Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3135302e302f32342d3234203d3e203234323033.roa
File: 3134302e3231332e3135302e302f32342d3234203d3e203234323033.roa (raw, json)
Hash identifier: zXu904VpIOYKHxS8QsB8hZi8RaDZxB11MBz7j3sV6n8=
Subject key identifier: 72:AE:F4:E0:C9:CD:EE:24:04:3C:22:51:F6:45:BF:D5:69:20:8A:4F
Certificate issuer: /CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B
Certificate serial: 5D5F793336A9B84FE282068965F6C34675E579AE
Authority key identifier: 10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3135302e302f32342d3234203d3e203234323033.roa
Signing time: Wed 20 Apr 2022 05:00:01 +0000
ROA not before: Wed 20 Apr 2022 04:55:01 +0000
ROA not after: Wed 19 Apr 2023 05:00:01 +0000
asID: 24203
IP address blocks: 140.213.150.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5d:5f:79:33:36:a9:b8:4f:e2:82:06:89:65:f6:c3:46:75:e5:79:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B
Validity
Not Before: Apr 20 04:55:01 2022 GMT
Not After : Apr 19 05:00:01 2023 GMT
Subject: CN=72AEF4E0C9CDEE24043C2251F645BFD569208A4F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:33:62:04:bc:32:f1:60:5d:67:8b:94:a1:bc:
ca:21:82:73:86:2f:89:70:de:8a:f1:71:6b:bf:e1:
34:66:c4:88:25:69:53:0c:5f:f7:f2:65:b1:25:86:
8c:e2:fa:bd:34:36:d9:1d:1c:33:29:ec:bb:86:dc:
88:44:63:10:00:36:62:d9:2b:b6:12:2f:b8:4c:8d:
02:94:3d:b5:44:e9:4a:1a:4c:47:be:a4:ea:13:bc:
52:be:d4:d6:fb:97:36:32:90:1f:ca:49:d0:e5:54:
c5:b8:39:da:f4:75:8c:67:e1:34:21:f9:96:47:b1:
66:d5:ee:06:d7:60:1d:31:bb:22:5a:67:2a:33:3b:
62:41:04:4a:8b:0a:02:97:ce:3a:25:66:af:df:89:
48:a7:93:2e:f0:2d:08:0e:02:54:29:6a:20:cc:5a:
32:44:93:2b:e8:b6:f1:23:78:1e:71:b9:c7:ea:dd:
3c:d6:de:35:30:be:28:93:b4:a2:0e:ee:ab:f0:dd:
f7:8a:f1:25:2e:fa:cb:34:a7:ad:1f:29:01:65:dd:
7a:7a:30:15:f9:2b:68:17:d5:4b:69:83:d4:f9:38:
9d:bc:29:30:4d:18:9b:fb:1c:6d:c4:02:60:40:61:
2f:50:52:88:b5:d7:6a:b0:cd:a4:29:25:f3:97:1b:
81:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:AE:F4:E0:C9:CD:EE:24:04:3C:22:51:F6:45:BF:D5:69:20:8A:4F
X509v3 Authority Key Identifier:
keyid:10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3135302e302f32342d3234203d3e203234323033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.213.150.0/24
Signature Algorithm: sha256WithRSAEncryption
9d:5b:3d:72:31:b8:76:10:e0:d9:6e:e6:d1:e7:47:40:83:4c:
46:27:b0:17:a1:60:cf:83:86:c7:53:33:89:29:bb:30:85:46:
90:8c:2c:cc:a7:4b:1a:07:9d:d0:71:eb:c6:40:9b:7a:3c:3e:
90:bd:17:1e:77:d9:02:1e:12:9e:1c:da:d9:4b:eb:cf:34:51:
a9:3c:95:fa:35:fb:73:27:0e:26:6b:55:ae:f9:65:e0:01:dd:
1e:76:da:71:29:1d:e0:10:28:7d:28:b5:66:1a:7d:d1:09:d5:
f1:1a:f8:3c:90:ae:d6:1b:92:b0:6f:44:bd:2b:5f:7b:a1:32:
12:45:8c:5c:a5:11:a0:38:cf:b0:6b:d0:9c:73:e5:40:c5:66:
5d:af:7a:54:f5:7a:f1:b0:8b:ae:31:10:8f:43:49:ae:bc:42:
27:ed:8e:34:90:23:fa:06:7f:52:3c:24:90:d4:16:22:62:31:
ec:0e:af:a3:d3:e2:12:c6:1c:89:fe:5d:7c:4f:54:66:92:80:
f1:92:1f:3f:87:e5:29:22:e0:03:49:18:1c:44:06:2e:1c:54:
c6:da:c6:08:ac:92:e8:16:9f:a9:90:8b:af:b5:47:3a:c5:9f:
9f:ff:c0:a7:74:6b:6e:18:7e:95:db:6d:d7:7f:55:b8:49:5c:
b5:d6:25:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:06 2024 by rpki-client on console-fra.rpki-client.org