Route Origin Authorization

$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e34392e302f32342d3234203d3e203234323033.roa
File:                     3134302e3231332e34392e302f32342d3234203d3e203234323033.roa (raw, json)
Hash identifier:          JOctgYTKMW/tiAf4ubO/VLa11DDuKopiei29wlZM6Lc=
Subject key identifier:   C8:D6:E0:97:A8:D4:23:14:5B:89:6E:01:52:10:AC:C7:3F:8B:D7:D9
Certificate issuer:       /CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B
Certificate serial:       6421E137E30CF60F214BA7D3F6784729144DCB49
Authority key identifier: 10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B
Authority info access:    rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer
Subject info access:      rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e34392e302f32342d3234203d3e203234323033.roa
Signing time:             Sat 08 Jan 2022 17:15:16 +0000
ROA not before:           Sat 08 Jan 2022 17:10:16 +0000
ROA not after:            Sun 08 Jan 2023 17:15:16 +0000
asID:                     24203
IP address blocks:        140.213.49.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:21:e1:37:e3:0c:f6:0f:21:4b:a7:d3:f6:78:47:29:14:4d:cb:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B
        Validity
            Not Before: Jan  8 17:10:16 2022 GMT
            Not After : Jan  8 17:15:16 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:fa:38:59:03:e2:e2:31:4c:d9:07:ba:e8:97:
                    50:17:9d:34:59:31:ee:26:3e:c1:1b:76:a6:0f:3c:
                    01:12:26:53:c1:84:4f:7b:ac:df:12:49:4a:a4:48:
                    f8:fd:b8:c6:da:49:1e:bc:0c:43:33:a5:45:8d:bf:
                    10:bb:dd:7d:e2:99:c2:20:78:df:52:c1:f3:10:2c:
                    5a:26:f6:f6:80:42:88:62:36:8c:cf:d3:9c:37:df:
                    4b:d2:e8:86:dc:7f:cd:71:e8:9f:93:0f:c8:97:c5:
                    32:7a:ef:ca:8a:9d:c8:a7:4c:16:fe:3e:40:4c:27:
                    67:2a:ca:3f:82:6e:ea:e8:38:9c:58:b0:d0:17:93:
                    d3:7f:b9:55:86:cf:32:51:79:a5:7b:f4:c6:10:9b:
                    e0:47:d7:f6:fa:70:d5:6e:89:06:50:b1:70:a3:62:
                    90:8e:b2:82:96:cc:60:e0:d7:12:0a:86:f2:1a:7a:
                    33:e3:46:26:a6:36:2e:7f:39:77:3a:a3:ea:7f:ba:
                    47:d5:4f:58:04:6b:19:a5:ce:27:5c:5b:35:d0:0b:
                    e9:96:da:5f:3b:00:3c:90:22:21:be:41:e4:05:b4:
                    63:ce:23:78:8b:18:12:25:64:04:dd:09:45:eb:e2:
                    1e:ff:7b:f1:0d:85:4d:0b:5e:45:e2:cd:b9:b6:32:
                    24:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:D6:E0:97:A8:D4:23:14:5B:89:6E:01:52:10:AC:C7:3F:8B:D7:D9
            X509v3 Authority Key Identifier:
                keyid:10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer

            Subject Information Access:
                Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e34392e302f32342d3234203d3e203234323033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  140.213.49.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:ce:92:01:76:7f:05:9a:b7:1c:7e:b8:e0:11:6b:75:25:06:
         e7:d5:a8:41:cd:fe:21:9e:45:6e:40:88:f8:09:dc:f2:61:ec:
         42:50:0a:59:e8:3c:97:0f:e9:18:d7:64:45:8f:8b:c5:e3:87:
         4a:10:b4:63:35:2e:e3:cc:1a:77:82:e5:63:67:a5:c0:72:59:
         83:e5:6b:02:6e:48:0b:7d:e2:e8:6b:af:23:6a:6e:10:7c:f2:
         bd:1b:82:a8:52:68:82:73:f8:02:b3:79:ea:b0:97:b0:d0:0f:
         81:66:66:b7:d8:4a:4e:9a:bc:21:14:28:bc:fa:cc:ba:c0:3d:
         66:8e:af:b3:2b:3a:14:79:17:a0:c9:21:ac:53:fc:d7:7b:08:
         f8:26:50:4a:69:ca:d4:db:63:9f:d5:c2:ea:97:0b:93:f0:91:
         2b:db:88:2e:24:21:3b:e6:2b:07:08:18:39:71:fa:84:11:c6:
         54:45:69:c7:36:1b:c8:55:17:6c:92:ed:2c:47:85:d5:25:af:
         b1:9c:1e:e9:01:f4:f1:66:98:75:5e:67:c2:f4:e2:a7:4f:e6:
         1e:85:81:1f:28:9f:ab:40:94:1b:00:81:58:0c:9e:70:81:22:
         13:80:d0:50:e9:ae:ff:d0:d2:39:f6:4b:5d:35:d6:34:51:78:
         a3:5c:00:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:07 2024 by rpki-client on console-fra.rpki-client.org