Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3137392e302f32342d3234203d3e203234323033.roa
File: 3134302e3231332e3137392e302f32342d3234203d3e203234323033.roa (raw, json)
Hash identifier: WTPW0C4jNAFBoXXwnDSxoSkVq0DZY78gygtUS1Gajf8=
Subject key identifier: B7:18:B1:E5:EC:66:02:FF:BC:CD:11:9C:46:F0:50:6A:C9:89:A7:E2
Certificate issuer: /CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B
Certificate serial: 769D5D65E8EE8305221D17E00431C307252299A7
Authority key identifier: 10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3137392e302f32342d3234203d3e203234323033.roa
Signing time: Wed 20 Apr 2022 05:00:05 +0000
ROA not before: Wed 20 Apr 2022 04:55:05 +0000
ROA not after: Wed 19 Apr 2023 05:00:05 +0000
asID: 24203
IP address blocks: 140.213.179.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
76:9d:5d:65:e8:ee:83:05:22:1d:17:e0:04:31:c3:07:25:22:99:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B
Validity
Not Before: Apr 20 04:55:05 2022 GMT
Not After : Apr 19 05:00:05 2023 GMT
Subject: CN=B718B1E5EC6602FFBCCD119C46F0506AC989A7E2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:34:dc:fc:72:bc:95:b8:6d:17:6a:70:93:ce:
db:4f:79:9a:ec:cd:8c:a3:cc:44:97:57:f6:c0:db:
76:f6:87:86:fb:1c:63:4d:e9:b7:b6:b3:cc:47:fa:
5f:62:5a:e6:c8:60:52:28:87:d7:16:55:08:bb:96:
8a:2f:18:6b:47:ee:44:b6:9d:33:d8:60:d2:bc:ec:
dc:09:f0:fc:7a:14:0e:d1:59:0b:d4:19:cb:7a:43:
33:67:9b:d0:4e:43:58:d3:ba:f5:0d:7f:01:1d:36:
12:08:98:31:ad:7f:2a:87:41:6f:48:27:af:ee:2d:
7d:ca:94:f3:94:8d:5b:09:93:53:33:00:8d:e9:f9:
5c:b6:a8:13:0b:fc:54:12:dd:54:3b:46:3e:e7:49:
3b:97:1a:08:e6:92:f3:cf:5c:60:c8:aa:26:7e:3c:
db:5f:ef:9f:d8:6d:78:cf:ca:29:e6:a6:fe:bf:ab:
d9:58:38:c9:0b:72:c5:db:49:4f:45:2a:89:bc:46:
2d:69:a4:de:14:1d:8e:4f:d6:0c:ff:83:76:4a:ba:
f9:77:64:97:27:e4:10:1b:14:f1:e5:10:04:d2:9d:
43:ca:00:0f:f2:a9:11:b5:3a:3b:53:c4:1f:8f:e5:
0b:1f:06:71:bf:13:66:e4:ad:6e:3f:32:55:7a:a9:
77:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:18:B1:E5:EC:66:02:FF:BC:CD:11:9C:46:F0:50:6A:C9:89:A7:E2
X509v3 Authority Key Identifier:
keyid:10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3137392e302f32342d3234203d3e203234323033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.213.179.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:76:46:0b:29:f0:c6:80:24:e4:c0:30:56:68:dd:f1:3b:76:
c9:c5:44:b5:f7:c2:f9:c1:e6:a6:e1:af:9a:1a:d2:3b:5b:8a:
86:2a:27:a9:d0:c3:a3:9f:f0:c7:13:29:13:f2:e7:fb:d1:b9:
9f:e8:3d:fc:72:9e:b0:08:0c:28:44:72:5a:de:a8:89:10:aa:
37:fb:4e:a5:9e:2d:40:3d:75:1c:15:db:b4:9d:0c:1a:be:94:
56:d3:47:0f:37:85:1c:e2:ee:cb:63:b6:39:8f:04:65:f9:bf:
5e:5f:3a:e0:6f:d9:2f:10:d9:cd:ad:2b:6b:16:fa:3b:8b:58:
f2:1e:7b:8e:77:18:74:26:f2:b7:d8:96:d9:6f:c2:60:0d:f1:
0f:dd:5f:a8:4c:d6:b0:92:2e:3a:82:75:23:e3:22:18:9c:d5:
34:a2:16:b5:56:bc:5b:3f:2b:ce:e9:57:42:84:2f:a3:5e:84:
ca:0a:2e:03:d1:51:f8:e7:05:b1:9a:fa:21:cd:0a:3e:5d:00:
1d:4e:03:7c:86:be:9d:4a:53:00:e1:96:78:a4:80:2a:f2:e5:
54:0f:1f:57:54:c7:55:da:9b:76:7c:f1:2b:e4:5d:6f:5d:a2:
e5:16:63:9e:67:d6:3e:4d:dc:c4:a2:19:b3:9c:ee:7d:94:3b:
73:ea:50:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:06 2024 by rpki-client on console-fra.rpki-client.org