Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e32342e302f32342d3234203d3e203234323033.roa
File: 3134302e3231332e32342e302f32342d3234203d3e203234323033.roa (raw, json)
Hash identifier: GbBS84+TrFTGWJbft6glcNb5LDjwx/zPC7+IcypgFz4=
Subject key identifier: EB:29:EE:0D:E4:12:D6:AF:C1:9E:7E:C7:DA:29:EA:C4:A1:A4:07:91
Certificate issuer: /CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B
Certificate serial: 615D8D3C7D0646C5B448A4F7234CC2D958FBECA3
Authority key identifier: 10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e32342e302f32342d3234203d3e203234323033.roa
Signing time: Tue 19 Apr 2022 05:00:00 +0000
ROA not before: Tue 19 Apr 2022 04:55:00 +0000
ROA not after: Tue 18 Apr 2023 05:00:00 +0000
asID: 24203
IP address blocks: 140.213.24.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
61:5d:8d:3c:7d:06:46:c5:b4:48:a4:f7:23:4c:c2:d9:58:fb:ec:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B
Validity
Not Before: Apr 19 04:55:00 2022 GMT
Not After : Apr 18 05:00:00 2023 GMT
Subject: CN=EB29EE0DE412D6AFC19E7EC7DA29EAC4A1A40791
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:a3:ce:1b:ef:28:3f:04:84:58:ea:73:df:b5:
ef:0e:87:19:39:0e:4b:52:04:76:2e:12:35:79:e6:
a0:30:51:17:36:9e:40:88:91:3d:89:76:1a:9c:f6:
9a:b7:29:62:ee:a0:fd:f4:cb:eb:a4:58:9e:0f:6f:
5e:29:ef:f2:88:93:53:fb:75:b0:f8:b1:0c:a4:b2:
7a:5a:84:c0:82:db:ef:ef:f8:5c:bd:2e:fa:c8:0b:
ed:a5:2d:c9:a1:41:92:13:e2:ad:6c:12:71:d6:ee:
b1:f2:8b:2c:70:f8:19:cd:00:20:dd:3c:76:ff:2c:
35:ea:5f:2c:b6:68:1b:33:e7:23:2e:fe:d7:0b:1c:
a5:28:8f:b7:f8:6e:0c:78:8d:2b:e8:1d:c6:b5:2d:
87:e3:f0:25:c5:f9:15:cf:45:0a:18:0f:85:74:f7:
3c:6b:6b:2a:18:fb:53:84:d1:9d:7c:31:8f:b1:19:
62:46:b3:7e:85:83:24:de:f2:39:1d:b3:95:b9:b5:
d2:49:47:e4:02:09:80:e8:04:39:28:08:e9:78:02:
f8:46:89:13:93:2d:c4:27:23:c8:ba:13:69:ae:47:
70:af:8f:2b:44:7f:52:73:16:6b:66:ee:24:81:c9:
68:27:86:b3:8a:fa:40:ec:0c:69:00:64:a6:e1:ff:
82:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:29:EE:0D:E4:12:D6:AF:C1:9E:7E:C7:DA:29:EA:C4:A1:A4:07:91
X509v3 Authority Key Identifier:
keyid:10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e32342e302f32342d3234203d3e203234323033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.213.24.0/24
Signature Algorithm: sha256WithRSAEncryption
18:5b:8c:ce:4d:dd:fd:39:fc:9b:8d:40:87:d3:ad:d6:4c:6f:
d1:27:d1:56:0c:69:70:5e:a0:2a:1a:82:d3:ea:87:70:b4:d9:
5e:3a:41:7c:89:71:a1:a9:2b:d1:01:86:75:49:80:84:35:3e:
7c:0b:6c:76:03:c6:57:0b:25:20:30:7f:d3:e4:cf:1f:fd:9c:
bd:7e:b5:a6:fa:92:74:bb:80:4b:6b:3b:17:63:e5:30:28:af:
9d:85:8b:f9:43:2f:aa:00:9a:56:55:a7:75:73:b9:d1:fe:17:
88:17:4a:5b:13:3e:ea:af:1f:76:81:d7:ee:45:69:29:f6:e8:
10:41:f9:d7:55:e9:2c:d0:33:9d:e4:de:bc:15:94:1c:aa:19:
eb:75:1a:af:a0:e2:1e:35:d8:cf:5f:c5:a5:da:86:55:09:c4:
d6:63:ad:b9:94:31:a3:24:a1:3c:c3:5f:80:44:11:77:b3:14:
b2:a5:dd:f6:fa:24:ee:fc:0b:5c:9d:13:b9:f3:57:f0:40:2e:
3a:27:c6:18:d2:95:a6:1e:3b:72:0e:d9:3e:f7:57:b9:f2:d0:
24:f2:3d:2f:07:4d:a9:f8:db:0c:e9:8d:84:b4:48:f5:fd:5b:
3c:49:c6:74:75:0b:4a:de:8e:c1:c3:3c:38:42:03:41:d8:54:
be:c6:0f:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:40 2024 by rpki-client on console-ams.rpki-client.org