Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e38312e302f32342d3234203d3e203234323033.roa
File: 3134302e3231332e38312e302f32342d3234203d3e203234323033.roa (raw, json)
Hash identifier: b8v3gRiWHUoLo2qZEr7WWvAm+AjdyKy7kQiWKRYV7lE=
Subject key identifier: EB:C0:77:F2:56:98:BA:4E:33:E2:89:37:49:09:64:6B:1B:1D:BB:3E
Certificate issuer: /CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B
Certificate serial: 7B1383C83EA9527CB7AC5EB6805D8521B0256980
Authority key identifier: 10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e38312e302f32342d3234203d3e203234323033.roa
Signing time: Tue 19 Apr 2022 10:00:01 +0000
ROA not before: Tue 19 Apr 2022 09:55:01 +0000
ROA not after: Tue 18 Apr 2023 10:00:01 +0000
asID: 24203
IP address blocks: 140.213.81.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7b:13:83:c8:3e:a9:52:7c:b7:ac:5e:b6:80:5d:85:21:b0:25:69:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B
Validity
Not Before: Apr 19 09:55:01 2022 GMT
Not After : Apr 18 10:00:01 2023 GMT
Subject: CN=EBC077F25698BA4E33E289374909646B1B1DBB3E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:72:b3:39:4a:6a:8a:78:5d:14:16:03:e2:a0:
f3:3b:c5:5f:00:ac:0b:a7:fc:e7:94:5e:f8:7f:7b:
13:eb:b8:cd:13:18:28:56:87:bd:46:8a:fd:e2:a4:
ff:5e:c9:9d:7c:d9:a4:e3:81:5b:1e:01:9b:42:d7:
e1:33:2b:d5:37:dc:be:03:25:41:dc:4c:07:7d:14:
89:20:aa:9e:5e:7c:3d:4d:7a:f8:70:19:4f:34:d4:
75:ef:e1:b6:2a:de:3b:2b:d0:dd:f4:8d:1f:23:d5:
28:a0:89:64:5e:a2:71:44:20:ad:e2:e0:e4:25:73:
3e:db:08:c9:20:34:b9:b7:da:50:07:ec:2b:6d:e2:
51:ef:43:c3:f5:6d:79:79:8b:c5:85:c5:75:3a:10:
18:77:49:7d:57:12:30:16:4d:03:b8:09:ba:f5:ce:
d5:fa:b0:7d:cc:6f:28:46:28:72:87:70:91:a0:7a:
4f:e4:31:88:86:57:fa:78:79:7d:6c:37:81:db:f6:
80:52:9e:4f:3f:9a:50:96:ae:e5:8c:d7:1c:d5:2d:
2d:1c:90:10:2f:f1:ee:20:21:82:5b:3c:84:93:cb:
ce:05:84:d9:fd:37:d1:fc:66:6b:54:c4:e0:54:0e:
fb:75:d1:52:3a:ff:79:2d:c4:29:95:d2:e1:ff:28:
3a:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:C0:77:F2:56:98:BA:4E:33:E2:89:37:49:09:64:6B:1B:1D:BB:3E
X509v3 Authority Key Identifier:
keyid:10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e38312e302f32342d3234203d3e203234323033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.213.81.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:83:84:20:5d:2e:80:34:3b:31:d7:03:f9:83:32:8b:44:c3:
91:5f:38:26:4a:02:b5:2d:d8:da:15:bd:fe:c4:ce:43:f3:49:
fb:c9:9e:dc:b1:42:f8:7a:08:cb:37:ef:d9:d6:11:07:68:c7:
f4:7d:8a:28:14:98:f3:3a:6c:e1:34:3a:40:3a:a7:52:8e:ac:
07:c9:8f:fb:e6:e8:12:94:83:dd:dc:eb:13:9c:b7:1b:ab:02:
ee:03:e2:79:66:a5:83:50:85:bb:b9:2b:91:c1:39:d0:17:cc:
86:eb:aa:5e:60:1f:93:0c:39:5f:bb:53:2a:0d:bd:44:a4:e7:
b8:6d:c6:9c:ec:6e:ad:df:a8:3f:d6:8c:59:3c:23:99:a0:f3:
ea:94:c9:c1:94:72:15:ec:67:91:4c:69:b2:51:8b:ae:ab:e0:
31:11:6a:df:f6:b9:f7:10:a5:5f:29:bb:cb:d7:26:b9:9f:59:
9d:7e:47:35:2c:b5:00:ca:1d:10:fa:e3:74:44:1e:2c:d3:3c:
90:d6:16:a1:c6:9c:4a:c5:67:12:4f:97:a2:8e:95:e3:8e:f4:
2b:70:55:62:ff:7c:4b:42:77:4a:1e:29:81:af:9e:36:24:79:
d6:0f:c3:5c:7a:30:7b:84:6c:a3:dc:49:05:22:0b:23:2e:c5:
d6:92:fb:9c
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUexODyD6pUny3rF62gF2FIbAlaYAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTBCQUI3OTA3RDk1M0EwRDVGREVCNUMyMEM5RjI5QkNG
QzY2MEExQjAeFw0yMjA0MTkwOTU1MDFaFw0yMzA0MTgxMDAwMDFaMDMxMTAvBgNV
BAMTKEVCQzA3N0YyNTY5OEJBNEUzM0UyODkzNzQ5MDk2NDZCMUIxREJCM0UwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCocrM5SmqKeF0UFgPioPM7xV8A
rAun/OeUXvh/exPruM0TGChWh71Giv3ipP9eyZ182aTjgVseAZtC1+EzK9U33L4D
JUHcTAd9FIkgqp5efD1NevhwGU801HXv4bYq3jsr0N30jR8j1SigiWReonFEIK3i
4OQlcz7bCMkgNLm32lAH7Ctt4lHvQ8P1bXl5i8WFxXU6EBh3SX1XEjAWTQO4Cbr1
ztX6sH3MbyhGKHKHcJGgek/kMYiGV/p4eX1sN4Hb9oBSnk8/mlCWruWM1xzVLS0c
kBAv8e4gIYJbPISTy84FhNn9N9H8ZmtUxOBUDvt10VI6/3ktxCmV0uH/KDr7AgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQU68B38laYuk4z4ok3SQlkaxsduz4wHwYDVR0j
BBgwFoAUELq3kH2VOg1f3rXCDJ8pvPxmChswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby80
YmRiMWUwYS1hNGVjLTQ5ZGItYmU4OS04ZDdlN2ZjMmMyMjcvMS8xMEJBQjc5MDdE
OTUzQTBENUZERUI1QzIwQzlGMjlCQ0ZDNjYwQTFCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzEvMTBCQUI3OTA3RDk1M0EwRDVGREVCNUMyMEM5RjI5QkNGQzY2
MEExQi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzRiZGIxZTBhLWE0ZWMtNDlkYi1i
ZTg5LThkN2U3ZmMyYzIyNy8xLzMxMzQzMDJlMzIzMTMzMmUzODMxMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzIzNDMyMzAzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAIzVUTANBgkqhkiG
9w0BAQsFAAOCAQEAO4OEIF0ugDQ7MdcD+YMyi0TDkV84JkoCtS3Y2hW9/sTOQ/NJ
+8me3LFC+HoIyzfv2dYRB2jH9H2KKBSY8zps4TQ6QDqnUo6sB8mP++boEpSD3dzr
E5y3G6sC7gPieWalg1CFu7krkcE50BfMhuuqXmAfkww5X7tTKg29RKTnuG3GnOxu
rd+oP9aMWTwjmaDz6pTJwZRyFexnkUxpslGLrqvgMRFq3/a59xClXym7y9cmuZ9Z
nX5HNSy1AModEPrjdEQeLNM8kNYWocacSsVnEk+Xoo6V4470K3BVYv98S0J3Sh4p
ga+eNiR51g/DXHowe4Rso9xJBSILIy7F1pL7nA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:07 2024 by rpki-client on console-fra.rpki-client.org