Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3137302e302f32342d3234203d3e203234323033.roa
File: 3134302e3231332e3137302e302f32342d3234203d3e203234323033.roa (raw, json)
Hash identifier: 8uHQ8fQ4YrPZkJ+splwRI/d8PL1PLPVPKdlzyJ8kcew=
Subject key identifier: 7E:B2:10:3B:8F:73:1A:A5:50:B3:DC:7F:13:76:23:04:A9:81:62:6B
Certificate issuer: /CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B
Certificate serial: 40EA4B61F219D361D64CB9756CCC6D0F8C4FA0B1
Authority key identifier: 10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3137302e302f32342d3234203d3e203234323033.roa
Signing time: Wed 20 Apr 2022 05:00:05 +0000
ROA not before: Wed 20 Apr 2022 04:55:05 +0000
ROA not after: Wed 19 Apr 2023 05:00:05 +0000
asID: 24203
IP address blocks: 140.213.170.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:ea:4b:61:f2:19:d3:61:d6:4c:b9:75:6c:cc:6d:0f:8c:4f:a0:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B
Validity
Not Before: Apr 20 04:55:05 2022 GMT
Not After : Apr 19 05:00:05 2023 GMT
Subject: CN=7EB2103B8F731AA550B3DC7F13762304A981626B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:70:11:aa:f9:73:87:1d:de:28:9c:eb:39:d5:
ca:f0:4a:9c:c6:a0:66:c4:b4:88:41:2b:b4:80:87:
60:e4:b6:a9:de:30:a7:9b:6b:64:d3:a3:d8:bb:dd:
ac:05:b7:80:b4:7a:69:e0:c1:cc:7b:29:21:b2:4b:
2d:f6:ea:72:04:0b:5f:4d:d1:0c:4c:01:b3:d6:5c:
92:2b:bb:ea:18:d3:dd:53:79:48:2f:78:a0:f3:0e:
f9:4b:ed:50:cb:0b:5f:74:13:e2:09:a0:e5:e7:22:
4d:2c:05:25:e3:e3:d0:c5:75:24:de:a3:52:56:92:
82:ef:4d:fb:3d:83:62:b8:56:57:6a:98:82:d6:eb:
6c:c6:74:17:65:06:a4:c8:67:9b:a5:4f:ff:04:26:
f5:22:2a:cb:b3:b0:4d:86:2d:50:fb:7b:b2:b2:be:
02:70:c0:53:0f:49:ed:fe:18:fb:25:03:ef:12:f8:
fb:a7:f3:44:b2:28:8a:01:c6:4a:7d:01:f0:88:3c:
9e:d6:5c:e8:a6:3b:a1:32:fa:08:9f:12:65:89:8c:
f5:99:f0:00:56:f3:ac:9b:28:ac:97:f1:6a:24:c3:
50:3b:ca:9a:4e:fe:1a:e2:7c:95:c1:9d:b8:14:41:
54:cc:97:de:a5:1f:75:a7:83:93:17:99:5a:13:0b:
87:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:B2:10:3B:8F:73:1A:A5:50:B3:DC:7F:13:76:23:04:A9:81:62:6B
X509v3 Authority Key Identifier:
keyid:10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e3137302e302f32342d3234203d3e203234323033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.213.170.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:81:af:6f:e6:9d:7b:00:26:80:e0:d9:5d:f2:d3:6a:e0:72:
ec:d6:3e:fd:ac:16:21:06:e8:e6:04:3d:7b:38:1b:95:06:a1:
9c:c8:8f:c5:3f:ec:a5:82:e8:b6:0d:2a:a9:9d:3a:77:ca:9d:
90:07:a5:05:e1:c4:59:17:17:f8:77:37:51:b9:ce:eb:6d:4f:
fc:d5:47:8e:0b:fe:59:16:83:b1:bf:dc:58:be:d7:b6:08:b1:
bc:44:66:2f:65:f8:46:fa:48:4e:99:b1:63:bf:54:17:a5:f9:
12:5f:8f:80:b2:c7:bd:a5:f4:80:c5:f5:e0:2b:ad:cc:4a:b1:
6c:b8:d0:c8:cc:e4:1d:c5:57:a3:f2:bb:55:78:92:a7:3d:a8:
68:04:4d:d6:ea:af:e9:49:b6:ef:8c:a0:6f:d1:cc:b8:97:f2:
86:c7:c9:98:c2:46:fd:7f:96:ef:8c:b4:0f:fb:79:bd:4c:69:
04:7c:6d:c3:ea:28:41:ba:8a:a9:83:7a:80:30:75:44:73:a4:
ae:2e:ed:68:55:f3:b5:c7:9c:81:b2:ce:d5:d2:1c:a6:57:ef:
5f:b4:f9:3f:56:27:e1:72:a3:c8:87:a1:23:84:65:96:14:6a:
29:bf:dd:02:01:8c:fb:e3:3e:bf:b1:62:78:98:38:85:4c:5e:
29:94:d1:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:14:45 2025 by rpki-client