Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3233322e302f32342d3234203d3e203234323033.roa
File:                     3134302e3231332e3233322e302f32342d3234203d3e203234323033.roa (raw, json)
Hash identifier:          5qK6AR6lnG88PjlRKQZ9fTKwglX+l7/YT6FOi+SSlos=
Subject key identifier:   B8:92:8B:DB:3F:A3:B1:74:5A:70:3D:8E:3F:FE:24:8F:4A:15:C7:CA
Certificate issuer:       /CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B
Certificate serial:       19C29A7697481CDEE7BCD7C28C0A76B05DE222E0
Authority key identifier: 10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3233322e302f32342d3234203d3e203234323033.roa
Signing time:             Sat 08 Jan 2022 17:38:26 +0000
ROA not before:           Sat 08 Jan 2022 17:33:26 +0000
ROA not after:            Sun 08 Jan 2023 17:38:26 +0000
asID:                     24203
IP address blocks:        140.213.232.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:c2:9a:76:97:48:1c:de:e7:bc:d7:c2:8c:0a:76:b0:5d:e2:22:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B
        Validity
            Not Before: Jan  8 17:33:26 2022 GMT
            Not After : Jan  8 17:38:26 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:a0:fa:c1:85:25:4a:8a:22:53:15:50:07:a7:
                    9e:74:fe:11:1a:e5:c9:d7:b0:1d:97:7b:0e:c1:d1:
                    ad:1f:cf:89:f7:b0:df:da:6b:f0:da:ce:0e:46:07:
                    6c:ea:11:09:6f:f8:f6:b4:85:e6:a6:75:e3:4f:f3:
                    ab:b8:7d:65:e8:c1:9a:03:3d:0f:6b:dc:a8:b5:1b:
                    ed:9b:6a:14:89:e7:89:a3:a9:d8:2e:91:29:76:1c:
                    1b:df:6d:00:53:7f:16:d7:33:1f:43:93:c6:9e:a9:
                    32:df:00:3c:f0:42:cd:83:b0:8e:a6:89:c2:27:dd:
                    46:9d:ee:d2:01:e3:f6:b9:50:c1:0e:84:1a:98:26:
                    39:c7:cb:d4:4b:02:df:14:5e:e3:28:40:2a:99:73:
                    1f:12:ae:ab:b8:21:76:e3:a0:e8:98:d1:1a:a1:e3:
                    27:df:24:23:89:9c:48:a0:2d:67:ac:ac:64:07:01:
                    6b:dc:fa:da:07:04:aa:64:d1:a5:2d:7a:c9:c6:66:
                    3a:35:f1:60:4a:7f:17:32:3a:a3:2d:c3:68:45:cf:
                    3d:32:f5:3f:df:2d:4f:6a:84:9c:e1:b3:a6:cf:50:
                    b1:8c:f2:f1:2c:87:ec:e1:ab:98:c1:d7:ba:df:7c:
                    25:b4:10:60:9a:e0:58:26:4a:97:62:58:50:f7:0f:
                    9b:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:92:8B:DB:3F:A3:B1:74:5A:70:3D:8E:3F:FE:24:8F:4A:15:C7:CA
            X509v3 Authority Key Identifier:
                keyid:10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3233322e302f32342d3234203d3e203234323033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.213.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c4:84:1f:18:8e:01:4a:c1:67:ba:0b:fa:3f:35:de:af:71:d7:
         2e:90:d0:a6:b5:ff:f8:3a:03:88:e4:62:64:cf:cf:c7:be:33:
         f9:91:36:5b:d4:9a:43:64:db:ef:80:6f:59:07:4f:b5:0f:fe:
         33:36:55:f2:87:3e:8e:84:f3:9a:1d:8a:13:59:ad:99:6c:6a:
         5d:31:dc:04:b9:87:3e:90:5a:38:f0:43:3b:27:0d:44:3c:8a:
         d1:bd:40:7a:64:53:da:6e:ff:00:f6:ed:86:bf:60:59:ff:9b:
         6a:69:a0:22:c3:81:3b:e6:31:1d:d1:87:5f:e7:9d:5c:45:2b:
         53:30:cb:e8:21:dd:8f:92:95:42:82:fb:a0:4b:85:e5:f2:b3:
         cc:64:9e:26:48:c6:05:51:84:07:06:05:60:21:98:8b:b8:6e:
         a6:77:6a:79:5f:6d:29:59:b8:f1:73:a2:ef:4f:5d:4b:ed:10:
         e3:e2:56:80:f1:6a:98:cb:d5:74:fa:e6:cb:2b:10:c3:d0:1b:
         6b:47:0b:55:19:92:12:3c:46:0b:b7:15:8e:ce:5a:d5:6a:67:
         d9:e7:62:75:f4:bf:cd:fc:07:05:00:d7:81:1a:58:d4:91:83:
         82:89:4a:e8:3d:0e:e0:b6:1a:f8:af:57:af:6c:5a:f0:04:e0:
         d4:2b:94:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:06 2024 by rpki-client on console-fra.rpki-client.org