Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3233312e302f32342d3234203d3e203234323033.roa
File:                     3134302e3231332e3233312e302f32342d3234203d3e203234323033.roa (raw, json)
Hash identifier:          Q1mVnbPcmybsuOO13BQQk0wHsLMGSgHJIt6RADRlwUM=
Subject key identifier:   54:8E:E6:7E:D8:F7:FF:06:21:B0:E2:D9:2E:8E:BE:F0:AA:C5:E8:3B
Certificate issuer:       /CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B
Certificate serial:       621B649C33F67F0D27892027A71AE61ECE80AFC6
Authority key identifier: 10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3233312e302f32342d3234203d3e203234323033.roa
Signing time:             Sat 08 Jan 2022 17:38:03 +0000
ROA not before:           Sat 08 Jan 2022 17:33:03 +0000
ROA not after:            Sun 08 Jan 2023 17:38:03 +0000
asID:                     24203
IP address blocks:        140.213.231.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:1b:64:9c:33:f6:7f:0d:27:89:20:27:a7:1a:e6:1e:ce:80:af:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B
        Validity
            Not Before: Jan  8 17:33:03 2022 GMT
            Not After : Jan  8 17:38:03 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1b:94:00:f0:14:2e:41:2c:b7:c5:3e:15:f6:
                    c8:7c:b2:28:0c:c7:73:12:06:fb:03:ac:00:58:24:
                    83:fe:22:7b:cb:5e:82:df:a3:54:4a:79:1e:ed:f9:
                    65:22:bc:8a:4a:5c:a8:e3:e9:00:28:71:32:73:6e:
                    dc:61:06:11:e6:e1:64:ba:8d:4c:a8:4f:60:17:34:
                    3d:6a:95:3e:8c:98:3e:54:0a:2b:08:20:a9:45:22:
                    fd:35:ef:18:e7:20:7a:27:a4:ac:f7:cb:5a:41:68:
                    3c:41:0d:4d:d2:46:bd:88:00:cc:2b:f0:84:5e:3a:
                    b1:7b:3d:8c:1e:b0:1b:dc:25:bf:73:ce:5d:fa:5c:
                    f7:5d:62:90:38:24:6b:ff:c4:22:65:51:e8:1d:b4:
                    99:8d:28:2a:51:cb:02:24:fe:a5:1f:74:b2:be:0d:
                    be:84:93:88:3e:de:0f:f3:51:90:71:da:a5:e9:09:
                    2f:a0:97:e1:b0:a3:95:bc:b4:b2:53:bd:d3:f5:35:
                    ee:c6:41:54:45:f0:19:32:c9:61:81:ca:2f:84:79:
                    bc:79:c6:cf:2a:c8:e2:24:49:a3:3f:71:86:44:a1:
                    cc:df:18:5b:f5:db:75:e1:a2:a1:52:24:b8:f5:5e:
                    19:23:af:97:bd:2b:88:9a:62:99:44:6b:36:17:f4:
                    10:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:8E:E6:7E:D8:F7:FF:06:21:B0:E2:D9:2E:8E:BE:F0:AA:C5:E8:3B
            X509v3 Authority Key Identifier:
                keyid:10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3233312e302f32342d3234203d3e203234323033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.213.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b9:67:65:20:06:fa:95:4b:a3:1d:db:8a:1b:0a:31:a8:72:58:
         87:b7:36:60:05:51:1a:df:9e:20:9b:ad:b7:5a:52:d9:49:50:
         ae:0b:44:df:44:54:df:21:8f:23:40:24:b0:d6:59:65:ab:de:
         71:2b:e6:70:b6:de:70:3a:89:f4:39:7b:2d:34:f7:cb:46:94:
         b3:9e:10:c1:64:49:0f:10:54:10:2e:65:14:a1:eb:5b:5d:7b:
         97:f2:b6:b1:18:8f:1a:17:eb:89:dc:0d:0b:ae:82:c7:14:b8:
         24:c5:65:31:e4:f1:eb:bc:4d:8a:41:ec:ce:19:36:8f:a8:40:
         ea:92:67:6f:0b:8b:c7:b1:47:f8:08:39:b0:9f:db:2b:cf:e7:
         f6:db:3c:cb:f1:a5:b8:30:1e:cd:73:6c:be:fd:d3:ad:41:46:
         56:f7:98:fb:59:e4:8f:64:69:23:50:60:c8:80:9e:b2:82:3b:
         e9:cc:c8:4b:47:0a:f2:31:fc:83:f0:fb:c3:f0:00:7d:a2:b1:
         26:c9:dd:2a:44:c2:81:20:85:ac:41:a2:70:0e:4f:fa:1c:a5:
         b5:4c:42:98:ec:77:81:b4:55:b6:85:1e:88:93:83:67:d5:a1:
         6f:37:1d:f3:b3:a8:0f:f4:b9:03:7c:b8:7a:46:3e:cd:39:55:
         23:ad:4e:7c
-----BEGIN CERTIFICATE-----
MIIHJjCCBg6gAwIBAgIUYhtknDP2fw0niSAnpxrmHs6Ar8YwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTBCQUI3OTA3RDk1M0EwRDVGREVCNUMyMEM5RjI5QkNG
QzY2MEExQjAeFw0yMjAxMDgxNzMzMDNaFw0yMzAxMDgxNzM4MDNaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzAxQjk0MDBGMDE0MkU0MTJD
QjdDNTNFMTVGNkM4N0NCMjI4MENDNzczMTIwNkZCMDNBQzAwNTgyNDgzRkUyMjdC
Q0I1RTgyREZBMzU0NEE3OTFFRURGOTY1MjJCQzhBNEE1Q0E4RTNFOTAwMjg3MTMy
NzM2RURDNjEwNjExRTZFMTY0QkE4RDRDQTg0RjYwMTczNDNENkE5NTNFOEM5ODNF
NTQwQTJCMDgyMEE5NDUyMkZEMzVFRjE4RTcyMDdBMjdBNEFDRjdDQjVBNDE2ODND
NDEwRDRERDI0NkJEODgwMENDMkJGMDg0NUUzQUIxN0IzRDhDMUVCMDFCREMyNUJG
NzNDRTVERkE1Q0Y3NUQ2MjkwMzgyNDZCRkZDNDIyNjU1MUU4MURCNDk5OEQyODJB
NTFDQjAyMjRGRUE1MUY3NEIyQkUwREJFODQ5Mzg4M0VERTBGRjM1MTkwNzFEQUE1
RTkwOTJGQTA5N0UxQjBBMzk1QkNCNEIyNTNCREQzRjUzNUVFQzY0MTU0NDVGMDE5
MzJDOTYxODFDQTJGODQ3OUJDNzlDNkNGMkFDOEUyMjQ0OUEzM0Y3MTg2NDRBMUND
REYxODVCRjVEQjc1RTFBMkExNTIyNEI4RjU1RTE5MjNBRjk3QkQyQjg4OUE2Mjk5
NDQ2QjM2MTdGNDEwMDEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAwBuUAPAULkEst8U+FfbIfLIoDMdzEgb7A6wAWCSD/iJ7y16C36NU
Snke7fllIryKSlyo4+kAKHEyc27cYQYR5uFkuo1MqE9gFzQ9apU+jJg+VAorCCCp
RSL9Ne8Y5yB6J6Ss98taQWg8QQ1N0ka9iADMK/CEXjqxez2MHrAb3CW/c85d+lz3
XWKQOCRr/8QiZVHoHbSZjSgqUcsCJP6lH3Syvg2+hJOIPt4P81GQcdql6QkvoJfh
sKOVvLSyU73T9TXuxkFURfAZMslhgcovhHm8ecbPKsjiJEmjP3GGRKHM3xhb9dt1
4aKhUiS49V4ZI6+XvSuImmKZRGs2F/QQAQIDAQABo4ICNDCCAjAwHQYDVR0OBBYE
FFSO5n7Y9/8GIbDi2S6OvvCqxeg7MB8GA1UdIwQYMBaAFBC6t5B9lToNX961wgyf
Kbz8ZgobMA4GA1UdDwEB/wQEAwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGJkYjFlMGEtYTRlYy00OWRiLWJl
ODktOGQ3ZTdmYzJjMjI3LzEvMTBCQUI3OTA3RDk1M0EwRDVGREVCNUMyMEM5RjI5
QkNGQzY2MEExQi5jcmwwdAYIKwYBBQUHAQEEaDBmMGQGCCsGAQUFBzAChlhyc3lu
YzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8xLzEwQkFCNzkw
N0Q5NTNBMEQ1RkRFQjVDMjBDOUYyOUJDRkM2NjBBMUIuY2VyMIGkBggrBgEFBQcB
CwSBlzCBlDCBkQYIKwYBBQUHMAuGgYRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby80YmRiMWUwYS1hNGVjLTQ5ZGItYmU4OS04ZDdlN2ZjMmMyMjcvMS8z
MTM0MzAyZTMyMzEzMzJlMzIzMzMxMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIz
NDMyMzAzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEAIzV5zANBgkqhkiG9w0BAQsFAAOCAQEAuWdlIAb6
lUujHduKGwoxqHJYh7c2YAVRGt+eIJutt1pS2UlQrgtE30RU3yGPI0AksNZZZave
cSvmcLbecDqJ9Dl7LTT3y0aUs54QwWRJDxBUEC5lFKHrW117l/K2sRiPGhfridwN
C66CxxS4JMVlMeTx67xNikHszhk2j6hA6pJnbwuLx7FH+Ag5sJ/bK8/n9ts8y/Gl
uDAezXNsvv3TrUFGVveY+1nkj2RpI1BgyICesoI76czIS0cK8jH8g/D7w/AAfaKx
JsndKkTCgSCFrEGicA5P+hyltUxCmOx3gbRVtoUeiJODZ9Whbzcd87OoD/S5A3y4
ekY+zTlVI61OfA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:40 2024 by rpki-client on console-ams.rpki-client.org