   9D:22:36:C1:82:6C:80:C4:DD:97:44:0C:EE:7E:FD:A1:A9:9E:12:B9
Certificate issuer:       /CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B
Certificate serial:       2BD5ABEED2FFF1046B2EEBD9A06F1B375990CF1C
Authority key identifier: 10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3232392e302f32342d3234203d3e203234323033.roa
Signing time:             Sat 08 Jan 2022 17:37:20 +0000
ROA not before:           Sat 08 Jan 2022 17:32:20 +0000
ROA not after:            Sun 08 Jan 2023 17:37:20 +0000
asID:                     24203
IP address blocks:        140.213.229.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:d5:ab:ee:d2:ff:f1:04:6b:2e:eb:d9:a0:6f:1b:37:59:90:cf:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B
        Validity
            Not Before: Jan  8 17:32:20 2022 GMT
            Not After : Jan  8 17:37:20 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:5a:54:15:97:a8:80:ea:59:76:b5:ca:20:bc:
                    80:be:17:79:24:e9:ea:d6:5d:27:9e:46:5b:48:a2:
                    d1:65:8e:f8:1a:25:00:26:fd:1b:e0:13:b3:88:a9:
                    a7:1c:e4:63:2d:87:82:aa:d2:38:c5:71:b9:e0:b7:
                    cb:c4:c5:c9:e8:33:2e:5b:49:3a:f2:03:c5:57:3a:
                    cb:bf:31:78:a8:60:db:cb:2b:3c:0d:be:dc:c2:60:
                    08:dd:97:89:6d:31:87:6e:18:d6:f9:80:9e:77:4b:
                    74:7c:72:71:42:bf:e6:de:97:26:f4:ae:fa:ee:80:
                    c7:77:3c:d0:48:1b:4d:17:73:55:cc:d4:96:1b:46:
                    a5:bc:b6:db:a9:ee:ac:96:47:be:3b:a1:58:fd:93:
                    d4:a0:f7:42:64:88:85:60:58:fb:84:38:87:68:bd:
                    ed:9a:6a:66:bc:52:fa:43:e4:e5:f2:79:34:ed:37:
                    60:4f:13:58:9c:6d:f1:17:19:ff:b6:a8:34:61:43:
                    ff:c0:bc:0d:1e:91:80:cf:16:3e:76:69:1f:5c:a7:
                    0b:85:2d:2a:06:11:ff:a3:16:a7:0d:89:bc:3f:2f:
                    fe:7e:48:24:64:77:40:98:0f:04:09:71:19:da:98:
                    1f:99:b0:ba:f3:06:5e:32:77:69:f7:c5:d7:f4:18:
                    31:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:22:36:C1:82:6C:80:C4:DD:97:44:0C:EE:7E:FD:A1:A9:9E:12:B9
            X509v3 Authority Key Identifier:
                keyid:10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3232392e302f32342d3234203d3e203234323033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.213.229.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bc:b3:2a:97:4a:dc:18:5f:fd:c0:ba:4e:54:8f:dc:ec:96:4f:
         87:c1:6a:5a:75:3d:42:3a:38:6e:1f:6a:48:9d:f1:75:70:7c:
         7c:ef:fe:3e:9e:0e:4d:eb:5e:31:d2:84:9c:5f:ac:a7:13:5f:
         27:88:04:95:26:90:b7:93:c9:6e:e5:ce:30:9d:56:66:6d:3e:
         aa:f9:7f:2d:80:4e:28:e2:a6:1b:70:6e:15:21:4f:f2:21:d3:
         68:ee:3e:b7:46:b2:0b:bb:b8:f8:e1:b5:e2:f7:e3:db:7e:ab:
         c2:02:15:70:ef:06:9e:a7:1f:5b:78:a9:5e:de:cc:7d:30:ef:
         8a:41:31:7e:9b:82:03:22:c0:8b:f8:30:c8:d9:0e:bc:b3:54:
         f0:a6:40:6b:b1:86:ce:a2:c0:c0:7a:16:fa:96:57:64:88:58:
         62:41:93:94:cb:cc:b6:8c:5b:85:fc:7d:1f:e0:7f:22:ad:d8:
         ff:cc:42:a0:fb:d5:39:9d:de:2e:b1:70:d1:ed:f9:4d:6d:1d:
         15:d4:1a:d8:80:ff:d4:9a:d0:e8:6e:9a:a8:a1:e6:23:23:b1:
         fd:e6:fd:48:53:5b:ac:d3:2e:9b:f3:5b:d3:f9:ac:6e:53:1d:
         84:e2:79:51:16:fe:b7:a9:8b:b4:d9:a3:b4:53:03:65:80:29:
         4b:45:e3:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:40 2024 by rpki-client on console-ams.rpki-client.org