Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e34362e302f32342d3234203d3e203234323033.roa
File:                     3134302e3231332e34362e302f32342d3234203d3e203234323033.roa (raw, json)
Hash identifier:          fcPu9eTlcIhdOhNynxSa7/GhhjnP75eCs4ykfW0QXaw=
Subject key identifier:   2F:04:75:1C:79:2E:E6:02:72:9F:99:1B:A3:91:0D:6C:95:EA:9C:EB
Certificate issuer:       /CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B
Certificate serial:       66169A326F3D810BB22079755A382A9089C8C411
Authority key identifier: 10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e34362e302f32342d3234203d3e203234323033.roa
Signing time:             Sat 08 Jan 2022 17:14:21 +0000
ROA not before:           Sat 08 Jan 2022 17:09:21 +0000
ROA not after:            Sun 08 Jan 2023 17:14:21 +0000
asID:                     24203
IP address blocks:        140.213.46.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:16:9a:32:6f:3d:81:0b:b2:20:79:75:5a:38:2a:90:89:c8:c4:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B
        Validity
            Not Before: Jan  8 17:09:21 2022 GMT
            Not After : Jan  8 17:14:21 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:15:be:7e:06:47:2e:1e:b7:46:40:d5:27:9c:
                    ae:b2:3b:c3:78:b4:0f:3f:06:3b:25:22:ef:7d:d0:
                    ae:03:e0:8e:bf:df:53:b5:c9:7a:ac:03:bb:20:6d:
                    43:ed:80:6a:ef:0c:24:9d:c8:47:48:23:8c:28:65:
                    a1:6e:8f:24:1e:01:6f:af:c5:82:3a:75:b1:9b:a7:
                    1f:e0:3c:53:36:09:c7:2b:69:42:70:6c:db:88:9c:
                    d4:d8:15:87:50:12:4c:9a:e5:ab:65:70:9f:7f:a9:
                    fb:a8:64:52:18:13:a3:0b:fa:94:cc:ca:7c:0b:69:
                    6d:08:51:eb:ae:fd:a0:3d:d4:fd:95:c7:cf:32:41:
                    35:32:e7:f2:f0:30:8e:99:e9:ec:a2:dd:f5:b5:ea:
                    b5:eb:fb:82:a4:d8:24:9d:c1:56:36:e6:90:05:2d:
                    d8:4f:0d:3e:68:53:53:f2:a5:8f:85:30:0a:38:2e:
                    2f:e4:d4:76:26:63:f1:f9:1a:cf:19:d7:4f:cb:f0:
                    28:cc:93:7e:c6:a9:fd:f6:9f:12:6d:e2:91:d6:de:
                    bf:b5:1e:ce:e2:46:5c:2e:8e:49:cf:d2:e2:dc:32:
                    e9:83:8a:36:18:f1:60:93:8d:7f:47:89:59:ec:b3:
                    bb:84:68:8d:fe:8b:55:3a:e6:bc:00:3c:ea:82:2a:
                    97:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:04:75:1C:79:2E:E6:02:72:9F:99:1B:A3:91:0D:6C:95:EA:9C:EB
            X509v3 Authority Key Identifier:
                keyid:10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e34362e302f32342d3234203d3e203234323033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.213.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c6:fb:af:fa:54:48:6d:78:9d:95:fd:aa:0f:13:fc:94:91:dd:
         8b:7a:fd:dd:af:0c:8c:ee:2f:09:30:90:0d:bb:ba:45:d2:e5:
         16:b1:db:0e:81:1e:ab:3b:3d:2d:04:61:1e:84:ea:48:bd:62:
         95:47:f9:35:69:11:54:6e:03:bc:6c:a9:44:b9:67:98:d0:e4:
         7e:37:e0:b6:1b:4f:b2:c9:65:c6:eb:54:7a:92:91:a0:b4:a2:
         5a:9f:8e:7f:99:70:81:0f:19:49:cc:e6:7d:8f:a1:a5:cc:02:
         1b:90:57:05:09:3f:04:06:82:9a:39:b3:4b:e2:d9:a8:4c:e2:
         fa:5f:a5:e7:ab:7f:9f:e5:71:eb:d3:9c:e7:2e:5f:b3:3e:e4:
         b8:26:e8:2e:f9:36:e6:49:c4:d1:6e:2b:ea:e7:05:cc:f8:9e:
         d6:c5:ed:d6:5d:48:e5:ca:e8:f5:2a:b5:41:c9:4a:21:db:6c:
         81:8e:11:6b:41:1a:fb:b1:bd:c7:9b:57:69:35:9c:94:da:ee:
         bd:de:06:4b:4d:e7:61:60:49:e6:50:61:8a:d3:d9:68:a2:1f:
         7e:40:fe:09:dd:69:d5:a2:07:12:7a:6a:73:22:d1:a8:cd:af:
         8a:1d:f3:48:55:39:d8:7f:38:76:a1:6a:93:4c:42:f0:f7:67:
         b2:51:1a:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:40 2024 by rpki-client on console-ams.rpki-client.org