Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3133302e302f32342d3234203d3e203234323033.roa
File: 3134302e3231332e3133302e302f32342d3234203d3e203234323033.roa (raw, json)
Hash identifier: fK1qBIHRetPB2TSNaLmQBIMDOIhrF7lAYzMViRxgpHA=
Subject key identifier: C7:B7:25:75:6B:A6:ED:DE:64:87:68:08:FB:30:EE:04:E0:81:EB:20
Certificate issuer: /CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B
Certificate serial: 4E23A7E914E003DD7AB24E8259B9EA57CD1BEBF5
Authority key identifier: 10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3133302e302f32342d3234203d3e203234323033.roa
Signing time: Sat 08 Jan 2022 17:16:25 +0000
ROA not before: Sat 08 Jan 2022 17:11:25 +0000
ROA not after: Sun 08 Jan 2023 17:16:25 +0000
asID: 24203
IP address blocks: 140.213.130.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4e:23:a7:e9:14:e0:03:dd:7a:b2:4e:82:59:b9:ea:57:cd:1b:eb:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B
Validity
Not Before: Jan 8 17:11:25 2022 GMT
Not After : Jan 8 17:16:25 2023 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:51:62:8b:43:53:c4:81:3f:e2:b0:59:0a:a2:
0e:36:77:5e:a1:3d:5b:1a:f0:7b:f8:60:4e:6a:0a:
77:59:51:ef:9f:ac:d7:8f:27:e8:8f:66:32:38:5a:
f8:bf:fe:3c:5f:cc:7b:8f:2e:9e:01:85:b5:71:4e:
26:16:20:80:f3:ec:bb:4e:40:93:17:15:e2:b5:8b:
38:5e:42:1b:1f:cf:a5:65:a6:f9:28:4a:fb:36:54:
fa:9d:f2:0c:9c:ee:4f:23:4d:73:f6:94:fd:ef:dd:
e4:44:b6:85:a6:e9:c9:fa:06:f7:8f:39:10:f6:8c:
87:7a:79:de:7f:f4:dd:2d:ff:89:d9:09:d0:1b:71:
5c:51:92:8e:bf:7d:89:ab:1f:3e:7c:6b:ce:63:7b:
32:d2:86:6d:4b:7b:40:28:39:17:96:0a:08:d1:b4:
a8:5f:15:01:ee:aa:f9:cd:4f:cf:bd:05:53:6d:f6:
3c:b2:1b:ba:87:4d:af:ed:95:07:8f:7f:1c:2c:63:
18:03:f3:04:56:46:fd:df:54:ad:5f:ae:e0:5c:fe:
6d:0a:9f:49:5b:06:f1:5e:f7:88:3c:d5:8b:dc:b2:
b3:0a:c0:81:29:80:e5:15:ff:8a:87:39:2b:2d:51:
fb:0b:34:b0:2a:3b:94:66:10:c5:45:0b:ce:d1:df:
e5:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:B7:25:75:6B:A6:ED:DE:64:87:68:08:FB:30:EE:04:E0:81:EB:20
X509v3 Authority Key Identifier:
keyid:10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3133302e302f32342d3234203d3e203234323033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.213.130.0/24
Signature Algorithm: sha256WithRSAEncryption
b3:f3:e6:53:7a:4a:cd:f5:0b:3c:8e:27:6b:81:c5:bb:e0:5f:
90:58:9f:e0:aa:31:fa:a0:44:fe:f3:36:80:a7:e9:6a:6e:1f:
98:29:30:0a:21:b7:fa:ef:74:13:16:3c:1e:40:5a:61:bd:89:
4a:a1:45:b8:22:35:04:11:01:25:be:9f:06:af:f6:5c:f7:59:
f0:de:ad:90:b2:97:7a:5d:be:dd:e7:d6:90:74:ae:cc:81:a9:
ce:46:f6:88:eb:46:0d:f6:91:06:22:7f:6e:34:ea:58:4c:be:
c8:f6:68:f5:46:3a:64:94:6f:14:b3:1f:74:9b:62:3c:06:10:
19:46:e8:c3:dd:c7:56:64:6a:9b:3d:0a:82:20:f6:03:7d:8e:
f1:1f:3c:3e:f4:db:7f:f5:d5:0b:d9:0e:bb:e5:b0:b1:67:49:
b9:23:15:18:3d:ef:a2:d4:4e:62:f4:fe:ca:c3:49:f4:07:03:
5c:fb:fe:93:af:f9:0a:5e:86:61:e3:6b:93:a5:c6:95:f3:da:
cd:63:ac:56:8a:10:59:3a:d1:16:b1:89:c9:cf:70:3a:29:d6:
9e:95:8f:16:54:8a:03:e5:2d:c6:d5:19:6d:02:03:04:fa:2b:
7a:21:ea:8e:ad:40:ca:d6:aa:60:6d:e9:84:a3:8b:df:11:c1:
15:e9:f0:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:16:41 2025 by rpki-client