Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e33362e302f32342d3234203d3e203234323033.roa
File: 3134302e3231332e33362e302f32342d3234203d3e203234323033.roa (raw, json)
Hash identifier: jXWurYFqrU8ArLBp5ttNtcyTA2sPw/xN/WASgLv0ugU=
Subject key identifier: 0F:10:2B:77:CA:98:57:85:69:43:AB:6C:AC:DB:1D:65:29:1D:5B:ED
Certificate issuer: /CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B
Certificate serial: 0862C35B1E5A17739E27BBC6639F9968EB8BC8ED
Authority key identifier: 10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e33362e302f32342d3234203d3e203234323033.roa
Signing time: Tue 19 Apr 2022 07:00:01 +0000
ROA not before: Tue 19 Apr 2022 06:55:01 +0000
ROA not after: Tue 18 Apr 2023 07:00:01 +0000
asID: 24203
IP address blocks: 140.213.36.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
08:62:c3:5b:1e:5a:17:73:9e:27:bb:c6:63:9f:99:68:eb:8b:c8:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B
Validity
Not Before: Apr 19 06:55:01 2022 GMT
Not After : Apr 18 07:00:01 2023 GMT
Subject: CN=0F102B77CA9857856943AB6CACDB1D65291D5BED
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1e:6f:61:bd:45:b3:39:4e:cb:04:69:fe:5e:
a2:4b:08:af:61:b0:0b:88:e4:00:d0:1c:c0:46:f6:
95:28:ab:a1:ea:d0:dc:f5:06:4b:37:6e:3f:1a:84:
fb:86:76:76:27:37:1d:90:4f:6a:ae:87:a1:b2:5e:
5a:c4:e7:0c:88:46:40:34:fa:b9:67:e7:e6:8c:3c:
70:3c:89:25:ca:b6:63:70:5c:8a:ad:f8:4e:b3:31:
32:81:56:0b:28:27:3f:d4:57:7e:d7:de:a4:36:93:
b1:23:73:88:74:02:1d:04:66:02:81:1f:ce:ab:b8:
f1:f6:6f:2b:39:2a:e1:be:c2:81:6f:c1:00:fa:0d:
49:cf:28:61:38:34:9f:75:4a:2c:59:63:c9:31:6e:
8f:e4:c3:a8:69:33:d3:24:df:5f:b9:c9:b1:9c:0b:
01:05:9d:84:96:31:59:d2:35:51:af:40:0d:7d:fd:
39:f2:ff:cc:f4:c2:fd:48:f4:08:29:51:5c:e6:a6:
69:a7:bb:3a:04:64:81:e2:b5:45:7a:b3:46:90:b5:
3c:a4:53:34:c6:76:aa:e8:61:f7:4d:db:7e:b8:5e:
9c:53:38:77:64:6b:f9:d1:71:58:bb:a6:b2:93:e8:
6c:51:10:79:7c:7c:65:bf:08:a6:63:d6:43:43:ea:
11:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0F:10:2B:77:CA:98:57:85:69:43:AB:6C:AC:DB:1D:65:29:1D:5B:ED
X509v3 Authority Key Identifier:
keyid:10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e33362e302f32342d3234203d3e203234323033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.213.36.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:88:d0:51:91:b9:06:32:99:62:be:8f:a2:4b:26:9e:21:00:
6a:5d:87:5d:a8:32:ff:13:a0:83:40:55:4c:02:9f:1c:57:58:
ab:e4:e6:56:ab:9c:0b:61:44:94:a6:38:63:53:18:61:6e:a7:
03:66:59:98:93:2a:db:11:fd:66:0a:75:e0:50:e2:3a:e6:c5:
c6:67:2d:a9:05:a7:e7:9c:04:91:8f:97:ac:4f:98:42:60:90:
3a:2a:90:a2:e2:d9:68:86:c8:97:a3:c9:2d:c2:78:28:77:b3:
b8:45:ea:0a:7e:e7:44:9c:ea:ab:84:5b:76:cf:ec:32:ff:a7:
bd:37:8a:bf:97:6d:46:28:2b:6e:95:62:81:4e:e1:58:a6:93:
85:e6:07:41:dd:a9:fd:b6:63:9c:0d:62:98:f6:0b:66:00:1c:
42:6a:a6:20:62:f2:b8:f1:31:e4:5e:e0:11:fd:57:96:36:65:
2c:49:93:2b:1a:c7:dc:8b:d6:dd:c1:73:e6:4a:f5:c5:51:23:
ed:f5:65:bc:07:ef:a4:d9:f1:6e:c8:0d:dd:e4:54:53:4d:13:
bd:db:3f:65:29:4f:77:3c:9a:f6:07:b8:8c:4b:07:9e:c5:64:
5c:5c:ba:6f:32:af:c5:4c:e3:89:0c:64:95:5b:e0:59:27:b2:
66:39:ec:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:07 2024 by rpki-client on console-fra.rpki-client.org