Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e34342e302f32342d3234203d3e203234323033.roa
File: 3134302e3231332e34342e302f32342d3234203d3e203234323033.roa (raw, json)
Hash identifier: AbMrDrZfj3qmGnElhLYlMGoEHf4mojIwZrF/eS728GE=
Subject key identifier: F1:DB:5F:96:3D:4C:AD:E5:33:C7:C6:44:E5:A0:C8:1E:E3:05:A1:0F
Certificate issuer: /CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B
Certificate serial: 10CF3FD8E5FB332FA3C806D0B411423BB2809EE9
Authority key identifier: 10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e34342e302f32342d3234203d3e203234323033.roa
Signing time: Sat 08 Jan 2022 17:13:36 +0000
ROA not before: Sat 08 Jan 2022 17:08:36 +0000
ROA not after: Sun 08 Jan 2023 17:13:36 +0000
asID: 24203
IP address blocks: 140.213.44.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
10:cf:3f:d8:e5:fb:33:2f:a3:c8:06:d0:b4:11:42:3b:b2:80:9e:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B
Validity
Not Before: Jan 8 17:08:36 2022 GMT
Not After : Jan 8 17:13:36 2023 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f9:cb:64:5e:c8:70:be:d6:21:ca:e7:39:d3:
b2:fa:73:08:5f:15:1a:1a:74:0f:e3:b5:60:c6:a4:
38:7b:67:dc:4e:71:27:9a:da:e3:6a:5d:67:4f:53:
00:9a:3b:34:0e:b2:8c:71:7e:2b:99:93:f6:e1:81:
05:82:5a:be:c7:4a:c9:d3:fb:71:a6:be:0c:eb:17:
72:6e:f0:c7:6a:b6:75:7a:5a:25:f0:b1:b2:49:a2:
be:3f:71:f2:ff:b6:bd:b1:b5:f8:33:26:91:c7:09:
f8:39:f5:89:d7:28:ae:5e:ec:9b:cc:40:71:d8:88:
75:a4:06:5d:33:08:23:f1:ad:22:1d:f9:c8:d3:75:
da:8e:a9:aa:d8:76:8f:27:dc:0b:04:50:d8:fa:c4:
d6:3d:42:11:c3:6a:cd:bd:16:74:22:c9:f2:d8:7c:
b5:f8:df:84:06:61:b4:da:d4:80:98:cf:ca:f5:06:
35:05:db:92:7e:a7:59:10:0a:dd:77:5f:85:61:a9:
94:71:88:82:c1:4a:d8:ee:d1:10:2c:f5:22:b8:e1:
0e:14:db:6e:83:8b:c2:23:da:40:ff:12:58:37:49:
0a:1a:8f:5f:06:b6:dd:f4:c7:f1:e6:b2:c1:2b:1b:
b5:72:5b:fc:e0:43:81:d2:a6:56:8d:0c:ac:66:8c:
50:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:DB:5F:96:3D:4C:AD:E5:33:C7:C6:44:E5:A0:C8:1E:E3:05:A1:0F
X509v3 Authority Key Identifier:
keyid:10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e34342e302f32342d3234203d3e203234323033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.213.44.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:17:85:d7:84:7e:f2:38:46:cb:13:88:84:bf:8e:f4:52:3e:
bb:d8:a7:66:77:1c:a5:31:f2:ea:4a:4e:f5:87:cd:8d:e1:16:
46:92:b0:8e:02:80:9d:88:6d:86:2a:44:e8:f9:06:1a:64:0c:
60:50:f2:6d:ea:4a:7c:79:24:8b:d7:d4:19:33:63:de:25:e3:
db:fc:7d:21:46:2e:20:19:0e:23:87:57:09:6c:f6:13:72:39:
a9:83:c6:5a:b1:25:23:47:76:07:8d:31:3c:8c:8f:62:b1:0d:
39:be:9c:f9:e5:50:13:0c:64:17:9a:83:70:92:63:94:df:81:
e8:6a:7a:8a:9e:92:55:08:80:ab:bc:2f:c6:ab:47:3d:08:0b:
c2:1a:cf:51:46:a1:eb:00:d1:35:b0:46:4f:bc:09:2f:84:ba:
67:54:8b:f0:1c:d4:97:d8:b5:2b:7c:22:e1:08:b1:32:34:b9:
bf:fa:31:12:f5:7f:30:60:e6:79:67:37:2d:2c:00:f6:a3:8f:
f9:06:d8:66:ad:9b:4e:c5:d4:ca:9d:fe:24:92:98:3a:77:5c:
aa:07:07:60:ad:40:e3:19:c6:9f:5c:c4:e5:78:ca:b1:ac:94:
05:07:a0:a0:1d:65:71:4b:f5:b6:16:1f:88:f1:a1:63:4c:53:
c4:4a:50:a8
-----BEGIN CERTIFICATE-----
MIIHJDCCBgygAwIBAgIUEM8/2OX7My+jyAbQtBFCO7KAnukwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTBCQUI3OTA3RDk1M0EwRDVGREVCNUMyMEM5RjI5QkNG
QzY2MEExQjAeFw0yMjAxMDgxNzA4MzZaFw0yMzAxMDgxNzEzMzZaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjBGOUNCNjQ1RUM4NzBCRUQ2
MjFDQUU3MzlEM0IyRkE3MzA4NUYxNTFBMUE3NDBGRTNCNTYwQzZBNDM4N0I2N0RD
NEU3MTI3OUFEQUUzNkE1RDY3NEY1MzAwOUEzQjM0MEVCMjhDNzE3RTJCOTk5M0Y2
RTE4MTA1ODI1QUJFQzc0QUM5RDNGQjcxQTZCRTBDRUIxNzcyNkVGMEM3NkFCNjc1
N0E1QTI1RjBCMUIyNDlBMkJFM0Y3MUYyRkZCNkJEQjFCNUY4MzMyNjkxQzcwOUY4
MzlGNTg5RDcyOEFFNUVFQzlCQ0M0MDcxRDg4ODc1QTQwNjVEMzMwODIzRjFBRDIy
MURGOUM4RDM3NURBOEVBOUFBRDg3NjhGMjdEQzBCMDQ1MEQ4RkFDNEQ2M0Q0MjEx
QzM2QUNEQkQxNjc0MjJDOUYyRDg3Q0I1RjhERjg0MDY2MUI0REFENDgwOThDRkNB
RjUwNjM1MDVEQjkyN0VBNzU5MTAwQURENzc1Rjg1NjFBOTk0NzE4ODgyQzE0QUQ4
RUVEMTEwMkNGNTIyQjhFMTBFMTREQjZFODM4QkMyMjNEQTQwRkYxMjU4Mzc0OTBB
MUE4RjVGMDZCNkRERjRDN0YxRTZCMkMxMkIxQkI1NzI1QkZDRTA0MzgxRDJBNjU2
OEQwQ0FDNjY4QzUwMzEwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAsPnLZF7IcL7WIcrnOdOy+nMIXxUaGnQP47VgxqQ4e2fcTnEnmtrj
al1nT1MAmjs0DrKMcX4rmZP24YEFglq+x0rJ0/txpr4M6xdybvDHarZ1elol8LGy
SaK+P3Hy/7a9sbX4MyaRxwn4OfWJ1yiuXuybzEBx2Ih1pAZdMwgj8a0iHfnI03Xa
jqmq2HaPJ9wLBFDY+sTWPUIRw2rNvRZ0Isny2Hy1+N+EBmG02tSAmM/K9QY1BduS
fqdZEArdd1+FYamUcYiCwUrY7tEQLPUiuOEOFNtug4vCI9pA/xJYN0kKGo9fBrbd
9Mfx5rLBKxu1clv84EOB0qZWjQysZoxQMQIDAQABo4ICMjCCAi4wHQYDVR0OBBYE
FPHbX5Y9TK3lM8fGROWgyB7jBaEPMB8GA1UdIwQYMBaAFBC6t5B9lToNX961wgyf
Kbz8ZgobMA4GA1UdDwEB/wQEAwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGJkYjFlMGEtYTRlYy00OWRiLWJl
ODktOGQ3ZTdmYzJjMjI3LzEvMTBCQUI3OTA3RDk1M0EwRDVGREVCNUMyMEM5RjI5
QkNGQzY2MEExQi5jcmwwdAYIKwYBBQUHAQEEaDBmMGQGCCsGAQUFBzAChlhyc3lu
YzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8xLzEwQkFCNzkw
N0Q5NTNBMEQ1RkRFQjVDMjBDOUYyOUJDRkM2NjBBMUIuY2VyMIGiBggrBgEFBQcB
CwSBlTCBkjCBjwYIKwYBBQUHMAuGgYJyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby80YmRiMWUwYS1hNGVjLTQ5ZGItYmU4OS04ZDdlN2ZjMmMyMjcvMS8z
MTM0MzAyZTMyMzEzMzJlMzQzNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzQz
MjMwMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBACM1SwwDQYJKoZIhvcNAQELBQADggEBABoXhdeEfvI4
RssTiIS/jvRSPrvYp2Z3HKUx8upKTvWHzY3hFkaSsI4CgJ2IbYYqROj5BhpkDGBQ
8m3qSnx5JIvX1BkzY94l49v8fSFGLiAZDiOHVwls9hNyOamDxlqxJSNHdgeNMTyM
j2KxDTm+nPnlUBMMZBeag3CSY5TfgehqeoqeklUIgKu8L8arRz0IC8Iaz1FGoesA
0TWwRk+8CS+EumdUi/Ac1JfYtSt8IuEIsTI0ub/6MRL1fzBg5nlnNy0sAPajj/kG
2Gatm07F1Mqd/iSSmDp3XKoHB2CtQOMZxp9cxOV4yrGslAUHoKAdZXFL9bYWH4jx
oWNMU8RKUKg=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:23:39 2025 by rpki-client