Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3136342e302f32342d3234203d3e203234323033.roa
File: 3134302e3231332e3136342e302f32342d3234203d3e203234323033.roa (raw, json)
Hash identifier: j6CcEr6vdVFbKRHaDE78oZT7QVjIxLYg4tqswKtAUFY=
Subject key identifier: 16:43:AA:D8:CD:E8:B2:DE:A2:A9:9F:8F:D4:25:1A:42:B2:44:A3:BC
Certificate issuer: /CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B
Certificate serial: 62F6626478F970ED863B705FF667F31CBFD29A16
Authority key identifier: 10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3136342e302f32342d3234203d3e203234323033.roa
Signing time: Wed 20 Apr 2022 05:00:04 +0000
ROA not before: Wed 20 Apr 2022 04:55:04 +0000
ROA not after: Wed 19 Apr 2023 05:00:04 +0000
asID: 24203
IP address blocks: 140.213.164.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:f6:62:64:78:f9:70:ed:86:3b:70:5f:f6:67:f3:1c:bf:d2:9a:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B
Validity
Not Before: Apr 20 04:55:04 2022 GMT
Not After : Apr 19 05:00:04 2023 GMT
Subject: CN=1643AAD8CDE8B2DEA2A99F8FD4251A42B244A3BC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:3b:83:c2:e5:4d:41:db:22:0a:e5:0e:d4:42:
dc:a0:b6:6c:e0:e0:e1:62:7b:88:fc:77:60:f4:b6:
ab:2a:f4:f7:8d:f6:83:4f:11:01:d1:77:9e:94:a9:
79:d0:fa:93:a4:8d:7c:be:38:ff:e9:7d:2e:05:c2:
24:ef:4d:7c:07:27:d6:35:75:a1:b4:e9:38:02:5d:
63:5d:bd:03:67:3d:1e:a0:d0:40:20:39:f0:16:46:
30:3b:63:43:41:69:90:8b:2c:f7:ec:0c:fa:9a:de:
f3:7f:29:50:91:4d:78:4d:94:00:d2:f3:e3:fe:7f:
f0:c3:0b:47:ca:86:d0:5c:7d:66:e0:ff:bf:2b:33:
85:71:13:f5:67:bf:0f:1d:ae:c8:ae:98:6e:8f:9e:
98:64:b0:ce:09:f9:27:d6:b3:26:2d:84:04:e2:0d:
d4:60:3f:0a:05:57:49:8d:45:5e:17:28:3e:f3:08:
4d:de:f1:e7:01:0c:1b:98:75:a5:10:31:0d:fa:b3:
f3:c2:05:3b:fb:83:5e:cc:63:96:e0:e6:2c:46:91:
51:ea:98:d0:61:3a:ec:96:04:1a:da:66:43:30:98:
34:b1:c3:c4:cc:52:1c:b6:ad:1c:b8:92:2f:63:56:
fe:98:70:c6:52:a2:96:04:25:34:de:fe:67:b9:24:
fd:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:43:AA:D8:CD:E8:B2:DE:A2:A9:9F:8F:D4:25:1A:42:B2:44:A3:BC
X509v3 Authority Key Identifier:
keyid:10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3136342e302f32342d3234203d3e203234323033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.213.164.0/24
Signature Algorithm: sha256WithRSAEncryption
c5:ae:1b:1b:37:ca:04:14:75:90:29:e2:bd:5f:04:ec:c8:4c:
7d:69:24:89:4e:10:0d:e3:e5:8b:b4:9e:b5:a4:dc:be:a5:f1:
32:ad:05:e6:6b:8c:21:0a:b6:a0:b8:9e:c2:4d:3e:85:1e:c1:
da:b4:42:c0:eb:8e:5f:ef:eb:e9:61:8d:39:e4:7b:f5:c7:b3:
4b:22:f1:06:25:86:0c:1e:48:97:3f:35:a9:76:66:a0:4a:b9:
83:8e:02:c3:9a:b2:2b:b4:3c:1f:71:34:d9:f0:ac:ff:a4:47:
5f:fb:6e:46:83:92:29:ab:3a:f6:8c:0c:c6:58:d7:c7:58:ff:
38:30:33:26:28:2a:c8:97:68:7b:a7:4c:a7:c6:1d:f2:01:ce:
b0:79:76:b5:65:2c:b9:2a:81:d2:60:8b:60:66:2a:4e:ad:b0:
cb:25:38:23:e6:1d:50:74:d2:5b:fd:b5:57:46:1e:23:42:ab:
49:59:37:39:fe:71:da:e0:af:85:11:42:6a:aa:08:72:0a:28:
96:92:70:1e:f7:0e:ff:3f:56:5d:7c:09:df:b3:21:07:96:44:
72:ca:61:3d:9f:2d:b6:85:1e:52:cf:37:6e:de:5c:94:2b:48:
7c:70:76:2e:ab:2a:a4:64:7a:6e:2b:ca:cc:1b:32:31:a3:fb:
54:1a:11:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:06 2024 by rpki-client on console-fra.rpki-client.org