Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3139302e302f32342d3234203d3e203137383835.roa
File: 3134302e3231332e3139302e302f32342d3234203d3e203137383835.roa (raw, json)
Hash identifier: KlJFZSbxg8jk17tjhDzrHsI145rcxgxriLw26UTV5N0=
Subject key identifier: 4D:D6:0F:30:76:88:F1:67:2A:63:50:B7:50:37:B3:AA:1E:04:A6:CC
Certificate issuer: /CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B
Certificate serial: 655A5207D332FF3B2072E12C8E457BFD75426174
Authority key identifier: 10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3139302e302f32342d3234203d3e203137383835.roa
Signing time: Wed 20 Apr 2022 06:00:02 +0000
ROA not before: Wed 20 Apr 2022 05:55:02 +0000
ROA not after: Wed 19 Apr 2023 06:00:02 +0000
asID: 17885
IP address blocks: 140.213.190.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:5a:52:07:d3:32:ff:3b:20:72:e1:2c:8e:45:7b:fd:75:42:61:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B
Validity
Not Before: Apr 20 05:55:02 2022 GMT
Not After : Apr 19 06:00:02 2023 GMT
Subject: CN=4DD60F307688F1672A6350B75037B3AA1E04A6CC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:7f:8a:f7:00:42:21:54:fb:14:e6:76:d4:d5:
f3:62:5b:3f:9b:8c:62:10:89:ad:d6:44:7f:0d:04:
ce:59:12:b3:5b:78:68:41:69:9f:fe:74:1e:6e:35:
5a:d6:00:cb:86:de:9e:55:78:fc:86:e8:3e:cc:a3:
33:ad:17:11:db:8a:7c:b8:bb:29:59:45:62:e0:81:
e9:bf:7f:cc:d3:f2:a8:ce:7b:51:1a:cd:0e:a5:da:
80:74:03:ac:43:11:98:0f:c5:c4:b4:7b:fb:fe:d7:
90:5a:80:d9:bf:66:34:a8:61:7c:fd:8d:50:42:89:
e1:4e:6f:6d:17:54:21:de:b5:a3:44:4e:08:8c:0a:
f5:08:dc:18:b9:30:a1:80:9a:02:0a:1e:b0:3b:84:
08:c8:03:ce:9a:db:b8:40:1b:2a:48:7d:cf:a1:99:
3d:c0:18:ef:23:52:1b:ce:1a:be:56:c1:f5:53:40:
de:84:29:c4:5d:49:b0:60:f7:bc:07:d9:4f:ea:9e:
1e:0c:b2:22:63:e6:06:d7:c2:05:a9:2e:51:61:d1:
09:6b:f8:bb:a1:f9:bf:e3:74:34:15:5f:ee:c1:2a:
bb:c5:f6:6d:c9:b9:77:83:4d:b5:d6:5a:35:83:24:
c8:d4:db:f9:fa:b3:b7:64:e6:87:46:fb:03:c7:08:
8c:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:D6:0F:30:76:88:F1:67:2A:63:50:B7:50:37:B3:AA:1E:04:A6:CC
X509v3 Authority Key Identifier:
keyid:10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3139302e302f32342d3234203d3e203137383835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.213.190.0/24
Signature Algorithm: sha256WithRSAEncryption
c6:10:99:a2:e5:28:cf:de:c9:9e:94:d3:97:3e:d3:8e:1f:81:
06:77:57:18:70:f4:66:6c:42:cd:18:5a:db:bc:2f:0a:94:15:
e2:8e:6f:2c:84:1f:38:74:0e:ac:44:05:b1:6e:d8:3a:38:e2:
d2:fb:ed:88:32:89:d6:74:19:89:74:24:54:68:a8:40:82:4b:
10:55:6c:e0:82:b9:6a:e0:ff:67:29:4d:83:99:11:5a:34:34:
c3:f3:09:15:8d:ca:0a:c8:b4:59:c5:e1:52:6b:48:c2:03:7e:
cc:3f:12:1b:31:88:bf:dd:a2:2c:56:72:ed:97:d4:eb:55:65:
b9:18:54:1d:84:ba:73:b1:f6:5d:85:2f:69:b4:fb:b8:f8:08:
86:07:2d:ab:62:5f:0c:d7:a4:4f:74:83:da:64:e2:6a:42:53:
36:35:1d:dc:3e:66:b1:96:0b:f3:11:e3:3a:af:d4:30:cc:5b:
8d:7a:79:1c:82:60:9f:98:e0:64:c8:b0:2c:69:33:b8:36:78:
14:d1:0a:99:22:0a:e4:ef:2e:75:f3:cf:53:8c:5c:bc:71:84:
df:03:3b:a6:62:ab:89:66:ab:ec:d1:8b:e3:49:f1:21:f3:8d:
f0:9c:a7:3f:f3:9e:66:2c:09:4d:ef:c5:96:a5:81:7c:c1:4d:
1d:ba:60:5c
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUZVpSB9My/zsgcuEsjkV7/XVCYXQwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTBCQUI3OTA3RDk1M0EwRDVGREVCNUMyMEM5RjI5QkNG
QzY2MEExQjAeFw0yMjA0MjAwNTU1MDJaFw0yMzA0MTkwNjAwMDJaMDMxMTAvBgNV
BAMTKDRERDYwRjMwNzY4OEYxNjcyQTYzNTBCNzUwMzdCM0FBMUUwNEE2Q0MwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSf4r3AEIhVPsU5nbU1fNiWz+b
jGIQia3WRH8NBM5ZErNbeGhBaZ/+dB5uNVrWAMuG3p5VePyG6D7MozOtFxHbiny4
uylZRWLggem/f8zT8qjOe1EazQ6l2oB0A6xDEZgPxcS0e/v+15BagNm/ZjSoYXz9
jVBCieFOb20XVCHetaNETgiMCvUI3Bi5MKGAmgIKHrA7hAjIA86a27hAGypIfc+h
mT3AGO8jUhvOGr5WwfVTQN6EKcRdSbBg97wH2U/qnh4MsiJj5gbXwgWpLlFh0Qlr
+Luh+b/jdDQVX+7BKrvF9m3JuXeDTbXWWjWDJMjU2/n6s7dk5odG+wPHCIxPAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUTdYPMHaI8WcqY1C3UDezqh4EpswwHwYDVR0j
BBgwFoAUELq3kH2VOg1f3rXCDJ8pvPxmChswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80
YmRiMWUwYS1hNGVjLTQ5ZGItYmU4OS04ZDdlN2ZjMmMyMjcvMS8xMEJBQjc5MDdE
OTUzQTBENUZERUI1QzIwQzlGMjlCQ0ZDNjYwQTFCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzEvMTBCQUI3OTA3RDk1M0EwRDVGREVCNUMyMEM5RjI5QkNGQzY2
MEExQi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzRiZGIxZTBhLWE0ZWMtNDlkYi1i
ZTg5LThkN2U3ZmMyYzIyNy8xLzMxMzQzMDJlMzIzMTMzMmUzMTM5MzAyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzMTM3MzgzODM1LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAjNW+MA0GCSqG
SIb3DQEBCwUAA4IBAQDGEJmi5SjP3smelNOXPtOOH4EGd1cYcPRmbELNGFrbvC8K
lBXijm8shB84dA6sRAWxbtg6OOLS++2IMonWdBmJdCRUaKhAgksQVWzggrlq4P9n
KU2DmRFaNDTD8wkVjcoKyLRZxeFSa0jCA37MPxIbMYi/3aIsVnLtl9TrVWW5GFQd
hLpzsfZdhS9ptPu4+AiGBy2rYl8M16RPdIPaZOJqQlM2NR3cPmaxlgvzEeM6r9Qw
zFuNenkcgmCfmOBkyLAsaTO4NngU0QqZIgrk7y51889TjFy8cYTfAzumYquJZqvs
0YvjSfEh843wnKc/855mLAlN78WWpYF8wU0dumBc
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:06 2024 by rpki-client on console-fra.rpki-client.org