Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e31392e302f32342d3234203d3e203234323033.roa
File: 3134302e3231332e31392e302f32342d3234203d3e203234323033.roa (raw, json)
Hash identifier: UDY/6Ug9t0S5cGbqFmRi4guIDIYvKjRWm5zbXm2bkTY=
Subject key identifier: 26:67:CA:36:BF:3D:D2:CA:B4:2E:7E:62:04:4F:01:06:7D:18:1C:B8
Certificate issuer: /CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B
Certificate serial: 1C15C137571412DE12D02CFE1A5BACD3B655BA12
Authority key identifier: 10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e31392e302f32342d3234203d3e203234323033.roa
Signing time: Wed 13 Apr 2022 08:00:01 +0000
ROA not before: Wed 13 Apr 2022 07:55:01 +0000
ROA not after: Wed 12 Apr 2023 08:00:01 +0000
asID: 24203
IP address blocks: 140.213.19.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:15:c1:37:57:14:12:de:12:d0:2c:fe:1a:5b:ac:d3:b6:55:ba:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B
Validity
Not Before: Apr 13 07:55:01 2022 GMT
Not After : Apr 12 08:00:01 2023 GMT
Subject: CN=2667CA36BF3DD2CAB42E7E62044F01067D181CB8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:b9:10:06:ec:8c:19:94:78:c2:cf:62:ed:b1:
b6:5b:c7:ab:83:7e:80:69:26:1e:f0:d6:31:d9:19:
cf:9d:f8:ea:ea:e5:09:4b:5f:42:6f:2f:c6:ae:9e:
d2:be:13:42:8a:26:08:e6:64:d3:fb:d2:be:3f:e5:
ec:8c:2e:60:3a:69:c6:51:89:7a:c9:a7:c2:92:61:
41:4f:fa:4b:35:81:6a:09:3b:81:c8:65:f1:10:88:
c9:27:57:17:48:77:aa:7b:6c:34:13:af:61:38:22:
63:08:66:88:9c:c7:c9:e5:1a:17:69:70:a5:a1:af:
3a:52:b6:8e:cd:3b:75:07:cb:e3:af:29:f2:3d:74:
59:73:90:d1:7b:a8:91:44:b7:d2:a6:d9:19:bd:da:
5c:5c:ba:d8:d2:46:05:16:d3:36:1f:c1:97:c4:bd:
ae:10:60:61:a6:09:1e:71:f7:22:b7:c5:ae:0a:4a:
54:fe:59:29:93:4e:1c:a2:ff:95:b4:15:b7:1c:94:
86:03:c1:5b:33:c8:79:c5:c2:b9:61:d1:94:88:23:
70:8d:32:42:0a:9d:b2:48:62:e4:f5:0c:8c:8a:c1:
a2:08:16:de:e6:f6:b8:15:ff:cc:67:6c:19:11:77:
73:6d:6a:26:2a:a8:e9:6e:af:7d:f5:cd:c0:7c:a4:
f0:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:67:CA:36:BF:3D:D2:CA:B4:2E:7E:62:04:4F:01:06:7D:18:1C:B8
X509v3 Authority Key Identifier:
keyid:10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e31392e302f32342d3234203d3e203234323033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.213.19.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:fb:f2:8a:ac:e5:f1:5c:36:68:69:f9:49:d6:5e:9d:61:ad:
7d:fd:bb:4e:3d:b0:3a:12:62:64:5a:14:b0:22:fc:23:35:eb:
d6:67:da:a5:7a:76:07:7f:c4:47:56:74:da:6b:16:e8:40:3e:
78:77:21:ee:7c:c4:c4:c3:e0:e0:42:1a:6d:09:db:22:2d:45:
13:73:0f:c2:20:18:71:a4:e4:49:bf:59:d7:a2:03:59:5f:06:
6e:ee:d1:e8:14:9f:af:c1:6c:17:44:0a:4f:46:01:ec:1a:be:
2c:f4:53:09:a2:b6:47:ed:18:a9:0d:b6:8c:e7:5e:17:2c:1c:
31:1e:83:2e:bd:7d:8a:a5:3f:75:f6:6b:20:7d:cf:d1:97:04:
d9:2b:87:3b:12:1c:f5:98:d3:83:a8:94:a4:4a:33:c8:ae:78:
60:f3:32:d0:b6:60:e4:39:5f:a7:62:1d:7e:36:83:62:1c:1c:
6b:5a:2c:0c:9c:39:ef:33:e1:b1:9e:40:8b:6e:10:e8:65:64:
e4:79:97:4b:ce:43:4c:ad:cb:39:4d:99:dd:80:b1:13:09:01:
2c:d5:9e:d6:51:c2:f7:5b:ce:ef:8c:cc:63:d5:fc:9f:da:5b:
fc:e5:14:ff:a5:75:35:24:1d:71:83:a8:d3:ab:98:3d:3b:85:
55:ac:00:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:27:28 2025 by rpki-client