Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3137372e302f32342d3234203d3e203234323033.roa
File: 3134302e3231332e3137372e302f32342d3234203d3e203234323033.roa (raw, json)
Hash identifier: 7Lcr4UxdSvFDJCP5FhOD0DUeK41Dj0f1ihvpjt9vdjQ=
Subject key identifier: 02:38:EE:3E:73:B9:C2:03:D8:CA:3B:F6:58:58:A9:0A:F1:FA:D8:12
Certificate issuer: /CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B
Certificate serial: 5E95D26B7C5C2D13053188D58E244CD774AE0843
Authority key identifier: 10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3137372e302f32342d3234203d3e203234323033.roa
Signing time: Wed 20 Apr 2022 05:00:04 +0000
ROA not before: Wed 20 Apr 2022 04:55:04 +0000
ROA not after: Wed 19 Apr 2023 05:00:04 +0000
asID: 24203
IP address blocks: 140.213.177.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5e:95:d2:6b:7c:5c:2d:13:05:31:88:d5:8e:24:4c:d7:74:ae:08:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B
Validity
Not Before: Apr 20 04:55:04 2022 GMT
Not After : Apr 19 05:00:04 2023 GMT
Subject: CN=0238EE3E73B9C203D8CA3BF65858A90AF1FAD812
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:ff:c2:11:80:a3:31:28:79:90:92:89:40:58:
c0:d3:5d:45:fd:42:69:88:ff:85:2c:5f:92:62:f1:
8f:eb:f6:a4:3a:bf:8a:6f:fd:3d:51:8a:6f:e1:aa:
ca:1d:e0:37:18:60:d0:d1:f9:d6:6b:25:3b:40:cd:
82:7b:57:65:ca:2c:37:07:58:ea:3d:56:ab:95:10:
46:d0:93:2d:14:17:4a:0c:59:6f:77:8c:85:28:78:
42:e2:fb:7e:c9:ca:ab:06:5b:7f:54:9d:d9:f6:7f:
05:07:47:5d:98:fb:1d:f6:03:8a:a8:ba:34:c9:01:
b4:08:29:8d:79:c0:b6:47:b4:27:71:d5:08:ff:01:
85:1b:b7:5d:89:af:33:57:60:e1:12:d1:e0:26:a8:
18:92:0a:c6:15:b6:df:c5:01:f2:03:f9:4f:6a:0e:
f0:ee:54:7d:c6:e2:dd:ea:1e:bf:21:e9:b7:c7:29:
d4:89:96:98:06:1b:4a:76:58:4e:65:63:5b:fa:7a:
22:f4:f1:1d:eb:61:18:b7:ca:ea:0e:07:17:4d:e9:
9a:fe:3b:a6:9b:ad:b4:29:54:9a:12:87:e3:35:c2:
56:36:b2:ab:ad:64:ba:a3:12:69:13:34:62:bf:17:
16:85:bb:5d:01:53:7b:3a:63:60:96:8b:6a:a1:0d:
16:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:38:EE:3E:73:B9:C2:03:D8:CA:3B:F6:58:58:A9:0A:F1:FA:D8:12
X509v3 Authority Key Identifier:
keyid:10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3137372e302f32342d3234203d3e203234323033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.213.177.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:ea:17:fe:8a:89:e1:40:4f:3c:43:56:c9:5e:bc:64:3f:e0:
7f:c7:c5:52:80:2b:9a:2d:8a:51:fc:07:9b:01:b1:67:84:45:
0f:19:5b:7d:90:1e:be:2f:39:e7:1a:2b:5e:59:06:2f:84:67:
a0:f7:6c:20:70:33:1a:33:a4:4a:5a:9a:ef:a1:99:1c:ab:1a:
29:99:bd:90:3d:8c:81:6b:79:1e:74:30:17:9c:94:56:19:83:
f0:ea:7f:da:7b:e9:87:8e:0f:60:e2:43:0e:18:b5:0b:95:af:
5c:bd:e1:53:74:92:16:a8:1a:3b:94:23:b5:9c:e5:c5:76:f2:
f4:0e:50:5e:7d:f7:9a:51:49:f5:d9:0b:c5:d3:f1:a6:4a:3b:
0a:73:23:51:df:b0:c1:7f:e3:51:cb:97:23:a4:ed:ae:00:ec:
73:f9:35:c1:65:76:72:be:23:5e:7a:cf:a0:4a:a9:d9:6e:47:
32:da:d4:21:ee:47:55:67:51:50:c2:96:ef:4e:de:21:24:a9:
d3:2f:76:0a:5b:92:bc:28:9a:6a:39:d5:2c:e2:a8:20:f1:b1:
cc:8a:89:e5:13:3a:a3:18:a0:fc:7a:77:d2:ad:5e:0f:30:31:
87:82:d9:41:26:54:20:9f:00:34:d4:f5:62:24:96:46:6d:46:
f9:8b:70:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:06 2024 by rpki-client on console-fra.rpki-client.org