Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3138312e302f32342d3234203d3e203234323033.roa
File: 3134302e3231332e3138312e302f32342d3234203d3e203234323033.roa (raw, json)
Hash identifier: t34rX2YfO4Bubj0LRkkYq1DXylE9HsNmqsBVMwYZ3as=
Subject key identifier: 5C:D4:3A:9A:3C:9C:0B:C1:69:72:65:32:63:A3:19:8E:8C:C7:42:1C
Certificate issuer: /CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B
Certificate serial: 229A105EEDB18471FC4146C1E77DE37F07ACB5AF
Authority key identifier: 10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3138312e302f32342d3234203d3e203234323033.roa
Signing time: Wed 20 Apr 2022 05:00:04 +0000
ROA not before: Wed 20 Apr 2022 04:55:04 +0000
ROA not after: Wed 19 Apr 2023 05:00:04 +0000
asID: 24203
IP address blocks: 140.213.181.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
22:9a:10:5e:ed:b1:84:71:fc:41:46:c1:e7:7d:e3:7f:07:ac:b5:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B
Validity
Not Before: Apr 20 04:55:04 2022 GMT
Not After : Apr 19 05:00:04 2023 GMT
Subject: CN=5CD43A9A3C9C0BC16972653263A3198E8CC7421C
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:1c:1b:0e:0a:84:3c:97:f4:a7:d6:17:59:84:
97:24:0b:4c:c0:f5:7c:d7:01:ee:4f:0a:0c:67:89:
14:90:04:18:82:da:60:7a:b2:b8:34:70:28:ef:a3:
d1:cf:69:d7:ea:5e:70:44:3a:d7:d2:1d:4b:96:36:
b4:f3:c5:3a:e9:f4:8e:24:60:78:85:a2:36:68:96:
cc:2b:48:9c:b4:28:47:13:f9:4f:8a:e2:a1:c2:6c:
00:42:58:be:8b:1a:67:7f:5e:74:dd:aa:49:3d:bf:
32:08:5b:15:cc:39:dd:ac:bb:3e:d1:9a:bf:46:42:
e7:b9:23:98:19:8d:21:9e:94:76:e4:a4:7b:69:ab:
02:bc:16:a0:b3:a3:58:39:38:f9:22:22:70:5b:8f:
c6:15:c5:77:51:9e:ba:d8:37:9c:83:1b:33:ec:1a:
3f:67:9a:7d:61:ef:57:1e:25:31:60:3a:d0:59:33:
94:84:01:84:fa:30:1b:01:bf:ac:ba:26:d6:b7:2e:
b2:63:f4:31:cb:0e:74:4f:38:a8:56:36:d3:38:c4:
bf:41:4e:b4:45:6e:30:4c:3c:40:a7:ed:e3:8c:7c:
ee:dc:7b:62:ad:0a:31:48:5c:bd:b5:af:ae:67:aa:
ea:72:f4:9f:bd:11:10:a4:9a:bc:38:5a:e3:da:e3:
62:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:D4:3A:9A:3C:9C:0B:C1:69:72:65:32:63:A3:19:8E:8C:C7:42:1C
X509v3 Authority Key Identifier:
keyid:10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3138312e302f32342d3234203d3e203234323033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.213.181.0/24
Signature Algorithm: sha256WithRSAEncryption
59:ad:d3:c9:d5:0e:de:b1:e2:54:58:78:cb:95:ac:64:81:07:
5f:81:e3:9c:74:cc:8a:5e:be:6b:72:46:2c:c1:11:0f:fb:9d:
d9:a5:9b:5c:2c:35:9b:96:bc:a0:29:29:dd:05:90:6e:56:54:
ab:6d:40:34:ec:30:cd:7b:75:20:5f:58:86:81:6b:da:6e:0e:
55:de:70:1d:ca:78:b1:fc:a5:d3:05:e3:f1:8e:02:41:f0:7c:
21:70:26:77:ec:9d:a2:01:17:da:ba:b5:7f:60:f6:9c:ef:a3:
ee:95:af:9b:70:8c:9d:5f:50:c5:64:41:67:73:bb:71:74:55:
41:3c:19:00:a0:47:8c:ba:a4:7f:3b:22:f2:c3:34:77:92:a4:
1f:50:b7:ba:df:34:62:1f:5b:54:f7:66:67:ae:e7:8e:68:4b:
8d:25:44:22:7b:51:89:03:7f:9b:97:42:3e:42:25:a9:1f:9a:
90:89:27:db:60:b2:4a:d8:62:02:02:11:14:bf:14:c4:47:a1:
3e:9f:81:a4:0c:28:a9:29:63:c1:3d:ee:b4:e0:ff:4b:81:8c:
de:e6:01:ec:3a:c7:15:4a:62:50:67:eb:bc:ce:4c:99:3c:7a:
77:9a:d7:df:d5:4b:74:c1:3a:71:d5:9c:7c:d8:56:43:c9:73:
1a:0d:2d:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:40 2024 by rpki-client on console-ams.rpki-client.org