Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e362e302f32342d3234203d3e203234323033.roa
File: 3134302e3231332e362e302f32342d3234203d3e203234323033.roa (raw, json)
Hash identifier: zjHZkBxcSlBX33FHfgy56CgacB+d6128pZ2aMLjacu4=
Subject key identifier: 08:5B:1B:1E:FA:85:50:61:FB:AF:D3:71:4E:3C:2A:86:29:4C:71:94
Certificate issuer: /CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B
Certificate serial: 6286AB6A56CDD9AB74B7F67D6212CA3302D0D5A2
Authority key identifier: 10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e362e302f32342d3234203d3e203234323033.roa
Signing time: Wed 13 Apr 2022 08:00:01 +0000
ROA not before: Wed 13 Apr 2022 07:55:01 +0000
ROA not after: Wed 12 Apr 2023 08:00:01 +0000
asID: 24203
IP address blocks: 140.213.6.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:86:ab:6a:56:cd:d9:ab:74:b7:f6:7d:62:12:ca:33:02:d0:d5:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B
Validity
Not Before: Apr 13 07:55:01 2022 GMT
Not After : Apr 12 08:00:01 2023 GMT
Subject: CN=085B1B1EFA855061FBAFD3714E3C2A86294C7194
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:2d:91:8c:ca:05:d3:ad:04:2d:23:a6:83:52:
c5:f2:05:a8:3c:54:8d:48:d6:e2:1c:36:2f:cf:b2:
46:1c:b9:60:8a:98:f1:a1:74:d8:e6:a4:28:48:6a:
4b:cb:89:bf:08:d4:56:34:51:7a:eb:98:5b:16:24:
cb:6a:06:79:68:0c:2a:e0:a8:9c:66:ad:04:8f:92:
59:c4:aa:31:98:01:1f:77:12:3d:de:72:34:db:73:
b9:d0:ef:28:45:7a:da:a2:a1:3b:ca:ac:4e:5c:78:
b8:30:a3:25:22:6f:aa:b3:3a:76:a6:d1:3d:91:7f:
2b:b2:56:88:3f:ed:3f:d7:14:3d:9e:35:bb:bf:99:
db:d8:74:38:34:e7:74:80:bf:e0:dc:30:ea:51:4a:
a0:1e:05:64:17:75:a0:5a:67:50:ea:2b:c9:db:40:
18:e8:56:0b:5b:52:d0:80:8a:36:14:5b:0b:04:43:
c2:6a:12:b1:8c:30:bd:5a:0a:72:fe:a9:03:88:4b:
54:96:84:47:0d:e8:49:f0:55:79:cf:04:76:08:78:
60:6b:5c:d7:d5:34:f0:2f:f2:59:f0:e2:ea:b3:b6:
05:8b:0c:07:e3:2c:39:f0:c8:41:68:36:da:d5:f3:
ae:5b:9b:f0:3d:c9:71:f0:99:fe:fe:b9:6d:38:39:
f6:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:5B:1B:1E:FA:85:50:61:FB:AF:D3:71:4E:3C:2A:86:29:4C:71:94
X509v3 Authority Key Identifier:
keyid:10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e362e302f32342d3234203d3e203234323033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.213.6.0/24
Signature Algorithm: sha256WithRSAEncryption
06:66:27:e8:88:0d:7d:2a:22:1c:48:d8:c9:df:9c:55:f9:3d:
8c:e5:fc:f5:3a:e9:2c:f9:f6:b4:9c:33:4c:4a:57:5b:35:cb:
66:ba:13:84:39:c5:35:e4:02:b3:70:39:f5:af:3e:e8:53:23:
53:d4:5e:ab:cd:96:3e:de:15:8e:bc:53:79:ff:0b:39:80:af:
9b:f2:d6:bd:09:e3:4f:8c:36:77:d2:2f:97:ad:b5:14:db:aa:
81:0b:97:31:89:7e:90:21:7a:33:22:5f:fc:bd:9d:2f:b8:d8:
0a:5a:07:85:08:63:15:be:fd:b4:8c:62:3d:c2:27:77:ed:e3:
16:47:66:56:05:c1:a1:07:d3:01:21:cb:10:3a:d6:0e:00:03:
7b:a6:b4:5e:fb:8e:83:6c:8c:bb:52:a3:0a:e6:62:5a:1f:8c:
3b:60:48:0c:30:65:80:c9:d6:3f:b6:0c:6b:b3:f5:28:cf:8d:
62:4a:7f:36:91:57:02:d8:d3:d7:4f:24:bc:4d:2e:07:79:8e:
92:82:17:35:46:ed:da:2a:26:c3:3d:f1:01:d2:64:b9:ef:01:
95:6f:17:f0:e7:64:90:9a:27:99:c2:99:1d:12:42:bd:b0:77:
cd:54:a6:7b:9d:a3:1c:ac:ca:d0:af:3c:60:cd:c0:93:11:f0:
12:98:e6:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:40 2024 by rpki-client on console-ams.rpki-client.org