Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e32322e302f32342d3234203d3e203234323033.roa
File: 3134302e3231332e32322e302f32342d3234203d3e203234323033.roa (raw, json)
Hash identifier: 8il9hx0cf03Xbdh+IGQN0mQbIntMz3FafSsUMC5w3vc=
Subject key identifier: 23:80:E4:26:45:49:5D:27:47:8C:FC:8E:13:22:0F:9E:0F:C3:F1:E9
Certificate issuer: /CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B
Certificate serial: 07B0980FF41E43E373FA29E6BDE4599E7AE94162
Authority key identifier: 10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e32322e302f32342d3234203d3e203234323033.roa
Signing time: Tue 19 Apr 2022 05:00:00 +0000
ROA not before: Tue 19 Apr 2022 04:55:00 +0000
ROA not after: Tue 18 Apr 2023 05:00:00 +0000
asID: 24203
IP address blocks: 140.213.22.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:b0:98:0f:f4:1e:43:e3:73:fa:29:e6:bd:e4:59:9e:7a:e9:41:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B
Validity
Not Before: Apr 19 04:55:00 2022 GMT
Not After : Apr 18 05:00:00 2023 GMT
Subject: CN=2380E42645495D27478CFC8E13220F9E0FC3F1E9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:5b:b4:cc:81:16:03:06:81:ab:c1:07:e8:05:
f1:aa:18:5c:3e:59:83:51:6a:29:77:21:02:5f:15:
16:1e:55:0d:95:48:02:9b:10:ea:0a:7c:39:9c:e5:
77:99:c1:fb:d1:36:94:8f:0d:81:9e:5d:9f:42:96:
85:09:de:df:99:5e:31:0d:20:f2:f4:32:29:75:6e:
ee:54:b3:06:a3:d7:92:36:2b:76:f7:e2:18:a6:b3:
ca:57:6d:a5:44:90:cb:ad:d9:24:d1:b9:e9:ac:05:
ff:9d:c4:2b:93:ac:59:7f:49:eb:f4:1c:d4:9c:01:
98:02:a3:7d:c1:1e:ab:da:46:2e:83:d1:68:a3:b8:
ef:f3:75:23:4c:0d:1a:51:aa:41:9f:14:d4:49:1d:
98:ba:fc:d8:9b:35:c8:7e:84:82:63:1e:a3:4c:81:
e5:c0:18:93:6d:c5:b5:f5:bf:91:f1:ad:ee:79:8e:
ad:ef:aa:1c:e5:01:3a:bb:2d:ea:b3:f6:57:90:ea:
b2:b7:4b:20:2d:fc:7f:66:3e:c6:cc:02:82:f9:af:
d6:a1:29:1c:71:a3:81:e4:7a:f4:d9:f7:d1:99:62:
d9:48:83:78:5c:3c:df:57:2c:e7:a2:2c:06:76:26:
6d:12:0f:a9:bc:14:1c:8c:ca:78:77:2e:ce:f3:16:
44:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:80:E4:26:45:49:5D:27:47:8C:FC:8E:13:22:0F:9E:0F:C3:F1:E9
X509v3 Authority Key Identifier:
keyid:10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e32322e302f32342d3234203d3e203234323033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.213.22.0/24
Signature Algorithm: sha256WithRSAEncryption
35:d9:4c:79:3a:2b:c7:a8:28:30:08:ab:78:09:68:c2:6b:ce:
13:24:cc:1b:a9:bf:16:41:4a:f6:73:f9:34:80:76:d7:39:59:
fb:e0:14:dc:41:58:94:43:c7:71:c0:00:9a:cb:19:fe:4f:b9:
07:5b:91:8a:99:f6:f8:4e:60:8a:7f:2a:a0:aa:7d:36:03:1e:
7f:6c:86:f3:70:cd:2e:9a:1b:da:3a:cf:dc:7e:4e:0e:e8:03:
40:5c:97:dd:d1:ba:6a:44:8f:43:24:3b:c5:47:d4:17:f9:7b:
f1:58:9d:0b:7d:07:56:22:b4:be:9c:1d:c0:88:83:0c:34:16:
33:f8:e0:6b:80:d7:9a:1d:67:c9:69:28:68:c5:08:21:07:36:
e2:d9:e1:83:d7:40:16:c7:66:44:4e:d5:b5:ce:db:d2:e0:c1:
8c:d6:76:55:15:9c:88:a1:7f:61:67:b3:cc:3b:ea:a6:9d:71:
6b:95:43:a5:c7:4e:29:c0:d6:21:78:1f:17:b7:f8:d1:1b:32:
69:69:d2:84:00:57:f8:ce:7e:36:8c:9d:ec:2d:60:87:f6:ca:
09:c7:a3:28:53:15:9f:e7:90:18:df:c8:25:79:28:7d:f0:c1:
9f:c4:a9:d2:b3:3c:b2:52:dc:c2:58:f7:bc:31:7d:1a:46:26:
8b:8e:a5:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:40 2024 by rpki-client on console-ams.rpki-client.org