Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e33372e302f32342d3234203d3e203234323033.roa
File:                     3134302e3231332e33372e302f32342d3234203d3e203234323033.roa (raw, json)
Hash identifier:          TBc9uFvcmNcWPY6m+ZbodfnXi87XjxIRtmgJxI3ShyE=
Subject key identifier:   9A:F4:4A:B2:8B:FB:80:EA:C8:3B:73:24:89:EE:E1:19:C0:33:62:25
Certificate issuer:       /CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B
Certificate serial:       6E2C063A7C64E3DAEB2696D419A95CB0E321E97D
Authority key identifier: 10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e33372e302f32342d3234203d3e203234323033.roa
Signing time:             Sat 08 Jan 2022 17:08:08 +0000
ROA not before:           Sat 08 Jan 2022 17:03:08 +0000
ROA not after:            Sun 08 Jan 2023 17:08:08 +0000
asID:                     24203
IP address blocks:        140.213.37.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:2c:06:3a:7c:64:e3:da:eb:26:96:d4:19:a9:5c:b0:e3:21:e9:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B
        Validity
            Not Before: Jan  8 17:03:08 2022 GMT
            Not After : Jan  8 17:08:08 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:44:ce:26:f2:a8:49:24:60:5f:3c:6e:11:03:
                    46:e0:83:7f:79:9c:22:5a:5a:b2:c4:90:73:e2:6a:
                    5b:0a:c9:a1:4f:7b:ad:bd:fc:98:43:61:60:1d:b2:
                    5a:6c:c0:56:61:fd:8f:94:39:52:f7:fa:a0:f0:54:
                    5c:68:1e:ea:34:f4:23:3a:42:10:cf:c0:9d:2a:15:
                    88:28:ed:b9:7f:85:56:25:ac:f7:0f:ba:95:bd:01:
                    f9:9a:a2:c8:63:e4:68:d1:af:8f:0b:a3:66:da:d6:
                    5e:6d:44:f4:0d:0e:99:0f:75:9c:09:b5:5e:a8:36:
                    03:a0:98:54:2d:c5:3e:cb:30:91:dc:43:39:55:d9:
                    7c:97:a4:37:61:33:db:a2:e2:80:a0:05:20:e3:8f:
                    83:c2:be:1c:23:dd:a5:ea:0f:fd:b2:27:80:c0:bf:
                    d1:4c:80:33:e8:36:04:34:27:0a:26:05:62:0c:d7:
                    9d:e5:30:ec:e9:97:68:cd:73:d4:42:f9:31:d7:fe:
                    2d:41:49:a7:0a:f7:56:79:99:a7:f7:68:bd:1f:7d:
                    ca:96:a8:f1:02:a7:48:79:f8:3d:d4:d6:2e:de:73:
                    60:08:29:f4:8c:94:79:45:51:c4:8c:05:6e:7e:41:
                    6f:86:75:dc:7f:d6:26:b0:b2:7c:49:cb:ba:1a:ae:
                    a0:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:F4:4A:B2:8B:FB:80:EA:C8:3B:73:24:89:EE:E1:19:C0:33:62:25
            X509v3 Authority Key Identifier:
                keyid:10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e33372e302f32342d3234203d3e203234323033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.213.37.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6c:11:3d:a6:8c:f9:96:fa:a9:00:e9:ad:d5:8d:c4:2c:7d:82:
         5b:eb:af:b8:8c:57:3d:d1:94:01:89:32:1d:64:31:27:9b:81:
         6e:3a:47:0c:de:b6:cc:41:0b:93:7a:16:df:cf:71:bb:06:b0:
         1c:12:08:cf:7f:37:a9:0d:00:da:77:56:33:bf:0e:d2:1b:b2:
         9b:19:48:53:9b:95:b0:d6:ea:a4:7c:cf:fc:c2:99:e3:8f:06:
         1b:ed:34:91:67:d0:50:3f:f0:b1:67:f4:6a:47:82:be:1e:51:
         aa:f4:c4:74:9c:e2:5e:ab:96:ee:e0:2e:81:26:c1:7d:8a:c5:
         34:4f:f0:9a:97:c8:62:93:53:0a:08:dd:f2:4b:2c:2d:e4:ee:
         e2:68:c0:9f:7a:f1:f3:2b:87:48:81:2f:79:23:2b:c5:0f:06:
         de:7b:6f:19:b0:03:82:f2:02:4c:34:a2:e3:cc:0e:9b:0b:d9:
         2a:0e:4b:21:8d:e2:b5:1b:67:50:0d:c8:df:b7:cc:c9:72:a2:
         ed:43:66:80:09:fd:a3:0e:bd:68:92:13:c7:6e:45:e4:3b:18:
         1d:0b:29:99:e9:ef:e8:e5:ff:c1:ad:52:ec:64:4e:84:a8:56:
         87:e5:7b:f9:46:58:48:de:f3:60:9c:60:8b:04:b3:8b:c5:12:
         e0:92:b3:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:07 2024 by rpki-client on console-fra.rpki-client.org