Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e34342e302f32342d3234203d3e203234323033.roa
File:                     3134302e3231332e34342e302f32342d3234203d3e203234323033.roa (raw, json)
Hash identifier:          AbMrDrZfj3qmGnElhLYlMGoEHf4mojIwZrF/eS728GE=
Subject key identifier:   F1:DB:5F:96:3D:4C:AD:E5:33:C7:C6:44:E5:A0:C8:1E:E3:05:A1:0F
Certificate issuer:       /CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B
Certificate serial:       10CF3FD8E5FB332FA3C806D0B411423BB2809EE9
Authority key identifier: 10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e34342e302f32342d3234203d3e203234323033.roa
Signing time:             Sat 08 Jan 2022 17:13:36 +0000
ROA not before:           Sat 08 Jan 2022 17:08:36 +0000
ROA not after:            Sun 08 Jan 2023 17:13:36 +0000
asID:                     24203
IP address blocks:        140.213.44.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:cf:3f:d8:e5:fb:33:2f:a3:c8:06:d0:b4:11:42:3b:b2:80:9e:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B
        Validity
            Not Before: Jan  8 17:08:36 2022 GMT
            Not After : Jan  8 17:13:36 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f9:cb:64:5e:c8:70:be:d6:21:ca:e7:39:d3:
                    b2:fa:73:08:5f:15:1a:1a:74:0f:e3:b5:60:c6:a4:
                    38:7b:67:dc:4e:71:27:9a:da:e3:6a:5d:67:4f:53:
                    00:9a:3b:34:0e:b2:8c:71:7e:2b:99:93:f6:e1:81:
                    05:82:5a:be:c7:4a:c9:d3:fb:71:a6:be:0c:eb:17:
                    72:6e:f0:c7:6a:b6:75:7a:5a:25:f0:b1:b2:49:a2:
                    be:3f:71:f2:ff:b6:bd:b1:b5:f8:33:26:91:c7:09:
                    f8:39:f5:89:d7:28:ae:5e:ec:9b:cc:40:71:d8:88:
                    75:a4:06:5d:33:08:23:f1:ad:22:1d:f9:c8:d3:75:
                    da:8e:a9:aa:d8:76:8f:27:dc:0b:04:50:d8:fa:c4:
                    d6:3d:42:11:c3:6a:cd:bd:16:74:22:c9:f2:d8:7c:
                    b5:f8:df:84:06:61:b4:da:d4:80:98:cf:ca:f5:06:
                    35:05:db:92:7e:a7:59:10:0a:dd:77:5f:85:61:a9:
                    94:71:88:82:c1:4a:d8:ee:d1:10:2c:f5:22:b8:e1:
                    0e:14:db:6e:83:8b:c2:23:da:40:ff:12:58:37:49:
                    0a:1a:8f:5f:06:b6:dd:f4:c7:f1:e6:b2:c1:2b:1b:
                    b5:72:5b:fc:e0:43:81:d2:a6:56:8d:0c:ac:66:8c:
                    50:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:DB:5F:96:3D:4C:AD:E5:33:C7:C6:44:E5:A0:C8:1E:E3:05:A1:0F
            X509v3 Authority Key Identifier:
                keyid:10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e34342e302f32342d3234203d3e203234323033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.213.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1a:17:85:d7:84:7e:f2:38:46:cb:13:88:84:bf:8e:f4:52:3e:
         bb:d8:a7:66:77:1c:a5:31:f2:ea:4a:4e:f5:87:cd:8d:e1:16:
         46:92:b0:8e:02:80:9d:88:6d:86:2a:44:e8:f9:06:1a:64:0c:
         60:50:f2:6d:ea:4a:7c:79:24:8b:d7:d4:19:33:63:de:25:e3:
         db:fc:7d:21:46:2e:20:19:0e:23:87:57:09:6c:f6:13:72:39:
         a9:83:c6:5a:b1:25:23:47:76:07:8d:31:3c:8c:8f:62:b1:0d:
         39:be:9c:f9:e5:50:13:0c:64:17:9a:83:70:92:63:94:df:81:
         e8:6a:7a:8a:9e:92:55:08:80:ab:bc:2f:c6:ab:47:3d:08:0b:
         c2:1a:cf:51:46:a1:eb:00:d1:35:b0:46:4f:bc:09:2f:84:ba:
         67:54:8b:f0:1c:d4:97:d8:b5:2b:7c:22:e1:08:b1:32:34:b9:
         bf:fa:31:12:f5:7f:30:60:e6:79:67:37:2d:2c:00:f6:a3:8f:
         f9:06:d8:66:ad:9b:4e:c5:d4:ca:9d:fe:24:92:98:3a:77:5c:
         aa:07:07:60:ad:40:e3:19:c6:9f:5c:c4:e5:78:ca:b1:ac:94:
         05:07:a0:a0:1d:65:71:4b:f5:b6:16:1f:88:f1:a1:63:4c:53:
         c4:4a:50:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:07 2024 by rpki-client on console-fra.rpki-client.org