Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e36322e302f32342d3234203d3e203234323033.roa
File: 3134302e3231332e36322e302f32342d3234203d3e203234323033.roa (raw, json)
Hash identifier: O7ivOhJUYBiNPcO0Dujac0wAbApgBpSDS+5/l+DfTcM=
Subject key identifier: B8:B8:16:F6:CF:11:14:83:BC:14:22:32:EE:8E:1E:6E:7E:1F:B0:2F
Certificate issuer: /CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B
Certificate serial: 6D4378CCE60C55CEE4A86F0C9A056D6D7460BE3B
Authority key identifier: 10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e36322e302f32342d3234203d3e203234323033.roa
Signing time: Tue 19 Apr 2022 09:00:00 +0000
ROA not before: Tue 19 Apr 2022 08:55:00 +0000
ROA not after: Tue 18 Apr 2023 09:00:00 +0000
asID: 24203
IP address blocks: 140.213.62.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6d:43:78:cc:e6:0c:55:ce:e4:a8:6f:0c:9a:05:6d:6d:74:60:be:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B
Validity
Not Before: Apr 19 08:55:00 2022 GMT
Not After : Apr 18 09:00:00 2023 GMT
Subject: CN=B8B816F6CF111483BC142232EE8E1E6E7E1FB02F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ea:31:01:1d:4c:7f:11:b0:2c:33:7a:90:0c:
2a:53:8f:51:13:ae:57:d2:dd:1a:39:23:1d:db:9c:
0a:90:69:08:ca:0d:cb:d8:b9:8b:ac:3e:ef:5f:0a:
5b:45:37:87:42:2f:8b:8c:92:74:74:57:2e:e1:0e:
41:8e:a3:a7:ff:1d:25:74:6e:0d:3d:63:ab:5b:b3:
4f:3c:d9:c7:09:20:ee:65:c1:94:10:16:d5:ee:da:
be:70:6c:0e:83:29:1b:48:c9:17:50:72:d2:b7:c7:
a2:84:62:22:f1:13:f0:f9:43:7b:1b:92:93:ee:81:
c2:dd:81:49:86:8b:aa:5a:7a:5b:2d:37:a2:f7:eb:
59:f3:a8:68:9b:fb:ff:3c:36:2f:1e:1d:db:4e:87:
f7:83:6c:65:94:87:d0:96:ba:86:80:bd:a2:a3:45:
2c:b5:c5:54:70:e4:0f:9f:e0:de:eb:05:21:ac:47:
fe:a8:31:05:b9:15:2c:4e:d9:29:fc:03:75:e2:b8:
76:5a:6d:de:a9:b8:d5:91:cb:fa:19:65:1d:7a:dc:
f1:e8:e5:99:6b:15:92:19:6f:d2:7b:a9:4b:49:c8:
e4:58:f8:14:77:9a:77:a4:31:08:8a:f0:45:82:f6:
2c:c3:2b:f3:ec:f8:d0:62:80:62:ac:b6:d2:a1:9c:
0c:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:B8:16:F6:CF:11:14:83:BC:14:22:32:EE:8E:1E:6E:7E:1F:B0:2F
X509v3 Authority Key Identifier:
keyid:10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e36322e302f32342d3234203d3e203234323033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.213.62.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:e5:0e:73:ac:4b:eb:02:7c:da:1c:4c:d3:3c:d5:b4:56:22:
dd:5b:17:c6:53:19:a0:0f:47:7d:71:54:2b:0d:8b:95:11:a1:
4e:07:b3:9c:a9:92:62:02:6f:3d:d4:ab:39:91:ec:84:38:c9:
a5:5b:74:6a:82:9d:a8:c7:a1:66:13:30:e4:9a:83:d6:49:af:
27:c0:a6:7e:c8:2b:4b:ff:31:69:e1:43:a6:86:4c:c6:8d:36:
de:68:a1:eb:3d:3c:cc:7a:98:63:77:b1:a6:20:fd:81:e1:b6:
bb:33:2c:76:93:21:1e:e4:6e:84:72:82:5f:a3:33:88:5e:65:
5e:58:42:76:55:64:8c:c3:e2:78:7b:af:a3:c1:56:d3:03:f0:
62:d8:c6:44:52:12:3a:df:ee:48:8e:1f:f0:70:c3:45:17:b1:
f1:d0:75:58:46:59:cb:39:3f:29:96:a1:02:0d:82:4c:94:31:
b4:94:e9:75:ad:f3:75:3c:11:61:e5:6a:e0:f6:83:17:d2:1f:
a8:28:06:ed:57:21:b3:49:59:6c:69:02:76:6e:83:db:db:1e:
30:da:32:1c:84:a8:4c:a9:80:26:05:b0:29:bc:cf:31:80:69:
d0:10:c4:0b:aa:05:34:2c:c4:8a:5b:20:2f:d0:6c:ab:70:4e:
3d:b6:31:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:07 2024 by rpki-client on console-fra.rpki-client.org