Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131322e37382e3135372e302f32342d3234203d3e203137343531.roa
File: 3131322e37382e3135372e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier: SGv9Idi4Lv6w39SWnJZBuz+AozPd8G5yiJ51Pb6dio0=
Subject key identifier: C3:5F:2B:E8:49:D3:46:BE:3D:C5:28:5C:C2:27:49:5A:7D:90:80:DB
Certificate issuer: /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial: 3136A1640FAE39E56F4AEB6BE13E0CA9B9AE708E
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131322e37382e3135372e302f32342d3234203d3e203137343531.roa
Signing time: Thu 30 Sep 2021 00:00:24 +0000
ROA not before: Wed 29 Sep 2021 23:55:24 +0000
ROA not after: Fri 30 Sep 2022 00:00:24 +0000
asID: 17451
IP address blocks: 112.78.157.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
31:36:a1:64:0f:ae:39:e5:6f:4a:eb:6b:e1:3e:0c:a9:b9:ae:70:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
Validity
Not Before: Sep 29 23:55:24 2021 GMT
Not After : Sep 30 00:00:24 2022 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e1:43:fc:e8:0e:bd:2b:66:00:2d:5e:c4:b8:
fb:4b:c2:b6:fb:fd:0c:09:ee:e9:c0:d9:c2:8a:c4:
3e:1d:9e:08:1a:14:b0:91:cd:1e:ec:00:bb:05:f7:
41:79:90:0f:83:2c:0d:03:3d:dc:f9:c7:b2:b8:57:
71:47:da:5b:02:bf:b8:49:b2:23:f8:02:c1:92:c5:
34:d3:ec:ee:ae:89:96:a0:41:69:09:3c:b6:b8:9e:
8b:ce:38:c3:37:48:eb:d4:89:cc:a1:0b:47:a7:4b:
fa:91:8c:54:26:0e:89:a1:7c:9f:f5:7c:61:56:57:
e1:53:9d:16:09:13:d3:00:80:d2:d7:c5:84:d9:03:
00:4b:c6:68:17:ec:4c:bc:0e:08:f2:02:47:29:1b:
05:fe:e3:07:e7:bd:39:b5:f0:a7:9b:54:1c:8c:c2:
81:6c:67:ae:ed:a4:06:da:d5:8b:9d:56:62:4c:bf:
19:e3:9b:a8:8b:d6:e0:bf:b4:28:fc:31:bc:9f:e6:
15:9d:dc:54:ed:f2:db:49:7d:04:33:56:2e:16:82:
b4:62:e9:84:10:3e:64:d6:73:16:41:3a:10:bd:48:
29:e0:cd:98:fd:e3:b1:13:76:4c:50:1a:b6:e6:57:
66:95:26:7c:ad:e1:2a:93:4e:e7:1b:6d:f3:09:6b:
48:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:5F:2B:E8:49:D3:46:BE:3D:C5:28:5C:C2:27:49:5A:7D:90:80:DB
X509v3 Authority Key Identifier:
keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131322e37382e3135372e302f32342d3234203d3e203137343531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
112.78.157.0/24
Signature Algorithm: sha256WithRSAEncryption
98:3d:5c:f7:4d:45:8e:72:13:f3:66:14:af:a3:37:b8:04:c6:
4d:d7:40:36:c0:7e:6f:49:2e:02:b1:68:25:3b:42:3a:74:00:
f6:8a:12:fe:3a:d0:66:c7:cf:bd:2c:51:10:cb:ca:78:9e:00:
c6:5f:b1:91:fe:1d:05:ab:99:97:c2:fd:24:cc:f8:e8:ae:25:
b3:67:51:59:03:fe:73:7d:70:0f:91:57:7a:fa:02:5f:ae:a0:
09:22:bc:8a:c5:ba:a4:96:64:ca:0d:85:89:71:0d:da:f2:4c:
c3:66:ce:e6:ec:36:41:db:0d:ee:60:c6:82:a1:8a:ab:1e:2b:
ef:f5:63:23:16:1c:0a:8a:1a:39:03:19:ae:96:1f:7b:8c:ad:
77:5e:94:66:7f:c2:18:11:18:f7:30:96:13:47:f1:2b:5e:1b:
1e:da:d1:a8:eb:35:dd:83:9a:9d:0b:13:0c:bd:9a:a9:99:b5:
14:95:4a:c9:86:4a:28:96:a3:85:0e:98:ab:69:a2:0e:5a:cf:
11:f7:87:77:43:00:5a:39:18:b7:9c:79:40:9d:8e:ed:88:f5:
8c:db:0c:dd:20:77:8a:6d:3f:9d:ee:9c:a9:52:54:1c:92:32:
8b:96:5f:5d:e1:cb:f7:20:cd:ac:56:20:98:d8:4e:bb:e9:bf:
54:99:5a:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:44 2023 by rpki-client on console-fra.rpki-client.org