Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3233302e302f32342d3234203d3e203234323033.roa
File:                     3134302e3231332e3233302e302f32342d3234203d3e203234323033.roa (raw, json)
Hash identifier:          4CVBuKvmvzD21P37BOhIrWa2AYVYLIa7OhdGrDMgOFM=
Subject key identifier:   B7:44:D7:6A:79:F2:F5:79:C0:70:0D:0D:3C:ED:40:A7:2E:D0:76:FE
Certificate issuer:       /CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B
Certificate serial:       3D07F6BE2BC5BD2000D47F239AE303D92B468B30
Authority key identifier: 10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3233302e302f32342d3234203d3e203234323033.roa
Signing time:             Sat 08 Jan 2022 17:37:42 +0000
ROA not before:           Sat 08 Jan 2022 17:32:42 +0000
ROA not after:            Sun 08 Jan 2023 17:37:42 +0000
asID:                     24203
IP address blocks:        140.213.230.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:07:f6:be:2b:c5:bd:20:00:d4:7f:23:9a:e3:03:d9:2b:46:8b:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B
        Validity
            Not Before: Jan  8 17:32:42 2022 GMT
            Not After : Jan  8 17:37:42 2023 GMT
        Subject: CN=3082010A0282010100904E6B2DE1AB6A96D60327A3F885B0BCA0095BC6F52349B70FA08E42035E4EB5081347D8B809AE3CFC8D459A751FE563A36DA8F79DCFA596DFF612699D0F172C89178CE109407666B548062E0B35F547F8487F6E0F9C471BC626D2B9F1CDCCDB873B01B6C1F697839A4C53B9B04B62CFF821E52A23D235EE975D276B6062116F9181F59AF3396A0181EE6ECB6FF377F05B6F4245C19DB3FDAC0C81E377D70936FDDA938B0B89D18FA7604F4FE518C7F0C02B976B7CDA17E59375D6614B23D3B13E4252F0194BC7D5AA8EF68DDF0AFFCF0BF122E55D0120961C4869FB58F56B6C779243E7CFDB3042181846EB1057231199E8547F2D6F8E599DD7CA1EC76B8C8F0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:4e:6b:2d:e1:ab:6a:96:d6:03:27:a3:f8:85:
                    b0:bc:a0:09:5b:c6:f5:23:49:b7:0f:a0:8e:42:03:
                    5e:4e:b5:08:13:47:d8:b8:09:ae:3c:fc:8d:45:9a:
                    75:1f:e5:63:a3:6d:a8:f7:9d:cf:a5:96:df:f6:12:
                    69:9d:0f:17:2c:89:17:8c:e1:09:40:76:66:b5:48:
                    06:2e:0b:35:f5:47:f8:48:7f:6e:0f:9c:47:1b:c6:
                    26:d2:b9:f1:cd:cc:db:87:3b:01:b6:c1:f6:97:83:
                    9a:4c:53:b9:b0:4b:62:cf:f8:21:e5:2a:23:d2:35:
                    ee:97:5d:27:6b:60:62:11:6f:91:81:f5:9a:f3:39:
                    6a:01:81:ee:6e:cb:6f:f3:77:f0:5b:6f:42:45:c1:
                    9d:b3:fd:ac:0c:81:e3:77:d7:09:36:fd:da:93:8b:
                    0b:89:d1:8f:a7:60:4f:4f:e5:18:c7:f0:c0:2b:97:
                    6b:7c:da:17:e5:93:75:d6:61:4b:23:d3:b1:3e:42:
                    52:f0:19:4b:c7:d5:aa:8e:f6:8d:df:0a:ff:cf:0b:
                    f1:22:e5:5d:01:20:96:1c:48:69:fb:58:f5:6b:6c:
                    77:92:43:e7:cf:db:30:42:18:18:46:eb:10:57:23:
                    11:99:e8:54:7f:2d:6f:8e:59:9d:d7:ca:1e:c7:6b:
                    8c:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B7:44:D7:6A:79:F2:F5:79:C0:70:0D:0D:3C:ED:40:A7:2E:D0:76:FE
            X509v3 Authority Key Identifier:
                keyid:10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3233302e302f32342d3234203d3e203234323033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.213.230.0/24

    Signature Algorithm: sha256WithRSAEncryption
         56:f0:fe:92:c2:3d:6d:c2:13:9a:02:75:7a:3a:04:04:0c:88:
         c6:16:38:20:19:47:25:f9:70:3d:e8:b5:f6:ad:4f:4f:f8:70:
         ff:9f:68:24:bd:be:0a:bd:44:b5:48:6f:e7:18:4d:0a:6a:cd:
         27:6d:f7:04:09:52:a3:5d:6b:60:a8:e7:e2:ed:4a:98:77:59:
         1a:0f:fb:0d:5d:95:35:c1:16:08:a2:1f:26:35:aa:60:1f:88:
         9c:63:1c:e3:66:78:04:89:ea:50:2c:9c:b7:18:a0:23:44:8a:
         29:c3:9f:44:e1:f3:72:61:8c:89:7a:d7:ec:fe:06:a4:93:8e:
         4b:62:2f:0f:69:e5:3a:dd:29:f4:bf:56:40:b3:8f:60:a7:ec:
         13:18:7a:82:19:a0:05:dd:eb:64:da:01:d4:8e:f6:0f:56:ad:
         0f:7b:cf:f8:f4:e0:ae:f3:9a:aa:20:a6:6d:9c:9d:47:cf:bb:
         09:0a:d8:22:55:cf:f5:4f:6c:e9:68:fa:44:cc:c8:46:2e:c2:
         3a:2c:b6:4a:e7:42:5d:98:16:5f:85:9a:80:ee:3d:4d:e1:39:
         11:4e:af:16:0d:95:ee:c8:e2:93:3f:50:2f:13:40:48:4a:3d:
         67:39:8a:e0:76:e4:81:68:86:02:0c:64:5c:da:8e:60:db:c0:
         e0:ae:c8:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:06 2024 by rpki-client on console-fra.rpki-client.org