Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3138332e302f32342d3234203d3e203234323033.roa
File: 3134302e3231332e3138332e302f32342d3234203d3e203234323033.roa (raw, json)
Hash identifier: FkMEibSoh6vS9FmWYYnzoQi0u4bgZ4CotJxvZiXfwok=
Subject key identifier: 8E:2C:5D:DE:C8:BC:B1:B8:5C:CC:FC:96:8A:E1:10:31:24:22:26:33
Certificate issuer: /CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B
Certificate serial: 789CA8415754B0DB3FABADED8647DAD92B5CD158
Authority key identifier: 10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3138332e302f32342d3234203d3e203234323033.roa
Signing time: Wed 20 Apr 2022 05:00:04 +0000
ROA not before: Wed 20 Apr 2022 04:55:04 +0000
ROA not after: Wed 19 Apr 2023 05:00:04 +0000
asID: 24203
IP address blocks: 140.213.183.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
78:9c:a8:41:57:54:b0:db:3f:ab:ad:ed:86:47:da:d9:2b:5c:d1:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B
Validity
Not Before: Apr 20 04:55:04 2022 GMT
Not After : Apr 19 05:00:04 2023 GMT
Subject: CN=8E2C5DDEC8BCB1B85CCCFC968AE1103124222633
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:c8:29:ab:f4:d8:21:c7:51:92:d3:18:69:00:
82:de:0b:82:8e:81:d0:0f:b7:7c:cd:b7:c3:45:91:
04:18:da:f0:9b:37:04:68:46:f9:21:41:50:42:1f:
97:1d:9e:15:dd:42:96:8e:71:17:22:3a:4d:3f:27:
18:ce:76:ee:11:45:ab:18:ea:e7:1f:c8:9b:c3:a8:
8b:58:ba:c1:46:0b:2a:1b:ee:9d:bc:57:be:d3:2a:
81:7c:65:e7:0c:ea:31:f0:e0:ed:94:d8:7f:50:b7:
52:a4:90:3d:d4:03:8a:5c:12:9b:ae:41:51:84:31:
b8:de:70:1b:fa:07:4b:3f:e9:c6:d2:e7:95:8c:66:
07:34:8b:41:a3:bb:04:39:2f:11:6e:c7:77:f1:83:
ea:61:6c:ce:73:9e:ee:37:29:05:30:44:4b:74:2e:
21:92:c3:ad:bd:ee:f1:b9:d4:cf:6a:ee:e2:53:bf:
09:f6:33:a4:90:cc:73:b6:d0:77:37:1b:5b:ea:95:
79:5e:6c:2e:5b:23:06:2e:0f:cc:d7:e0:b6:dc:74:
58:a7:c8:d2:8f:42:b9:4a:f2:2f:74:00:1b:60:5e:
0e:d2:bc:c2:47:d6:4a:be:f0:17:8a:c8:ab:76:2a:
71:87:ac:26:03:0d:02:84:bc:3a:1b:39:26:69:aa:
82:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:2C:5D:DE:C8:BC:B1:B8:5C:CC:FC:96:8A:E1:10:31:24:22:26:33
X509v3 Authority Key Identifier:
keyid:10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3138332e302f32342d3234203d3e203234323033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.213.183.0/24
Signature Algorithm: sha256WithRSAEncryption
09:32:9d:d3:57:1b:38:90:ea:3d:54:16:13:cb:fd:0e:25:f3:
5f:09:36:4f:8c:59:79:db:5d:9d:75:6f:47:31:3c:45:82:51:
2d:eb:97:05:09:f0:07:10:e1:2f:9d:4b:7e:47:77:d6:6a:76:
a7:ae:d9:44:a5:92:a4:31:ca:43:f1:11:42:e6:d9:e8:d8:87:
cf:1f:f3:8a:73:cd:05:c9:b2:49:53:21:91:68:bb:f8:3c:d7:
ce:cf:ea:fe:4f:55:4b:9b:52:1c:c0:e1:33:4d:11:b4:ba:e8:
4f:34:d1:ce:64:76:7e:89:86:f2:35:65:fc:80:6d:eb:15:d8:
46:08:ae:30:7c:83:61:50:ad:e6:eb:95:47:92:b1:4e:06:58:
98:72:3f:6e:fb:c7:ee:59:70:a7:de:2b:5f:2f:2b:85:00:23:
f5:52:cf:81:e0:55:8f:a1:b4:15:67:f2:a5:6f:e9:c5:84:a6:
a3:d6:51:86:ed:28:e8:24:9a:c9:29:d3:ff:80:69:f1:8c:2e:
a7:5b:32:c3:65:e8:b0:1d:54:3a:e1:f7:c8:69:26:b6:6c:7d:
bc:1b:ba:25:7a:9e:44:a7:1e:a6:3d:47:f3:51:8d:e1:9c:38:
8c:71:14:d1:49:8f:63:67:cf:ef:2b:b4:3a:8c:1f:f1:d4:f8:
cd:9a:a4:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:40 2024 by rpki-client on console-ams.rpki-client.org