Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e37342e302f32342d3234203d3e203137343531.roa
File: 3131372e3130322e37342e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier: npXusBiNxglM7GrLUXWYK5tt+SN2sEuKa7l8dglqrOU=
Subject key identifier: 8C:37:20:3C:C2:F1:66:2B:49:76:5F:80:A0:DD:5F:BA:F1:C3:69:BD
Certificate issuer: /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial: 247111FF25037E0C5B401FCBE6C8EF8328860489
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e37342e302f32342d3234203d3e203137343531.roa
Signing time: Thu 30 Sep 2021 00:00:09 +0000
ROA not before: Wed 29 Sep 2021 23:55:09 +0000
ROA not after: Fri 30 Sep 2022 00:00:09 +0000
asID: 17451
IP address blocks: 117.102.74.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
24:71:11:ff:25:03:7e:0c:5b:40:1f:cb:e6:c8:ef:83:28:86:04:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
Validity
Not Before: Sep 29 23:55:09 2021 GMT
Not After : Sep 30 00:00:09 2022 GMT
Subject: CN=3082010A0282010100B93CD708B7166C4543E73DFD9DD9C32ABC8B384317226C8F1AFCBEB654BAE5948463707397B8D5FF526B114CDF9620FE258DD99ED6ABE7EED541ED2F6722FD2ED011C93D43791611BB24018454BC2E1BCB4AEDBA8BB76E317B913EDC64E0998AF99F3D6BB5BF8B3023217D26AD42BC8E276BE00664E4E76B97B8E74CCA42ED8364613526FB5A19F63F7A1DF9C5B74555918C8E83B97B6B58435D4287EE2392E1C0023807EABB565C2761054D501486881F51B221AE1268ACE8B09437E66535C70881514A763A28A71C6934D2EEC2896C5EAD78AFB118442F6AD4E7EF3AE181965923F48EA2C16D826AAC0C4CF8373AAECEFF2BC8E5E633DD8B114177B2FFF21D0203010001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3c:d7:08:b7:16:6c:45:43:e7:3d:fd:9d:d9:
c3:2a:bc:8b:38:43:17:22:6c:8f:1a:fc:be:b6:54:
ba:e5:94:84:63:70:73:97:b8:d5:ff:52:6b:11:4c:
df:96:20:fe:25:8d:d9:9e:d6:ab:e7:ee:d5:41:ed:
2f:67:22:fd:2e:d0:11:c9:3d:43:79:16:11:bb:24:
01:84:54:bc:2e:1b:cb:4a:ed:ba:8b:b7:6e:31:7b:
91:3e:dc:64:e0:99:8a:f9:9f:3d:6b:b5:bf:8b:30:
23:21:7d:26:ad:42:bc:8e:27:6b:e0:06:64:e4:e7:
6b:97:b8:e7:4c:ca:42:ed:83:64:61:35:26:fb:5a:
19:f6:3f:7a:1d:f9:c5:b7:45:55:91:8c:8e:83:b9:
7b:6b:58:43:5d:42:87:ee:23:92:e1:c0:02:38:07:
ea:bb:56:5c:27:61:05:4d:50:14:86:88:1f:51:b2:
21:ae:12:68:ac:e8:b0:94:37:e6:65:35:c7:08:81:
51:4a:76:3a:28:a7:1c:69:34:d2:ee:c2:89:6c:5e:
ad:78:af:b1:18:44:2f:6a:d4:e7:ef:3a:e1:81:96:
59:23:f4:8e:a2:c1:6d:82:6a:ac:0c:4c:f8:37:3a:
ae:ce:ff:2b:c8:e5:e6:33:dd:8b:11:41:77:b2:ff:
f2:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:37:20:3C:C2:F1:66:2B:49:76:5F:80:A0:DD:5F:BA:F1:C3:69:BD
X509v3 Authority Key Identifier:
keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e37342e302f32342d3234203d3e203137343531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
117.102.74.0/24
Signature Algorithm: sha256WithRSAEncryption
15:14:ad:c0:02:6a:69:75:0a:1f:2c:86:5d:62:32:e2:e7:e3:
28:a6:19:ef:83:0a:c4:b0:6e:f6:f4:b5:6d:20:9d:f3:5e:29:
b0:ed:36:5b:ec:c3:68:e2:3e:9c:17:25:b4:f5:00:88:ed:27:
e6:f2:40:90:ae:5c:e1:53:27:d2:7f:97:63:86:45:d8:6c:74:
97:89:76:5a:c2:98:48:d6:f5:3b:a4:67:cd:c5:b4:0e:cc:8f:
ed:71:57:d4:97:62:b6:19:93:1e:96:cd:a9:3e:23:10:3f:c1:
6b:0f:8a:7f:07:dd:44:62:dc:d5:95:57:18:b3:69:1c:9f:de:
fa:fa:77:b4:16:97:40:37:3e:c0:ca:69:b9:83:55:18:ce:ee:
61:bf:c5:2f:55:fc:c2:80:7d:02:ae:b6:01:0d:ad:a3:36:70:
57:99:df:8b:21:0e:f8:d3:ce:a1:dc:08:54:dd:04:f0:f3:ac:
c2:be:33:fe:c7:4f:35:ee:76:c9:ba:ff:31:75:e7:b5:b6:77:
ac:e5:98:96:95:42:7a:9f:56:55:67:7b:ba:13:84:37:1c:b9:
4f:07:f0:81:f6:21:68:2a:3f:79:90:22:44:b6:6a:f6:29:8e:
23:c9:f2:7c:0a:ec:9e:8e:c5:81:11:ce:23:98:d8:8d:64:fb:
af:bf:b1:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:44 2023 by rpki-client on console-fra.rpki-client.org