Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3138302e302f32342d3234203d3e203234323033.roa
File: 3134302e3231332e3138302e302f32342d3234203d3e203234323033.roa (raw, json)
Hash identifier: o2dYE+UDnwMpbV07ePN9WLoWbu8t7jDci9b3gBG2mnc=
Subject key identifier: 63:30:65:85:6E:C1:8E:DA:0E:D2:13:27:AC:C3:F2:6C:4B:6D:54:D6
Certificate issuer: /CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B
Certificate serial: 6CEDD0D046388BEAC998DBB02F38F38AEDF4E1AD
Authority key identifier: 10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3138302e302f32342d3234203d3e203234323033.roa
Signing time: Wed 20 Apr 2022 05:00:00 +0000
ROA not before: Wed 20 Apr 2022 04:55:00 +0000
ROA not after: Wed 19 Apr 2023 05:00:00 +0000
asID: 24203
IP address blocks: 140.213.180.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:ed:d0:d0:46:38:8b:ea:c9:98:db:b0:2f:38:f3:8a:ed:f4:e1:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B
Validity
Not Before: Apr 20 04:55:00 2022 GMT
Not After : Apr 19 05:00:00 2023 GMT
Subject: CN=633065856EC18EDA0ED21327ACC3F26C4B6D54D6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a6:8b:a4:93:04:87:24:8e:a3:b4:00:a4:1b:
d6:b6:6a:06:c9:12:fc:9a:9c:a8:63:ae:56:d9:4b:
67:14:c5:80:a4:30:9f:00:40:9d:04:cf:42:68:22:
44:ad:86:a5:d8:96:9e:32:38:db:ae:3b:65:b8:ed:
2b:dd:93:f0:d0:f9:6e:3f:44:b4:e7:bc:91:8f:0a:
13:94:ed:1f:2c:00:99:cc:29:5e:d9:cf:db:cb:61:
7b:2d:08:78:64:bd:80:37:fa:bb:87:37:ca:7c:49:
1e:19:8e:47:1f:18:ea:6d:9b:b0:fe:3f:78:b6:80:
97:d1:e9:63:d9:1c:23:f0:f1:4b:88:6c:02:81:68:
82:fa:39:4a:21:d8:b9:64:2e:92:8a:c1:d8:85:4e:
30:5e:e8:48:8c:dd:70:79:ff:0c:e5:18:9c:5b:37:
1a:8c:b7:f0:7c:7a:4c:d6:b9:d5:24:0d:57:33:1a:
84:89:95:56:97:cd:9f:f7:4a:78:73:31:f5:89:de:
7c:b4:75:9b:9f:0d:0e:e9:5e:cf:1c:93:df:34:26:
f8:eb:a9:2a:c8:41:39:11:57:fd:5f:8f:4e:96:37:
98:c6:27:2a:c0:e5:9f:c5:b8:8c:7c:72:39:64:9f:
e8:ad:ab:4b:ca:30:16:22:c6:21:9a:b2:c4:65:93:
95:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:30:65:85:6E:C1:8E:DA:0E:D2:13:27:AC:C3:F2:6C:4B:6D:54:D6
X509v3 Authority Key Identifier:
keyid:10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3138302e302f32342d3234203d3e203234323033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.213.180.0/24
Signature Algorithm: sha256WithRSAEncryption
01:75:0d:4d:5e:b4:dd:70:94:dc:08:81:f0:c8:54:d3:e0:00:
ae:db:ee:eb:18:d1:bc:e2:e1:0e:09:c4:e4:64:5a:14:57:79:
cd:80:9a:21:c7:6c:dc:f0:05:ce:33:8f:c4:f0:df:e0:dd:3f:
dc:8f:37:48:cf:e7:6e:81:7d:71:0f:85:e0:ba:6e:99:41:32:
74:6c:77:db:38:d8:3e:95:fe:6c:a5:d7:2e:23:bb:42:bb:b8:
b6:65:6c:79:92:dd:32:aa:a3:85:1e:5a:03:30:f5:f8:15:76:
e5:7c:e6:5a:99:c9:f8:2a:f0:c1:79:b7:03:50:64:e8:05:71:
98:0a:ad:80:1b:c7:c9:1b:b8:f4:97:4f:9a:52:8a:54:f4:1e:
58:7e:99:31:b3:74:45:de:a0:de:ce:20:16:c0:30:7e:aa:17:
0e:85:8c:46:f8:fc:a3:4a:48:b6:f3:2f:af:88:bb:90:61:08:
a6:ff:a6:f8:6f:c1:55:57:75:e1:ab:d4:85:fd:2a:92:66:9c:
71:92:89:40:4c:1f:6e:ab:e4:dc:23:33:c8:54:76:b5:9b:1f:
66:e2:71:c5:8b:35:0a:e6:3d:88:6a:18:62:12:88:42:68:82:
f8:99:2f:d5:ca:a2:4e:b7:a9:3d:74:f4:bc:c4:c4:7a:8d:3a:
d8:2b:0a:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:40 2024 by rpki-client on console-ams.rpki-client.org