Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3136372e302f32342d3234203d3e203234323033.roa
File: 3134302e3231332e3136372e302f32342d3234203d3e203234323033.roa (raw, json)
Hash identifier: 86xs1mJ5qbU/Ma0Y7yzYrs18mvqh/C4vho4g+DAlhLU=
Subject key identifier: 2A:CC:73:07:18:2A:85:A1:28:13:E9:5D:C6:DB:3C:C4:BD:61:A6:B4
Certificate issuer: /CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B
Certificate serial: 7908502997709CBEBB7555C6B81F6304808C7579
Authority key identifier: 10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3136372e302f32342d3234203d3e203234323033.roa
Signing time: Wed 20 Apr 2022 05:00:03 +0000
ROA not before: Wed 20 Apr 2022 04:55:03 +0000
ROA not after: Wed 19 Apr 2023 05:00:03 +0000
asID: 24203
IP address blocks: 140.213.167.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:08:50:29:97:70:9c:be:bb:75:55:c6:b8:1f:63:04:80:8c:75:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B
Validity
Not Before: Apr 20 04:55:03 2022 GMT
Not After : Apr 19 05:00:03 2023 GMT
Subject: CN=2ACC7307182A85A12813E95DC6DB3CC4BD61A6B4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:7e:94:d8:64:63:e7:a6:e8:54:21:46:d4:08:
e5:55:d5:f9:7e:ac:51:e3:f8:15:75:72:9c:62:79:
89:f3:a9:78:d1:43:90:da:b7:d9:59:46:ec:a2:e3:
71:42:71:8b:73:c7:7a:63:79:a0:03:3e:07:e1:a3:
c6:a0:4f:5d:e5:ff:a2:de:2b:cf:87:9b:49:d0:c8:
10:2c:3d:9a:84:46:5b:5e:a9:39:cd:18:cd:19:37:
13:49:6e:e7:81:77:58:26:29:54:fe:3f:62:c7:26:
0e:6e:a3:c8:04:ee:3b:26:83:5a:0c:ad:9c:d0:fe:
b9:6c:0d:75:53:5a:b7:9c:06:1f:2a:d1:88:81:5f:
53:c0:dd:00:2f:10:fd:1b:0e:6f:69:94:3e:10:bb:
d4:40:6f:37:e8:dd:73:fe:f2:56:55:36:fe:59:76:
d7:42:c4:b9:82:c0:ac:69:3b:65:62:19:b6:4d:c4:
c5:ce:31:f6:29:af:d8:1c:b7:6e:39:ce:e6:6f:43:
75:46:c5:39:9b:2b:23:30:bd:05:bb:c6:c7:ad:92:
a3:5b:07:13:d5:21:ba:3a:e3:1d:21:18:aa:64:79:
61:8c:02:fd:8d:6e:69:f3:e0:21:7a:e4:ff:98:ab:
f5:f0:bd:12:ab:d5:8b:46:50:6c:14:97:f2:83:89:
f4:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:CC:73:07:18:2A:85:A1:28:13:E9:5D:C6:DB:3C:C4:BD:61:A6:B4
X509v3 Authority Key Identifier:
keyid:10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3136372e302f32342d3234203d3e203234323033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.213.167.0/24
Signature Algorithm: sha256WithRSAEncryption
98:1e:95:ff:d9:eb:4f:d2:36:e9:44:3c:1d:1f:30:e9:b3:cf:
f8:45:53:0e:a5:cd:76:45:60:71:50:43:83:e9:73:05:3b:23:
59:1b:5e:85:65:4d:fc:21:c1:b8:6b:46:08:24:26:a2:2f:fd:
54:8a:89:ca:27:b4:24:2b:16:14:87:20:44:99:93:a6:24:b1:
bc:5c:10:7d:ac:6a:93:91:48:a4:f4:29:22:6e:63:a7:1a:4e:
89:04:04:41:05:3c:1e:4d:0a:bf:5a:ba:0c:f6:04:6a:1b:49:
6b:4f:41:4c:98:1a:0e:04:ce:af:07:89:aa:eb:ac:82:84:48:
73:36:c2:99:1b:8e:68:c4:a8:78:0f:a0:b9:32:35:ba:2f:46:
9f:e3:ae:9f:17:79:89:b3:6e:96:6d:b0:2a:92:10:05:66:2b:
bd:61:ea:03:24:04:0f:79:a6:31:bb:39:9a:46:62:60:80:40:
a9:93:83:23:f3:34:56:90:e1:d2:d9:3e:73:2a:08:30:05:25:
dd:18:1c:6c:fd:72:51:dc:a3:c9:c3:47:05:d9:9b:64:44:b5:
4c:23:7f:65:aa:bf:37:1a:58:b2:52:94:23:85:0b:5b:3c:0d:
13:45:90:d3:17:07:40:dc:ae:64:1f:5d:8e:fe:9f:fb:32:b3:
4a:30:95:7b
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUeQhQKZdwnL67dVXGuB9jBICMdXkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTBCQUI3OTA3RDk1M0EwRDVGREVCNUMyMEM5RjI5QkNG
QzY2MEExQjAeFw0yMjA0MjAwNDU1MDNaFw0yMzA0MTkwNTAwMDNaMDMxMTAvBgNV
BAMTKDJBQ0M3MzA3MTgyQTg1QTEyODEzRTk1REM2REIzQ0M0QkQ2MUE2QjQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDQfpTYZGPnpuhUIUbUCOVV1fl+
rFHj+BV1cpxieYnzqXjRQ5Dat9lZRuyi43FCcYtzx3pjeaADPgfho8agT13l/6Le
K8+Hm0nQyBAsPZqERlteqTnNGM0ZNxNJbueBd1gmKVT+P2LHJg5uo8gE7jsmg1oM
rZzQ/rlsDXVTWrecBh8q0YiBX1PA3QAvEP0bDm9plD4Qu9RAbzfo3XP+8lZVNv5Z
dtdCxLmCwKxpO2ViGbZNxMXOMfYpr9gct245zuZvQ3VGxTmbKyMwvQW7xsetkqNb
BxPVIbo64x0hGKpkeWGMAv2Nbmnz4CF65P+Yq/XwvRKr1YtGUGwUl/KDifQZAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUKsxzBxgqhaEoE+ldxts8xL1hprQwHwYDVR0j
BBgwFoAUELq3kH2VOg1f3rXCDJ8pvPxmChswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80
YmRiMWUwYS1hNGVjLTQ5ZGItYmU4OS04ZDdlN2ZjMmMyMjcvMS8xMEJBQjc5MDdE
OTUzQTBENUZERUI1QzIwQzlGMjlCQ0ZDNjYwQTFCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzEvMTBCQUI3OTA3RDk1M0EwRDVGREVCNUMyMEM5RjI5QkNGQzY2
MEExQi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzRiZGIxZTBhLWE0ZWMtNDlkYi1i
ZTg5LThkN2U3ZmMyYzIyNy8xLzMxMzQzMDJlMzIzMTMzMmUzMTM2MzcyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMjM0MzIzMDMzLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjNWnMA0GCSqG
SIb3DQEBCwUAA4IBAQCYHpX/2etP0jbpRDwdHzDps8/4RVMOpc12RWBxUEOD6XMF
OyNZG16FZU38IcG4a0YIJCaiL/1UionKJ7QkKxYUhyBEmZOmJLG8XBB9rGqTkUik
9CkibmOnGk6JBARBBTweTQq/WroM9gRqG0lrT0FMmBoOBM6vB4mq66yChEhzNsKZ
G45oxKh4D6C5MjW6L0af466fF3mJs26WbbAqkhAFZiu9YeoDJAQPeaYxuzmaRmJg
gECpk4Mj8zRWkOHS2T5zKggwBSXdGBxs/XJR3KPJw0cF2ZtkRLVMI39lqr83Gliy
UpQjhQtbPA0TRZDTFwdA3K5kH12O/p/7MrNKMJV7
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:40 2024 by rpki-client on console-ams.rpki-client.org