Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e3131372e302f32342d3234203d3e203137343531.roa
File: 3131372e3130322e3131372e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier: qrc17L6l0wmC67wqvmb9Tin1t1EKcEAxkAUBhIEtLSE=
Subject key identifier: A1:F9:13:07:09:F4:CB:DD:CC:D1:B1:F6:7D:F9:CA:60:83:06:A0:B7
Certificate issuer: /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial: 3E116522759A27EB578430915002BC746E70B4BE
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e3131372e302f32342d3234203d3e203137343531.roa
Signing time: Thu 30 Sep 2021 00:00:54 +0000
ROA not before: Wed 29 Sep 2021 23:55:54 +0000
ROA not after: Fri 30 Sep 2022 00:00:54 +0000
asID: 17451
IP address blocks: 117.102.117.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3e:11:65:22:75:9a:27:eb:57:84:30:91:50:02:bc:74:6e:70:b4:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
Validity
Not Before: Sep 29 23:55:54 2021 GMT
Not After : Sep 30 00:00:54 2022 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:f1:46:c7:a8:3c:f4:c6:95:3a:5a:62:e4:6b:
d3:aa:62:3e:64:ca:df:f8:a2:58:09:69:7e:f9:5c:
e6:4f:84:9e:72:83:eb:f1:32:24:cd:a6:32:18:11:
ec:9d:7e:aa:49:eb:20:fd:02:76:be:65:7a:6d:9a:
e8:46:da:10:25:51:ff:69:54:e2:16:08:f5:91:a8:
94:ce:88:3f:3e:02:a5:f1:06:5d:74:c7:91:d9:5c:
29:ef:c1:de:3b:70:ff:cd:a5:02:ba:67:47:10:53:
0a:73:aa:de:f8:c3:8c:99:60:3e:89:91:e0:08:cd:
6c:3a:6a:04:ff:50:8f:35:cb:53:01:11:c4:4e:9f:
2b:44:dd:1c:f7:49:63:6b:24:b5:d0:88:5d:16:f1:
57:75:e4:04:9e:f3:09:57:16:1f:3d:96:91:96:ab:
06:b3:6f:ed:90:63:a2:f9:67:63:45:54:ea:39:a8:
66:60:a7:ae:89:16:be:6b:59:f0:be:10:c8:fe:ef:
68:4f:33:d4:e3:91:45:32:34:12:8b:26:dd:65:14:
f6:37:6f:a3:04:e6:2f:93:15:03:d9:98:22:55:b5:
77:45:91:74:2a:cc:b5:91:a1:99:41:f2:a1:58:9c:
d2:c3:6b:d2:6c:08:d5:f8:59:91:30:c8:6b:f6:58:
c5:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A1:F9:13:07:09:F4:CB:DD:CC:D1:B1:F6:7D:F9:CA:60:83:06:A0:B7
X509v3 Authority Key Identifier:
keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e3131372e302f32342d3234203d3e203137343531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
117.102.117.0/24
Signature Algorithm: sha256WithRSAEncryption
52:64:0c:d4:cc:08:63:c3:8a:86:82:15:b2:d5:e0:fa:8e:47:
05:73:b8:24:88:93:be:a7:5e:34:d3:32:53:53:d2:fc:c9:6e:
b7:c8:c1:67:74:17:96:12:24:76:7f:e9:c2:b9:36:73:5b:8f:
99:63:b1:bd:1c:90:ce:70:1c:24:e9:44:2c:d6:bd:de:7b:30:
78:35:ea:3e:94:99:69:7d:e6:15:17:ec:c9:65:5f:0f:31:da:
25:02:27:64:51:3d:ca:53:31:c2:d6:71:38:bb:21:c2:ec:5b:
19:8c:d0:3a:1d:5f:96:54:a0:22:28:f3:06:31:cf:2c:00:0b:
be:85:3e:30:d8:16:82:66:dd:85:ca:06:9a:62:1a:ab:f0:31:
61:52:a3:ba:aa:0b:6f:0f:99:2d:c8:8d:b9:db:1b:5c:aa:91:
dd:2a:14:62:19:c7:56:3d:a2:1a:88:74:70:38:4b:23:48:0e:
f5:37:ab:17:b4:a9:cc:55:ae:dc:0b:b6:2c:40:78:bd:92:c2:
e2:16:84:a8:e6:71:5f:a8:f6:06:bc:9f:6c:69:1f:6c:86:4d:
ce:a7:11:95:a2:94:ea:79:3e:c0:ff:a4:25:25:16:60:ad:1e:
cd:2a:55:cf:be:5b:f7:b5:95:b2:93:74:9a:82:33:31:79:47:
79:7b:f8:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:44 2023 by rpki-client on console-fra.rpki-client.org