Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e31352e302f32342d3234203d3e203234323033.roa
File: 3134302e3231332e31352e302f32342d3234203d3e203234323033.roa (raw, json)
Hash identifier: eZwRCVGa9tl3wD6EaJ+AJLKu8JmKvtaei+qpNuHxSHc=
Subject key identifier: E3:AB:94:C8:99:02:CB:0A:59:5B:1E:E4:CA:D2:26:AF:B9:8F:CC:3A
Certificate issuer: /CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B
Certificate serial: 1F969DFD316BEA463ABE7E1A9F02D3CBA14A7E55
Authority key identifier: 10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e31352e302f32342d3234203d3e203234323033.roa
Signing time: Wed 13 Apr 2022 08:00:02 +0000
ROA not before: Wed 13 Apr 2022 07:55:02 +0000
ROA not after: Wed 12 Apr 2023 08:00:02 +0000
asID: 24203
IP address blocks: 140.213.15.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1f:96:9d:fd:31:6b:ea:46:3a:be:7e:1a:9f:02:d3:cb:a1:4a:7e:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B
Validity
Not Before: Apr 13 07:55:02 2022 GMT
Not After : Apr 12 08:00:02 2023 GMT
Subject: CN=E3AB94C89902CB0A595B1EE4CAD226AFB98FCC3A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:2c:ee:e1:ac:d1:27:ce:59:5a:99:ce:08:98:
ab:0c:1c:ad:46:08:d3:ea:24:76:6b:19:0a:a9:a1:
96:9d:d6:f0:76:a9:0b:fd:86:a5:5e:f2:2d:63:6c:
f8:9c:d3:a3:ba:01:64:23:b4:d3:22:b9:08:bf:4f:
a6:15:6e:c0:a6:47:1f:b5:21:2d:45:8e:8c:3f:48:
f3:27:91:b2:fd:03:bf:7f:bc:0e:77:4c:dc:14:87:
e4:bc:49:01:ac:35:29:3f:04:a4:dd:27:1c:ff:33:
bb:d0:bc:74:46:f1:59:97:40:69:dc:c7:f3:16:c9:
1c:fc:88:44:6c:d9:21:fa:36:bc:4c:82:80:21:ec:
03:b0:1d:1b:78:de:75:81:56:00:8e:58:7a:93:87:
d2:51:a0:70:ce:20:3f:4b:b1:b3:37:2a:74:e9:e8:
27:ec:ff:a9:2c:1e:c5:e9:ef:78:56:72:4f:e8:62:
b5:af:78:b5:43:0b:53:78:96:10:a8:57:e3:28:34:
07:95:be:6d:0d:06:da:e3:1d:9d:1f:e7:2b:c8:69:
63:b8:02:d9:c0:e1:03:ab:69:c8:32:ce:fd:1f:66:
40:28:9f:c5:d2:b4:f5:e5:f2:b0:a2:0c:14:01:cd:
65:13:81:4b:71:64:77:a2:84:e1:4f:d7:a5:61:2e:
1f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:AB:94:C8:99:02:CB:0A:59:5B:1E:E4:CA:D2:26:AF:B9:8F:CC:3A
X509v3 Authority Key Identifier:
keyid:10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e31352e302f32342d3234203d3e203234323033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.213.15.0/24
Signature Algorithm: sha256WithRSAEncryption
65:e1:77:a5:66:5e:1d:86:27:3b:1d:8e:d5:e2:bc:90:bb:f4:
f5:b1:a2:40:e5:4b:5a:7f:ca:ec:89:bc:fe:78:78:fb:ca:b3:
75:89:76:27:3b:76:65:dc:41:da:e4:34:cd:5a:81:30:7c:1a:
db:bd:ae:35:5d:f5:3b:a6:65:1c:21:00:cb:dd:04:1c:43:52:
e5:52:f8:aa:c4:42:81:b3:de:72:fd:5c:a9:cc:b1:25:29:93:
4a:9c:03:e5:94:45:bb:dc:39:32:ea:f0:b6:98:05:0a:22:f9:
18:9f:4b:e8:78:6b:c3:12:d6:64:53:71:0f:7f:60:4a:b4:b1:
22:5f:86:6a:12:2b:ba:1e:30:21:dc:a5:94:5d:fa:67:02:02:
b5:b4:b2:b8:ec:7a:9c:28:0d:1e:74:96:70:0c:a1:c0:f5:02:
61:15:3f:be:d4:6b:68:37:16:97:16:82:65:10:28:46:c7:25:
c3:af:ee:b0:b7:b2:90:b4:9c:23:50:fd:69:2e:3d:51:94:49:
e7:f4:ae:46:0e:04:c0:f2:39:3f:ba:c8:db:6d:94:b3:3d:7e:
24:50:7f:7b:cb:b3:4c:b9:09:81:1d:55:ef:fa:b1:b1:4c:19:
a5:b1:55:1d:d7:84:37:c3:37:cb:72:fe:91:e7:03:1d:3c:ce:
25:3c:38:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:40 2024 by rpki-client on console-ams.rpki-client.org