Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3136362e302f32342d3234203d3e203234323033.roa
File: 3134302e3231332e3136362e302f32342d3234203d3e203234323033.roa (raw, json)
Hash identifier: JM1uLZd1CxDkg/jpkeLDjoYjQ3ir0HHcwSZwxk685ac=
Subject key identifier: 42:9E:80:5B:C0:71:77:4C:04:03:57:68:FC:F6:94:CE:00:DD:AE:D1
Certificate issuer: /CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B
Certificate serial: 10346C448F927B099BB526EB5B272B0876394046
Authority key identifier: 10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3136362e302f32342d3234203d3e203234323033.roa
Signing time: Wed 20 Apr 2022 05:00:06 +0000
ROA not before: Wed 20 Apr 2022 04:55:06 +0000
ROA not after: Wed 19 Apr 2023 05:00:06 +0000
asID: 24203
IP address blocks: 140.213.166.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:34:6c:44:8f:92:7b:09:9b:b5:26:eb:5b:27:2b:08:76:39:40:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B
Validity
Not Before: Apr 20 04:55:06 2022 GMT
Not After : Apr 19 05:00:06 2023 GMT
Subject: CN=429E805BC071774C04035768FCF694CE00DDAED1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:62:d8:af:9e:23:93:6b:7d:58:76:6a:8b:9d:
cd:f6:d9:60:5d:1f:c2:fc:59:7d:c4:66:d4:e6:db:
be:b9:65:fa:66:d0:18:01:4c:58:0f:7c:e5:f2:f6:
70:ae:61:a9:32:47:7d:fb:d0:c8:3e:82:70:8a:7d:
5e:0f:8f:e8:f6:3e:83:27:67:90:ec:36:31:fa:20:
e3:76:45:e1:5e:74:e0:1b:1a:48:80:4e:ef:59:7f:
62:c6:bb:ba:09:4a:c9:a6:20:e7:c4:35:3c:08:b9:
a3:9d:c7:bc:e8:1c:e1:23:94:a1:d0:f2:dd:72:b6:
4c:ee:b9:a7:7e:06:55:41:0f:f5:1c:44:9d:1b:b5:
a7:1a:74:22:8e:65:22:e4:76:07:f8:60:d6:e5:a0:
e7:22:10:c0:89:d7:35:3a:ab:ce:11:e5:86:9c:e1:
a8:16:96:c4:d1:12:4a:e9:33:32:f3:19:8b:45:08:
49:e5:dc:69:d6:79:12:2b:2d:4d:b2:8a:52:13:f2:
29:30:95:b6:09:0e:fd:7c:40:95:a7:6d:de:37:1b:
b1:c9:76:a9:e6:5f:00:8b:68:1b:5c:38:e3:03:44:
6f:b7:b7:23:e5:ab:54:08:1f:2f:b5:b1:44:7d:cf:
fd:09:4b:e3:35:c8:56:91:6e:10:bb:13:27:95:bb:
b9:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:9E:80:5B:C0:71:77:4C:04:03:57:68:FC:F6:94:CE:00:DD:AE:D1
X509v3 Authority Key Identifier:
keyid:10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3136362e302f32342d3234203d3e203234323033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.213.166.0/24
Signature Algorithm: sha256WithRSAEncryption
49:4b:fa:ec:69:79:f4:37:f8:4a:fd:77:55:15:6a:36:27:90:
fe:1e:c0:8d:1b:59:25:d2:98:57:fc:ce:e2:fe:f4:e3:f7:44:
84:eb:ce:b9:ef:cc:7e:40:aa:83:9c:11:0b:9c:d2:6f:9b:d3:
4d:da:4f:52:23:81:11:57:e6:cd:da:cd:6a:16:75:3c:e3:03:
83:92:2d:b3:39:69:e3:7b:30:ba:75:40:7d:b5:12:54:4e:cc:
c0:ba:75:e9:35:fb:52:12:20:b8:77:9e:14:2b:10:8b:ed:26:
58:9f:71:6c:8c:c7:77:ff:82:53:86:4c:17:94:0a:72:a9:32:
96:3f:58:88:94:fd:10:86:15:88:b0:0d:68:03:44:a5:ac:8a:
0c:25:6b:e8:97:fd:81:ea:c3:b0:c0:c9:e5:18:f3:a9:45:6c:
7e:59:c8:99:e7:88:bb:bc:24:51:a2:62:51:76:74:13:c3:d6:
34:0a:33:16:21:76:d2:a9:50:e9:af:17:40:02:58:3b:89:b7:
2b:6f:ce:de:52:28:2d:f9:6b:31:3b:08:63:de:4b:9e:7a:08:
72:d3:1c:c6:53:54:32:12:bd:f4:b4:16:37:5a:17:a1:c5:99:
93:d4:4a:f8:91:db:82:1f:ab:02:12:8e:9c:97:0d:b4:bb:3d:
07:ba:2b:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:06 2024 by rpki-client on console-fra.rpki-client.org