Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e34382e302f32342d3234203d3e203234323033.roa
File: 3134302e3231332e34382e302f32342d3234203d3e203234323033.roa (raw, json)
Hash identifier: r5dopPJmx6nZJyrprHehbptpLF9aTYvIbX43cFxXBb8=
Subject key identifier: E7:78:E5:54:69:0A:C5:07:15:36:47:AB:1E:F2:59:7B:42:1D:3B:B9
Certificate issuer: /CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B
Certificate serial: 4CFF12DC542421508D6B4FC3E56F51210720966F
Authority key identifier: 10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e34382e302f32342d3234203d3e203234323033.roa
Signing time: Sat 08 Jan 2022 17:14:46 +0000
ROA not before: Sat 08 Jan 2022 17:09:46 +0000
ROA not after: Sun 08 Jan 2023 17:14:46 +0000
asID: 24203
IP address blocks: 140.213.48.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4c:ff:12:dc:54:24:21:50:8d:6b:4f:c3:e5:6f:51:21:07:20:96:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B
Validity
Not Before: Jan 8 17:09:46 2022 GMT
Not After : Jan 8 17:14:46 2023 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:85:c6:5c:f6:b6:78:56:45:93:8f:24:fc:fe:
da:2b:8a:f9:37:f9:3a:8b:3d:a3:58:5d:a1:4c:c1:
f1:0d:dc:24:83:1e:40:7b:d0:a6:65:3e:da:68:91:
85:5e:15:7e:32:50:63:d6:00:0b:dd:ed:91:b2:0d:
ee:52:17:3a:e3:60:e9:13:e4:66:7e:cf:77:6a:76:
f2:cd:90:14:3d:ad:25:9f:2a:82:c4:15:ff:dd:bb:
e4:c4:ea:15:97:90:36:e6:10:50:f8:72:e5:5b:6e:
1c:9b:cc:98:75:55:67:ed:13:d9:d7:4d:b2:89:43:
20:60:69:00:26:f9:6a:84:93:65:32:2b:2a:43:ac:
be:fd:5b:de:2d:6b:eb:5f:9e:ef:00:1e:0c:04:c9:
75:bf:aa:bf:90:b9:ca:22:64:a7:33:e9:f8:a0:ff:
c6:1f:76:2f:c4:08:30:6a:25:dc:20:26:00:17:e5:
0e:37:7c:97:b0:56:8a:57:23:3d:b5:dc:36:e5:f0:
73:ef:98:2b:a2:ae:42:b3:a3:a0:39:0f:a4:e7:de:
81:aa:8e:25:03:8b:f5:9c:6f:a0:fd:aa:c3:ad:e4:
0c:e5:c6:60:1f:81:d0:a3:ce:5d:df:fb:20:00:1c:
a3:f3:83:bb:bb:ee:b9:f7:9a:1c:be:ef:dc:7c:1f:
0f:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:78:E5:54:69:0A:C5:07:15:36:47:AB:1E:F2:59:7B:42:1D:3B:B9
X509v3 Authority Key Identifier:
keyid:10:BA:B7:90:7D:95:3A:0D:5F:DE:B5:C2:0C:9F:29:BC:FC:66:0A:1B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/10BAB7907D953A0D5FDEB5C20C9F29BCFC660A1B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/4bdb1e0a-a4ec-49db-be89-8d7e7fc2c227/1/3134302e3231332e34382e302f32342d3234203d3e203234323033.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.213.48.0/24
Signature Algorithm: sha256WithRSAEncryption
31:04:01:1f:33:15:b0:0b:93:8d:20:01:3a:e2:3a:85:8c:62:
32:ae:c5:c0:8f:bb:0d:49:4c:1f:14:1f:65:56:fa:e2:c5:77:
9d:a5:0c:9d:10:d4:1d:0e:f7:49:37:b3:b3:d1:1a:9b:b8:47:
b0:81:2e:8d:99:67:01:24:0d:3f:89:a9:6e:e0:71:18:2e:de:
96:d4:ee:64:aa:94:dc:be:e5:56:15:74:0d:45:42:f7:2f:c3:
47:f5:6c:64:06:55:0a:4e:ec:9e:b7:e7:05:9c:8e:6a:37:e5:
a9:bb:e6:0b:5c:11:8c:55:f7:10:5d:f9:7b:ca:15:e0:19:cb:
96:25:58:69:31:86:83:66:30:9f:a7:2d:a1:67:9f:f6:ab:5f:
b8:19:fe:19:12:53:ea:20:b1:85:47:db:f5:cd:58:1f:9d:1f:
92:86:8f:c6:81:c6:ff:b7:15:96:e5:2f:83:9f:ed:3c:57:36:
ca:8e:0c:44:3c:6d:fc:cc:12:89:9f:d6:91:84:fc:34:90:9d:
db:82:65:1d:e4:ae:72:18:7b:3d:56:32:ee:28:e5:08:58:e7:
6f:f3:23:48:04:dc:1f:65:c9:40:e0:45:1c:07:d7:0d:40:e5:
9d:b8:05:4b:84:14:45:90:67:ca:5d:a8:00:34:7b:70:d3:13:
de:70:b4:a1
-----BEGIN CERTIFICATE-----
MIIHJDCCBgygAwIBAgIUTP8S3FQkIVCNa0/D5W9RIQcglm8wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTBCQUI3OTA3RDk1M0EwRDVGREVCNUMyMEM5RjI5QkNG
QzY2MEExQjAeFw0yMjAxMDgxNzA5NDZaFw0yMzAxMDgxNzE0NDZaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzE4NUM2NUNGNkI2Nzg1NjQ1
OTM4RjI0RkNGRURBMkI4QUY5MzdGOTNBOEIzREEzNTg1REExNENDMUYxMEREQzI0
ODMxRTQwN0JEMEE2NjUzRURBNjg5MTg1NUUxNTdFMzI1MDYzRDYwMDBCRERFRDkx
QjIwREVFNTIxNzNBRTM2MEU5MTNFNDY2N0VDRjc3NkE3NkYyQ0Q5MDE0M0RBRDI1
OUYyQTgyQzQxNUZGRERCQkU0QzRFQTE1OTc5MDM2RTYxMDUwRjg3MkU1NUI2RTFD
OUJDQzk4NzU1NTY3RUQxM0Q5RDc0REIyODk0MzIwNjA2OTAwMjZGOTZBODQ5MzY1
MzIyQjJBNDNBQ0JFRkQ1QkRFMkQ2QkVCNUY5RUVGMDAxRTBDMDRDOTc1QkZBQUJG
OTBCOUNBMjI2NEE3MzNFOUY4QTBGRkM2MUY3NjJGQzQwODMwNkEyNURDMjAyNjAw
MTdFNTBFMzc3Qzk3QjA1NjhBNTcyMzNEQjVEQzM2RTVGMDczRUY5ODJCQTJBRTQy
QjNBM0EwMzkwRkE0RTdERTgxQUE4RTI1MDM4QkY1OUM2RkEwRkRBQUMzQURFNDBD
RTVDNjYwMUY4MUQwQTNDRTVEREZGQjIwMDAxQ0EzRjM4M0JCQkJFRUI5Rjc5QTFD
QkVFRkRDN0MxRjBGNEYwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAwYXGXPa2eFZFk48k/P7aK4r5N/k6iz2jWF2hTMHxDdwkgx5Ae9Cm
ZT7aaJGFXhV+MlBj1gAL3e2Rsg3uUhc642DpE+Rmfs93anbyzZAUPa0lnyqCxBX/
3bvkxOoVl5A25hBQ+HLlW24cm8yYdVVn7RPZ102yiUMgYGkAJvlqhJNlMisqQ6y+
/VveLWvrX57vAB4MBMl1v6q/kLnKImSnM+n4oP/GH3YvxAgwaiXcICYAF+UON3yX
sFaKVyM9tdw25fBz75groq5Cs6OgOQ+k596Bqo4lA4v1nG+g/arDreQM5cZgH4HQ
o85d3/sgAByj84O7u+6595ocvu/cfB8PTwIDAQABo4ICMjCCAi4wHQYDVR0OBBYE
FOd45VRpCsUHFTZHqx7yWXtCHTu5MB8GA1UdIwQYMBaAFBC6t5B9lToNX961wgyf
Kbz8ZgobMA4GA1UdDwEB/wQEAwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNGJkYjFlMGEtYTRlYy00OWRiLWJl
ODktOGQ3ZTdmYzJjMjI3LzEvMTBCQUI3OTA3RDk1M0EwRDVGREVCNUMyMEM5RjI5
QkNGQzY2MEExQi5jcmwwdAYIKwYBBQUHAQEEaDBmMGQGCCsGAQUFBzAChlhyc3lu
YzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8xLzEwQkFCNzkw
N0Q5NTNBMEQ1RkRFQjVDMjBDOUYyOUJDRkM2NjBBMUIuY2VyMIGiBggrBgEFBQcB
CwSBlTCBkjCBjwYIKwYBBQUHMAuGgYJyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby80YmRiMWUwYS1hNGVjLTQ5ZGItYmU4OS04ZDdlN2ZjMmMyMjcvMS8z
MTM0MzAyZTMyMzEzMzJlMzQzODJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMyMzQz
MjMwMzMucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBACM1TAwDQYJKoZIhvcNAQELBQADggEBADEEAR8zFbAL
k40gATriOoWMYjKuxcCPuw1JTB8UH2VW+uLFd52lDJ0Q1B0O90k3s7PRGpu4R7CB
Lo2ZZwEkDT+JqW7gcRgu3pbU7mSqlNy+5VYVdA1FQvcvw0f1bGQGVQpO7J635wWc
jmo35am75gtcEYxV9xBd+XvKFeAZy5YlWGkxhoNmMJ+nLaFnn/arX7gZ/hkSU+og
sYVH2/XNWB+dH5KGj8aBxv+3FZblL4Of7TxXNsqODEQ8bfzMEomf1pGE/DSQnduC
ZR3krnIYez1WMu4o5QhY52/zI0gE3B9lyUDgRRwH1w1A5Z24BUuEFEWQZ8pdqAA0
e3DTE95wtKE=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:13:45 2025 by rpki-client