Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e332e302f32342d3234203d3e203234323033.roa
File: 3134302e3231332e332e302f32342d3234203d3e203234323033.roa (raw, json)
Hash identifier: 21lyNEmVw9AIPF+ZLhIryYsgAMyDpsYEGdVeA9b/qv0=
Subject key identifier: 04:57:71:8C:A8:07:66:83:85:38:06:C2:A5:71:DC:0C:BC:C2:A0:30
Certificate issuer: /CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B
Certificate serial: 527A1C7AF24D8513EB06479F12DF2F926F66F693
Authority key identifier: 10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e332e302f32342d3234203d3e203234323033.roa
Signing time: Wed 13 Apr 2022 08:00:03 +0000
ROA not before: Wed 13 Apr 2022 07:55:03 +0000
ROA not after: Wed 12 Apr 2023 08:00:03 +0000
asID: 24203
IP address blocks: 140.213.3.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
52:7a:1c:7a:f2:4d:85:13:eb:06:47:9f:12:df:2f:92:6f:66:f6:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B
Validity
Not Before: Apr 13 07:55:03 2022 GMT
Not After : Apr 12 08:00:03 2023 GMT
Subject: CN=0457718CA8076683853806C2A571DC0CBCC2A030
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:56:67:98:7e:a5:25:3f:30:04:7f:1b:88:dd:
2f:be:90:0a:0e:e5:d0:99:20:2f:8e:53:75:c3:06:
9e:34:64:22:62:e2:b3:38:7c:81:1b:25:0a:b9:31:
e9:b4:f1:90:7b:c6:ed:fe:57:f0:93:b7:bc:b7:ed:
56:6a:f3:1f:08:d7:27:e2:82:3a:8e:b9:6d:bf:eb:
37:73:b8:cf:83:6f:c2:e3:8d:b6:70:ad:20:15:e0:
c0:29:fd:91:a7:9e:ae:d9:64:f9:ee:ec:c7:4d:d3:
dc:28:77:95:38:cc:56:d4:25:34:88:c8:71:93:d7:
d6:4b:c0:d9:3f:f5:bf:dd:78:b4:5a:e8:ad:f7:6e:
1c:97:be:3d:52:fc:bb:6d:5a:db:c9:07:9f:dc:47:
bf:51:36:25:d2:8d:d6:1f:33:b6:53:6e:e7:7d:2c:
23:0e:bc:5f:15:d4:0d:f0:51:67:83:d0:4c:42:40:
a7:81:cf:9a:28:36:1d:21:88:52:b1:74:b1:1f:e5:
c9:bb:1a:ae:77:65:37:d7:61:5e:a7:54:74:64:40:
14:a9:67:f9:36:38:ee:b5:5e:aa:23:47:07:4c:a3:
15:c7:08:ca:35:58:9b:f4:1b:6d:c2:fe:b3:af:d9:
5b:a1:4a:69:bf:3a:5b:07:05:e5:89:69:52:fc:d0:
d6:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:57:71:8C:A8:07:66:83:85:38:06:C2:A5:71:DC:0C:BC:C2:A0:30
X509v3 Authority Key Identifier:
keyid:10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e332e302f32342d3234203d3e203234323033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.213.3.0/24
Signature Algorithm: sha256WithRSAEncryption
53:66:be:6d:c6:27:5a:5d:af:62:06:a2:a8:0d:5c:01:6f:54:
f2:28:4e:f2:e7:b4:4d:8d:bd:91:a2:cc:0f:2b:b5:d8:53:67:
78:a3:ac:37:86:17:b4:af:7e:c4:5e:dc:2d:cd:b3:cb:b7:70:
e8:6e:bc:53:cb:74:5d:58:4b:0d:2c:18:0b:6f:c7:cf:5d:b2:
0b:16:c5:77:fa:93:04:58:aa:3e:66:31:75:12:b8:bc:f5:c4:
d5:f4:bc:19:fa:4e:eb:a1:d9:c4:e5:25:21:2d:2f:c5:2c:f4:
1c:ad:cf:2a:d0:71:e9:43:49:cc:7d:2a:3f:0b:70:81:4f:19:
a9:18:2e:16:15:1c:52:b1:4d:82:69:5f:a6:db:53:44:2d:ea:
77:05:37:56:9e:65:44:46:12:4f:76:12:98:8c:64:a2:fe:82:
20:97:40:8a:37:0a:6c:49:9d:3b:ca:86:1b:7a:e3:a5:9c:5a:
f7:dd:53:ca:c9:a9:fb:ee:0c:d6:34:22:27:dc:fa:26:23:97:
8e:d7:89:6d:07:ae:ae:1a:85:10:f1:77:71:0b:b5:6c:18:3b:
f1:2a:f4:09:4f:76:7b:7c:c2:75:6f:d9:3b:c2:c9:ff:69:b3:
a7:40:ac:21:b3:ad:2c:07:84:46:fd:82:86:ce:68:f5:34:4f:
3d:3a:50:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:07 2024 by rpki-client on console-fra.rpki-client.org