Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3132372e302f32342d3234203d3e203234323033.roa
File: 3134302e3231332e3132372e302f32342d3234203d3e203234323033.roa (raw, json)
Hash identifier: +NbszkVzA0JA4hwj/Pu44mejIAH8nZrw6mZvzsbq7vg=
Subject key identifier: 8B:0B:4D:31:9D:52:F2:73:EF:3E:61:E0:F8:A1:C2:46:58:11:83:C2
Certificate issuer: /CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B
Certificate serial: 7676394F9DD9FC226FD36DC05C5427B455B0B5A7
Authority key identifier: 10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3132372e302f32342d3234203d3e203234323033.roa
Signing time: Wed 20 Apr 2022 05:00:03 +0000
ROA not before: Wed 20 Apr 2022 04:55:03 +0000
ROA not after: Wed 19 Apr 2023 05:00:03 +0000
asID: 24203
IP address blocks: 140.213.127.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:76:39:4f:9d:d9:fc:22:6f:d3:6d:c0:5c:54:27:b4:55:b0:b5:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B
Validity
Not Before: Apr 20 04:55:03 2022 GMT
Not After : Apr 19 05:00:03 2023 GMT
Subject: CN=8B0B4D319D52F273EF3E61E0F8A1C246581183C2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:ce:39:bb:a0:64:18:97:15:b8:72:eb:fd:34:
67:8b:10:64:11:85:7e:ed:87:a1:e9:77:c8:78:82:
1b:46:8d:99:a8:2c:ed:0b:1d:71:42:98:0f:b7:e9:
05:e4:6e:c4:07:3d:71:33:f1:ba:28:3f:fd:9e:61:
67:1e:cb:bc:8d:39:ef:bd:b0:f4:27:9b:0d:0e:16:
3c:df:aa:b3:1d:36:01:62:02:b2:c4:22:d9:90:08:
54:c3:a8:81:e7:0e:81:40:68:cc:46:95:18:89:8b:
82:2b:b4:4a:a2:45:c3:1f:a4:b0:54:7a:77:e3:ff:
83:78:2b:ba:4d:d5:35:27:09:4b:aa:07:a8:f8:64:
f9:c2:11:99:a4:0f:92:a4:77:f5:bc:cf:af:ea:be:
d1:3e:a1:0a:49:61:fd:c6:81:9d:0b:40:89:4a:cb:
56:21:8a:69:36:ce:70:2a:a7:fa:26:84:f7:c2:8a:
b1:e3:32:c4:41:3c:70:6d:86:2a:ca:e6:77:4c:49:
40:0e:43:7f:5e:37:ae:8c:85:0c:1c:fd:91:ab:2e:
23:b0:1f:4b:ad:46:78:d3:68:10:96:fd:1b:87:b9:
11:91:cc:e8:b7:26:db:b3:68:e3:7c:6d:48:56:f4:
7e:7d:af:42:d5:38:e0:0d:76:e2:53:f7:0c:61:25:
2c:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:0B:4D:31:9D:52:F2:73:EF:3E:61:E0:F8:A1:C2:46:58:11:83:C2
X509v3 Authority Key Identifier:
keyid:10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3132372e302f32342d3234203d3e203234323033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.213.127.0/24
Signature Algorithm: sha256WithRSAEncryption
66:47:d5:44:7b:07:e5:25:c5:f7:ce:b8:9e:38:c7:74:be:4a:
3b:6c:01:c4:05:ec:dc:9b:76:84:3c:37:68:85:6c:b0:81:a3:
58:c1:fa:ed:0b:ec:26:c1:22:91:a4:ea:e3:30:48:ed:5d:99:
72:f4:cb:73:b4:5b:af:42:62:ea:b3:15:ec:ff:29:a0:99:e3:
42:84:fb:92:2a:f2:0a:56:19:61:be:8c:b8:5d:4f:6d:2b:57:
0b:64:3c:11:e6:81:38:17:d5:5f:f1:ac:e5:0f:5b:1c:00:b8:
04:5d:b8:e6:f7:ce:c3:1e:71:b4:33:6f:b1:9d:d6:1b:93:fd:
be:f5:0d:cd:4b:42:28:27:30:be:03:b2:e0:9d:c2:49:cf:a6:
58:39:a0:44:6d:41:da:4f:13:2f:7f:36:28:b7:0b:0a:9d:f8:
87:77:f6:cf:4f:85:03:59:1f:38:1c:f9:83:3c:24:79:b7:50:
f7:ac:70:94:ab:42:75:dd:f8:e1:ae:1e:79:18:99:ba:34:eb:
f7:eb:b8:f7:70:0e:e7:0e:09:11:0d:b4:3c:e0:62:93:cf:36:
44:ca:d8:44:42:c2:a1:c1:a6:bd:97:cb:96:f0:8c:95:37:27:
23:ce:c6:1f:54:0c:13:a1:8b:30:09:ae:61:57:98:d0:17:ed:
32:55:8e:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:40 2024 by rpki-client on console-ams.rpki-client.org