Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e312e302f32342d3234203d3e203234323033.roa
File: 3134302e3231332e312e302f32342d3234203d3e203234323033.roa (raw, json)
Hash identifier: ys5SZaZScZIVaooOi0yzyc0aXzriw5fNW3PTf4yfNF8=
Subject key identifier: 96:06:C1:BC:78:E2:FA:18:7F:0F:63:36:9F:80:3F:93:2D:A6:04:78
Certificate issuer: /CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B
Certificate serial: 636E07D0A910D82FF1D79A02BAE5441E211031AE
Authority key identifier: 10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e312e302f32342d3234203d3e203234323033.roa
Signing time: Wed 13 Apr 2022 08:00:01 +0000
ROA not before: Wed 13 Apr 2022 07:55:01 +0000
ROA not after: Wed 12 Apr 2023 08:00:01 +0000
asID: 24203
IP address blocks: 140.213.1.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:6e:07:d0:a9:10:d8:2f:f1:d7:9a:02:ba:e5:44:1e:21:10:31:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B
Validity
Not Before: Apr 13 07:55:01 2022 GMT
Not After : Apr 12 08:00:01 2023 GMT
Subject: CN=9606C1BC78E2FA187F0F63369F803F932DA60478
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ce:63:22:70:1d:84:d4:58:89:52:c5:4e:1b:
67:66:d2:f4:1d:8b:55:40:aa:fb:d2:f2:fe:eb:60:
2a:da:ca:29:8a:61:dd:be:0d:0a:de:ac:d3:ac:51:
47:3d:69:fb:24:0b:0b:95:21:9e:b2:2f:27:5c:59:
04:11:5a:88:83:98:25:6e:4e:36:4a:ca:b9:d7:b8:
3e:6e:1b:64:71:83:b3:e3:f6:d0:f8:b6:42:4d:10:
c4:e6:d8:da:4b:e9:74:3a:7f:00:f3:6c:bb:6a:e2:
31:9f:47:c7:68:7b:ec:95:62:05:84:c3:b8:17:8b:
8c:c1:ca:55:f5:c9:d5:af:2d:b0:9c:ba:82:80:4d:
03:e9:4b:34:cc:9d:19:75:54:b3:a6:4c:0e:39:f3:
ec:c3:41:20:96:d2:1e:53:95:20:6b:2b:4d:49:f2:
87:7a:b8:01:2b:88:f0:4f:35:bc:8e:6e:95:c8:fe:
c1:67:ed:20:66:69:8d:12:b5:62:f3:61:67:a7:1f:
a2:b8:be:39:f0:d3:64:7e:4b:e4:9d:e9:dd:34:77:
d6:19:2f:28:31:0c:03:9a:a0:47:b4:e8:e1:3e:38:
d6:09:c4:68:97:66:c4:41:13:7c:b0:e8:43:e7:8a:
4d:80:c0:17:7d:13:82:c6:88:e6:43:be:8d:26:d8:
d7:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:06:C1:BC:78:E2:FA:18:7F:0F:63:36:9F:80:3F:93:2D:A6:04:78
X509v3 Authority Key Identifier:
keyid:10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e312e302f32342d3234203d3e203234323033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.213.1.0/24
Signature Algorithm: sha256WithRSAEncryption
11:42:a4:df:66:2f:76:70:f8:10:a3:42:b6:3f:a8:4c:c9:71:
c1:d5:17:23:33:9c:19:67:4d:14:d3:c0:a0:65:10:36:47:56:
da:11:15:ff:6b:30:2f:8d:20:6f:ff:9d:97:22:cf:9e:18:ed:
84:9f:19:1d:5b:6a:48:96:59:63:c3:ba:25:fa:02:2a:58:ca:
4e:54:62:46:e7:f8:ac:34:a9:b5:ca:68:85:b1:42:5d:ee:d7:
57:a6:05:77:7c:e9:7c:6a:7b:05:55:54:fd:cf:c9:f3:62:59:
91:a4:84:28:d1:e1:1d:f4:47:c8:06:4e:c5:d9:d0:87:d1:8c:
78:6f:48:6e:80:08:02:99:19:82:8c:bf:d9:75:ae:24:54:1e:
ec:fe:a1:d2:8c:22:54:9f:0e:42:eb:7c:ad:f1:2d:41:f3:43:
c0:cd:b0:34:8b:32:63:fb:38:dd:d7:09:5d:5a:29:95:a6:79:
bc:3c:f8:d5:9e:d9:70:28:18:d1:0e:cb:3b:ce:c3:2e:a7:7d:
b7:de:b9:36:b3:41:56:e6:20:4b:cf:c2:e1:4d:4a:ac:95:b8:
30:22:10:2f:4f:c7:73:5b:a6:48:f7:84:25:69:c4:da:fb:ad:
44:b8:a5:f6:86:69:c0:6d:26:09:83:5d:23:93:68:36:05:b3:
f1:9e:f7:46
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIUY24H0KkQ2C/x15oCuuVEHiEQMa4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTBCQUI3OTA3RDk1M0EwRDVGREVCNUMyMEM5RjI5QkNG
QzY2MEExQjAeFw0yMjA0MTMwNzU1MDFaFw0yMzA0MTIwODAwMDFaMDMxMTAvBgNV
BAMTKDk2MDZDMUJDNzhFMkZBMTg3RjBGNjMzNjlGODAzRjkzMkRBNjA0NzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8zmMicB2E1FiJUsVOG2dm0vQd
i1VAqvvS8v7rYCrayimKYd2+DQrerNOsUUc9afskCwuVIZ6yLydcWQQRWoiDmCVu
TjZKyrnXuD5uG2Rxg7Pj9tD4tkJNEMTm2NpL6XQ6fwDzbLtq4jGfR8doe+yVYgWE
w7gXi4zBylX1ydWvLbCcuoKATQPpSzTMnRl1VLOmTA458+zDQSCW0h5TlSBrK01J
8od6uAEriPBPNbyObpXI/sFn7SBmaY0StWLzYWenH6K4vjnw02R+S+Sd6d00d9YZ
LygxDAOaoEe06OE+ONYJxGiXZsRBE3yw6EPnik2AwBd9E4LGiOZDvo0m2NflAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUlgbBvHji+hh/D2M2n4A/ky2mBHgwHwYDVR0j
BBgwFoAUELq3kH2VOg1f3rXCDJ8pvPxmChswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80
YmRiMWUwYS1hNGVjLTQ5ZGItYmU4OS04ZDdlN2ZjMmMyMjcvMS8xMEJBQjc5MDdE
OTUzQTBENUZERUI1QzIwQzlGMjlCQ0ZDNjYwQTFCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzEvMTBCQUI3OTA3RDk1M0EwRDVGREVCNUMyMEM5RjI5QkNGQzY2
MEExQi5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzRiZGIxZTBhLWE0ZWMtNDlkYi1i
ZTg5LThkN2U3ZmMyYzIyNy8xLzMxMzQzMDJlMzIzMTMzMmUzMTJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMyMzQzMjMwMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBACM1QEwDQYJKoZIhvcN
AQELBQADggEBABFCpN9mL3Zw+BCjQrY/qEzJccHVFyMznBlnTRTTwKBlEDZHVtoR
Ff9rMC+NIG//nZciz54Y7YSfGR1bakiWWWPDuiX6AipYyk5UYkbn+Kw0qbXKaIWx
Ql3u11emBXd86XxqewVVVP3PyfNiWZGkhCjR4R30R8gGTsXZ0IfRjHhvSG6ACAKZ
GYKMv9l1riRUHuz+odKMIlSfDkLrfK3xLUHzQ8DNsDSLMmP7ON3XCV1aKZWmebw8
+NWe2XAoGNEOyzvOwy6nfbfeuTazQVbmIEvPwuFNSqyVuDAiEC9Px3Nbpkj3hCVp
xNr7rUS4pfaGacBtJgmDXSOTaDYFs/Ge90Y=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:40 2024 by rpki-client on console-ams.rpki-client.org