Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e36302e302f32342d3234203d3e203234323033.roa
File: 3134302e3231332e36302e302f32342d3234203d3e203234323033.roa (raw, json)
Hash identifier: MWrhjjnSPu8hjjoIuSQRHht65eQeNlM9Xbks8N7yLYQ=
Subject key identifier: B0:79:8C:2E:CA:88:28:84:6F:6B:8E:EE:BB:25:56:CE:6B:26:60:8D
Certificate issuer: /CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B
Certificate serial: 381CE39F2B2E6BC9731077ACEE7BD4656A7B59A8
Authority key identifier: 10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e36302e302f32342d3234203d3e203234323033.roa
Signing time: Tue 19 Apr 2022 09:00:01 +0000
ROA not before: Tue 19 Apr 2022 08:55:01 +0000
ROA not after: Tue 18 Apr 2023 09:00:01 +0000
asID: 24203
IP address blocks: 140.213.60.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:1c:e3:9f:2b:2e:6b:c9:73:10:77:ac:ee:7b:d4:65:6a:7b:59:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B
Validity
Not Before: Apr 19 08:55:01 2022 GMT
Not After : Apr 18 09:00:01 2023 GMT
Subject: CN=B0798C2ECA8828846F6B8EEEBB2556CE6B26608D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:37:12:51:e5:e7:8f:0d:14:fb:52:bd:1a:e7:
33:32:3f:fc:20:c7:58:49:d1:a3:9a:a0:f4:c4:4e:
9b:72:1e:25:2e:13:97:0d:13:0f:f9:4d:cd:a4:13:
c2:23:90:39:2f:24:d9:93:91:71:eb:ac:44:71:d1:
e7:23:28:1f:c1:ff:fe:27:62:5a:50:9e:20:68:66:
2b:3d:72:03:d6:e3:47:d3:35:2f:78:67:c0:bd:68:
8e:c8:25:a4:28:b1:4e:df:26:4f:72:2d:6b:d7:7d:
4d:39:c7:b6:d0:a3:1f:21:12:82:39:6a:03:ad:34:
33:30:2c:6b:79:c5:b9:c9:4f:a2:1c:78:fd:45:f7:
6c:c1:38:e0:46:91:b1:5b:c3:f9:3a:19:40:cd:d7:
bd:75:3c:e8:8c:02:0f:75:4b:4f:ab:4b:c0:0d:db:
6f:ff:a7:e1:d2:a2:03:40:d3:be:58:b4:d4:7c:f5:
ec:e2:5d:61:fd:76:bb:79:5c:df:b0:b2:df:3f:10:
09:05:70:9e:15:26:ca:de:86:55:b8:8a:3c:11:c1:
57:ff:8c:0c:28:79:a5:6c:3c:ab:35:ed:fb:32:f8:
49:41:5d:6b:22:79:ae:ff:cc:56:ae:ac:3d:74:8a:
2e:72:34:94:8a:1f:e0:0b:5f:87:17:96:fd:b0:f5:
81:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:79:8C:2E:CA:88:28:84:6F:6B:8E:EE:BB:25:56:CE:6B:26:60:8D
X509v3 Authority Key Identifier:
keyid:10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e36302e302f32342d3234203d3e203234323033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.213.60.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:b3:0d:93:59:ae:53:61:dc:fa:70:eb:20:a0:00:08:d0:14:
3d:b2:60:c3:80:b2:2d:76:6c:27:15:f6:6e:50:ad:e9:83:24:
d0:a2:91:27:d4:3c:ab:ff:33:56:2f:33:94:0c:e0:2a:18:d0:
81:74:cb:5b:4f:da:e8:fa:c5:0d:56:bc:c2:ce:87:39:a5:99:
ef:39:d7:b1:40:4e:4e:7c:c4:92:b2:b1:32:41:a4:cf:71:fc:
65:9f:74:f2:fd:3d:75:cc:8d:8a:d2:da:2e:3f:45:ee:f8:43:
71:9f:d7:d0:b9:db:0c:4e:54:06:54:3b:fb:69:47:01:4b:a1:
df:31:7f:85:a2:12:6e:d5:3c:ee:ba:7b:25:dc:8b:c5:06:35:
7d:3d:9e:27:15:15:69:f1:cc:59:76:87:0f:b4:04:8c:04:43:
7c:b4:3b:dc:7f:a8:4c:66:b3:09:6b:68:51:be:cc:b4:5e:9c:
f2:3b:d7:54:90:0f:af:97:8a:57:9d:aa:08:1b:62:23:77:ad:
05:d6:ac:1e:f3:cd:83:b5:3c:f0:2d:c6:38:0f:a4:c6:eb:3f:
99:12:90:d9:4d:08:0c:9a:2c:f3:7b:12:1f:fc:9c:8a:a9:a5:
72:f3:9e:04:c4:8d:50:3f:54:56:79:cb:bc:7b:d3:c8:71:d3:
82:0e:fe:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:07 2024 by rpki-client on console-fra.rpki-client.org