Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3233332e302f32342d3234203d3e203234323033.roa
File:                     3134302e3231332e3233332e302f32342d3234203d3e203234323033.roa (raw, json)
Hash identifier:          apy14GnKpheBc/21JEoBctRUoA2JQUtqhGeWnpr3eCM=
Subject key identifier:   99:5B:59:C9:7C:92:B4:D9:CA:20:57:81:59:5D:B3:B2:13:73:D7:B5
Certificate issuer:       /CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B
Certificate serial:       084CEEB1FBA6B2AF57E0F0F21F33B4F04A034F0A
Authority key identifier: 10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3233332e302f32342d3234203d3e203234323033.roa
Signing time:             Sat 08 Jan 2022 17:38:48 +0000
ROA not before:           Sat 08 Jan 2022 17:33:48 +0000
ROA not after:            Sun 08 Jan 2023 17:38:48 +0000
asID:                     24203
IP address blocks:        140.213.233.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:4c:ee:b1:fb:a6:b2:af:57:e0:f0:f2:1f:33:b4:f0:4a:03:4f:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B
        Validity
            Not Before: Jan  8 17:33:48 2022 GMT
            Not After : Jan  8 17:38:48 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e7:13:e8:17:c6:b9:f5:9d:85:54:e4:59:75:
                    6a:ad:50:b9:4c:a4:7a:c1:32:64:0c:79:84:67:26:
                    67:57:bc:f6:6c:16:0f:b1:ae:2a:a8:96:f6:b2:7d:
                    fe:94:70:d5:84:fc:97:50:2c:be:7f:b6:9c:24:0b:
                    ff:67:85:29:72:39:99:07:02:61:be:f7:a3:63:5a:
                    58:2d:b2:7f:b9:bb:e1:0c:20:1f:09:55:1c:25:25:
                    04:19:57:f9:c8:c7:15:cc:96:a3:e5:94:6c:6a:c8:
                    70:15:7b:5e:71:42:19:86:59:33:50:cb:13:40:4f:
                    dc:c1:1b:18:e7:39:ee:1c:01:96:38:c2:6c:d7:27:
                    69:14:13:b6:a3:de:c2:74:b9:85:cf:29:79:71:59:
                    b1:77:e8:67:27:e1:5a:eb:33:47:25:e1:e4:1d:3d:
                    23:b5:37:fe:75:3a:29:63:1b:a7:ce:9e:dc:63:8b:
                    2a:a3:29:8b:80:85:5b:91:55:a1:48:25:0d:84:50:
                    cc:1d:e6:54:7d:98:b4:c5:27:f8:54:58:13:02:9d:
                    9b:6a:d7:9f:78:3e:63:0c:42:b6:29:c7:fd:71:2f:
                    fb:83:b4:41:de:f8:a9:a5:fd:72:64:e9:ad:6b:b2:
                    27:42:f7:2c:ce:86:6f:74:db:37:cb:41:0d:0c:fc:
                    a6:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:5B:59:C9:7C:92:B4:D9:CA:20:57:81:59:5D:B3:B2:13:73:D7:B5
            X509v3 Authority Key Identifier:
                keyid:10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3233332e302f32342d3234203d3e203234323033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.213.233.0/24

    Signature Algorithm: sha256WithRSAEncryption
         16:af:96:6c:d0:c2:1b:1a:a2:54:b3:e7:af:10:bf:97:03:bc:
         30:26:b2:45:7a:06:1a:19:05:86:be:90:53:51:12:d0:a3:e6:
         cf:d7:03:d4:2c:27:0c:77:34:10:b0:b8:94:6e:56:58:87:1e:
         85:2e:13:c3:cc:53:d8:71:82:d2:63:4a:c8:55:7b:b5:a5:e0:
         d5:ab:ed:e2:9a:dc:ee:90:45:02:0c:a2:7d:11:a8:97:4e:dc:
         f7:3f:99:cb:bb:6b:c9:ff:dd:ef:57:84:14:ea:a7:23:1b:d3:
         85:01:a2:f4:ee:c5:9b:fe:56:95:86:a4:ce:7d:3f:3c:6f:b1:
         6e:b3:a4:59:68:ff:96:04:f8:9d:6d:d7:92:e6:f5:c4:24:5c:
         94:d1:70:70:ce:db:af:cd:44:90:aa:c9:d3:ea:c8:59:26:61:
         14:09:2f:bf:ba:aa:c3:df:2b:ac:c5:03:b2:68:c9:c3:fa:36:
         70:48:c7:e4:0d:65:b6:32:69:e1:bb:0a:4b:c9:3b:c2:57:a6:
         0d:69:c5:87:ac:6a:a2:6c:f5:98:d5:bb:ab:c3:8c:31:38:84:
         3e:9c:90:88:dd:0d:9a:74:dd:56:e0:00:73:fc:7c:d1:d9:ca:
         f7:f3:de:94:b1:90:3c:5c:8e:4d:c9:16:06:88:ab:b9:0c:30:
         51:6f:c3:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:06 2024 by rpki-client on console-fra.rpki-client.org