Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3136392e302f32342d3234203d3e203234323033.roa
File: 3134302e3231332e3136392e302f32342d3234203d3e203234323033.roa (raw, json)
Hash identifier: 4FZ7WGFfhxSmgBpbIR1zrwXcPEhgoFv8ppX1hwXXMB8=
Subject key identifier: 40:51:86:69:14:EC:BF:E6:96:39:8B:E6:F8:C5:6F:DF:32:14:E2:E7
Certificate issuer: /CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B
Certificate serial: 65C7F71209F592205D49F696A8589B2474705C86
Authority key identifier: 10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3136392e302f32342d3234203d3e203234323033.roa
Signing time: Wed 20 Apr 2022 05:00:00 +0000
ROA not before: Wed 20 Apr 2022 04:55:00 +0000
ROA not after: Wed 19 Apr 2023 05:00:00 +0000
asID: 24203
IP address blocks: 140.213.169.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:c7:f7:12:09:f5:92:20:5d:49:f6:96:a8:58:9b:24:74:70:5c:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B
Validity
Not Before: Apr 20 04:55:00 2022 GMT
Not After : Apr 19 05:00:00 2023 GMT
Subject: CN=4051866914ECBFE696398BE6F8C56FDF3214E2E7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:24:2f:df:a6:1d:74:d1:62:fc:04:29:a7:00:
13:2b:94:3f:84:58:dd:1f:bc:36:a8:17:d9:e5:ba:
49:af:30:05:ce:8f:d2:ee:d5:14:e6:62:3c:a4:85:
fd:bf:2d:6e:22:f3:3c:2f:52:77:fe:e8:49:b0:7a:
1f:fd:29:b3:21:a2:0a:4b:71:8c:83:bb:65:9b:42:
05:53:82:11:65:39:a1:0d:2b:88:02:72:94:b7:d4:
8f:7c:4c:95:76:53:78:5b:df:70:05:73:0b:da:fe:
71:0c:d4:f2:64:e7:58:6e:e9:e1:ff:49:07:b8:db:
02:ce:07:d3:be:c5:cd:b2:e9:6a:30:96:fd:78:a1:
e6:3f:39:30:38:ab:f5:9b:17:81:93:3e:b3:1b:58:
41:82:0c:23:e4:4e:f0:aa:06:fa:1d:f5:78:43:ca:
05:0c:be:97:9c:19:f3:6c:56:0e:a9:c2:01:b1:c2:
25:49:39:4f:f6:63:6b:47:40:0c:89:b8:1b:24:e2:
49:55:e0:43:ab:80:1f:11:a5:aa:c6:15:b0:74:11:
86:c6:7b:78:66:cc:b8:2d:c6:ec:0e:6c:71:df:56:
78:b0:b8:28:e4:4e:81:32:a0:c4:7b:11:34:e4:8c:
62:9b:f6:5e:ea:fc:9b:8c:5f:31:26:f2:01:fd:c4:
87:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:51:86:69:14:EC:BF:E6:96:39:8B:E6:F8:C5:6F:DF:32:14:E2:E7
X509v3 Authority Key Identifier:
keyid:10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3136392e302f32342d3234203d3e203234323033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.213.169.0/24
Signature Algorithm: sha256WithRSAEncryption
81:1c:d7:f0:0d:af:e4:dc:12:86:cb:88:b2:2b:55:88:d2:a9:
97:55:f9:0a:07:e9:b2:04:1e:3a:04:40:0e:40:00:c0:4a:e0:
80:61:9c:11:42:64:21:c3:2f:99:06:b2:ec:8b:ee:f4:da:db:
ec:77:cf:be:1f:3f:2c:86:cc:2b:2b:86:49:fc:3c:bb:32:f8:
54:75:b7:92:a6:29:d8:50:62:f1:87:07:31:dc:40:ca:45:8b:
49:27:c9:1f:a5:44:8c:b1:11:29:e8:a6:56:3a:4c:04:3b:aa:
a4:25:01:62:5e:96:80:38:b5:61:45:61:f0:d6:9c:0d:04:16:
06:d1:b0:0d:6b:5a:44:bd:74:41:7b:62:e5:0c:1b:f0:92:54:
4a:bf:ad:45:5c:16:26:6c:90:3a:ea:37:08:1c:71:08:fa:ed:
b3:49:9b:5d:cc:e8:74:43:1a:a1:0d:cf:74:b2:7f:a0:bd:9d:
a0:cf:b0:2b:34:58:fc:b0:ed:32:0d:dc:79:47:1a:00:49:cb:
11:64:d6:73:ff:8d:86:43:0c:39:c5:e9:ad:d2:90:03:ed:ba:
6b:e1:06:da:93:20:8a:b5:d2:76:ee:ad:7c:cd:1d:77:8d:7e:
6f:df:ff:c4:29:80:04:b7:58:6d:ef:9c:7b:36:41:f1:0e:15:
34:34:5a:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:06 2024 by rpki-client on console-fra.rpki-client.org