Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e35342e302f32342d3234203d3e203137383835.roa
File: 3134302e3231332e35342e302f32342d3234203d3e203137383835.roa (raw, json)
Hash identifier: GSUDHlN2cQVsmbIO0+wF+ZHyx+PatZcwGnXIPxgkYT0=
Subject key identifier: F2:24:3A:1A:C8:00:25:F6:4D:B4:C4:7F:6A:F8:3A:08:B2:1E:FC:D9
Certificate issuer: /CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B
Certificate serial: 69C51FC903D6B417BBDC5B53892F2F0A1E2D992C
Authority key identifier: 10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e35342e302f32342d3234203d3e203137383835.roa
Signing time: Tue 19 Apr 2022 07:00:01 +0000
ROA not before: Tue 19 Apr 2022 06:55:01 +0000
ROA not after: Tue 18 Apr 2023 07:00:01 +0000
asID: 17885
IP address blocks: 140.213.54.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
69:c5:1f:c9:03:d6:b4:17:bb:dc:5b:53:89:2f:2f:0a:1e:2d:99:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B
Validity
Not Before: Apr 19 06:55:01 2022 GMT
Not After : Apr 18 07:00:01 2023 GMT
Subject: CN=F2243A1AC80025F64DB4C47F6AF83A08B21EFCD9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:ba:f7:e8:6b:8f:f5:2c:88:0a:34:a0:05:bc:
a3:93:d4:88:da:ca:3d:24:bd:a2:9a:0f:e7:f4:ca:
b0:46:49:63:64:bb:fb:7c:a6:1d:9e:fd:78:af:50:
1f:59:bf:2c:a0:11:30:ef:24:98:a5:61:ad:4e:68:
fb:17:1e:b5:9a:0a:09:2e:08:81:51:38:9a:61:93:
f7:3d:db:bb:81:a2:d0:ab:b8:16:47:b6:de:05:c3:
ff:d8:ab:6d:f5:b5:52:d0:37:b4:62:62:cd:be:42:
c2:ac:14:ba:c8:37:af:ac:8e:ed:be:26:04:4c:a0:
ba:4a:89:e8:67:88:05:bb:b3:a5:e8:ab:b1:e5:79:
7b:cc:3c:28:d4:bd:a8:84:b8:bb:e1:e2:af:ee:21:
dd:82:c9:ff:64:99:67:04:a8:62:68:7f:78:3c:7d:
44:1d:34:a6:b3:92:d6:b6:3e:d4:2b:60:c4:61:f7:
3e:36:b7:4e:22:7e:84:50:5b:9d:34:8b:36:85:5a:
4e:90:39:97:ff:f1:50:a3:2e:0a:5e:e2:f9:1a:1f:
0f:40:e6:06:86:8b:52:63:ca:51:89:33:3a:43:40:
1b:ec:5e:cc:41:13:e8:df:c4:dc:02:a0:43:e0:28:
86:6a:85:6f:f5:72:ed:69:4d:c8:e2:50:44:f7:18:
be:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:24:3A:1A:C8:00:25:F6:4D:B4:C4:7F:6A:F8:3A:08:B2:1E:FC:D9
X509v3 Authority Key Identifier:
keyid:10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e35342e302f32342d3234203d3e203137383835.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.213.54.0/24
Signature Algorithm: sha256WithRSAEncryption
12:b8:a1:2c:b9:cf:1b:4a:75:ea:23:a5:d3:dd:f7:d7:1f:52:
50:a5:cd:ee:86:25:73:f4:9c:7d:38:46:aa:c1:dc:45:52:42:
41:ae:88:56:35:50:75:e7:d9:bc:67:e0:3a:bf:44:30:cf:41:
dc:16:5a:08:7a:81:f5:2b:a7:d3:cf:e2:37:ec:81:49:b4:35:
0d:ba:b6:17:e9:e0:d4:d7:c0:d8:7b:de:ff:1c:df:22:21:48:
d9:da:4e:c5:12:a7:5c:4f:1d:2d:a8:14:f8:af:94:0b:28:75:
a0:f4:67:9a:dc:97:90:52:7f:2a:20:6b:65:e6:9d:c3:a4:b1:
fd:98:a9:2e:7e:19:4d:2d:cc:cb:58:64:34:bb:47:54:a5:94:
98:d1:99:91:13:aa:7e:89:a3:88:9f:c0:cd:f1:8b:67:70:dc:
3c:9a:0c:cc:07:ab:2a:ea:ac:11:96:a1:0e:37:6c:bb:fc:e0:
c2:a1:09:cf:62:f5:47:1d:a9:b4:76:7c:08:b5:5d:5d:f1:0b:
8a:27:f1:ed:07:78:47:27:05:92:4e:26:ba:a3:78:98:9f:14:
51:45:a4:dc:1e:b0:47:80:eb:53:03:6a:f2:46:56:54:d5:e0:
08:5e:08:ef:58:4d:e2:15:fd:27:ae:df:5b:4a:cf:0b:49:90:
cd:4e:1e:82
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUacUfyQPWtBe73FtTiS8vCh4tmSwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTBCQUI3OTA3RDk1M0EwRDVGREVCNUMyMEM5RjI5QkNG
QzY2MEExQjAeFw0yMjA0MTkwNjU1MDFaFw0yMzA0MTgwNzAwMDFaMDMxMTAvBgNV
BAMTKEYyMjQzQTFBQzgwMDI1RjY0REI0QzQ3RjZBRjgzQTA4QjIxRUZDRDkwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfuvfoa4/1LIgKNKAFvKOT1Ija
yj0kvaKaD+f0yrBGSWNku/t8ph2e/XivUB9ZvyygETDvJJilYa1OaPsXHrWaCgku
CIFROJphk/c927uBotCruBZHtt4Fw//Yq231tVLQN7RiYs2+QsKsFLrIN6+sju2+
JgRMoLpKiehniAW7s6Xoq7HleXvMPCjUvaiEuLvh4q/uId2Cyf9kmWcEqGJof3g8
fUQdNKazkta2PtQrYMRh9z42t04ifoRQW500izaFWk6QOZf/8VCjLgpe4vkaHw9A
5gaGi1JjylGJMzpDQBvsXsxBE+jfxNwCoEPgKIZqhW/1cu1pTcjiUET3GL6bAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQU8iQ6GsgAJfZNtMR/avg6CLIe/NkwHwYDVR0j
BBgwFoAUELq3kH2VOg1f3rXCDJ8pvPxmChswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80
YmRiMWUwYS1hNGVjLTQ5ZGItYmU4OS04ZDdlN2ZjMmMyMjcvMS8xMEJBQjc5MDdE
OTUzQTBENUZERUI1QzIwQzlGMjlCQ0ZDNjYwQTFCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzEvMTBCQUI3OTA3RDk1M0EwRDVGREVCNUMyMEM5RjI5QkNGQzY2
MEExQi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzRiZGIxZTBhLWE0ZWMtNDlkYi1i
ZTg5LThkN2U3ZmMyYzIyNy8xLzMxMzQzMDJlMzIzMTMzMmUzNTM0MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNzM4MzgzNS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAIzVNjANBgkqhkiG
9w0BAQsFAAOCAQEAErihLLnPG0p16iOl09331x9SUKXN7oYlc/ScfThGqsHcRVJC
Qa6IVjVQdefZvGfgOr9EMM9B3BZaCHqB9Sun08/iN+yBSbQ1Dbq2F+ng1NfA2Hve
/xzfIiFI2dpOxRKnXE8dLagU+K+UCyh1oPRnmtyXkFJ/KiBrZeadw6Sx/ZipLn4Z
TS3My1hkNLtHVKWUmNGZkROqfomjiJ/AzfGLZ3DcPJoMzAerKuqsEZahDjdsu/zg
wqEJz2L1Rx2ptHZ8CLVdXfELiifx7Qd4RycFkk4muqN4mJ8UUUWk3B6wR4DrUwNq
8kZWVNXgCF4I71hN4hX9J67fW0rPC0mQzU4egg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:07 2024 by rpki-client on console-fra.rpki-client.org