Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3230322e3136392e36302e302f32342d3234203d3e203137343531.roa
File: 3230322e3136392e36302e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier: Dq8+FayQtLZ8Z/FHxNcjOMm3ZhyuhOrqx9cLkMGlK/I=
Subject key identifier: FD:48:9D:D2:AE:CC:36:AC:7E:FE:6E:54:8E:E6:06:18:06:B4:27:F5
Certificate issuer: /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial: 4B03FE8064432C9B7F7749F8CAF60B4C9B42B7BD
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3230322e3136392e36302e302f32342d3234203d3e203137343531.roa
Signing time: Thu 30 Sep 2021 00:00:36 +0000
ROA not before: Wed 29 Sep 2021 23:55:36 +0000
ROA not after: Fri 30 Sep 2022 00:00:36 +0000
asID: 17451
IP address blocks: 202.169.60.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4b:03:fe:80:64:43:2c:9b:7f:77:49:f8:ca:f6:0b:4c:9b:42:b7:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
Validity
Not Before: Sep 29 23:55:36 2021 GMT
Not After : Sep 30 00:00:36 2022 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f5:e1:8e:04:43:48:81:04:0e:9b:46:6b:a0:
21:b5:b7:50:9a:3a:bc:a9:92:b5:b9:05:5e:5a:d6:
54:a1:d7:64:32:96:9e:6e:aa:ae:2e:1d:02:0c:d2:
7f:ef:ca:4b:e9:b5:bc:e1:4c:bd:a2:5a:ad:14:9d:
e0:a5:7b:9b:64:25:5e:81:9e:2c:61:54:6a:cd:a3:
e4:01:31:28:6b:af:82:86:20:4b:f8:18:2f:56:d2:
f3:cc:42:c7:e1:10:bf:c0:4f:97:30:54:f5:8f:7b:
e9:77:cd:dd:58:e3:3f:b9:40:e3:af:23:7b:cb:7b:
f7:b4:87:66:a2:94:eb:26:36:da:6a:5c:14:f2:76:
07:e0:57:42:86:a7:21:87:4f:6b:44:2d:43:6a:3d:
68:3a:1b:9b:a6:6a:de:25:34:76:e8:a9:2d:da:4f:
0e:f2:a8:ff:81:2f:9b:08:ca:5b:f6:eb:01:00:4d:
e3:08:ac:3c:5c:51:5d:f5:6a:01:39:a5:01:71:da:
08:8c:40:ae:61:c1:3f:8e:df:a7:61:08:45:44:cf:
e3:63:c4:b0:83:c7:f4:80:61:61:c3:a4:1f:5a:99:
9b:4c:2f:44:c1:fd:8f:1d:67:d2:c9:37:a3:c9:04:
61:d4:cb:f2:1c:34:c3:6b:a3:b7:a6:b8:c8:6f:2e:
93:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:48:9D:D2:AE:CC:36:AC:7E:FE:6E:54:8E:E6:06:18:06:B4:27:F5
X509v3 Authority Key Identifier:
keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3230322e3136392e36302e302f32342d3234203d3e203137343531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.169.60.0/24
Signature Algorithm: sha256WithRSAEncryption
04:ce:50:9f:8a:f2:a6:11:d3:b4:8a:5a:e2:66:c6:67:c4:d7:
2f:31:c3:4d:be:6c:96:1d:cd:bc:f0:69:1e:2d:19:a2:fc:3a:
bc:5f:5b:4f:fa:8c:e0:7f:52:91:1e:ac:da:24:d9:c4:da:46:
cb:f1:82:23:1b:95:43:50:18:d3:a8:5c:2c:76:8e:5c:20:08:
77:c7:7d:96:a4:d4:48:8a:78:07:29:21:82:67:42:bf:4f:46:
6a:46:58:22:ca:bc:2a:29:22:10:77:b8:c6:54:11:d5:7c:fd:
dd:16:5b:19:32:21:e2:72:97:cd:34:54:5b:18:3d:d0:9f:1c:
b0:ee:0c:4f:63:69:e7:75:e7:15:55:e1:26:ab:92:74:36:5f:
3f:be:5f:3c:04:f9:5a:b8:5d:ed:87:d0:9d:5f:dc:53:c0:3c:
a6:26:06:d6:46:4b:24:12:ab:ae:90:ed:2d:6b:59:49:6f:4c:
f6:51:7f:fe:63:49:4b:0a:18:ed:8a:bb:68:eb:f8:00:37:42:
e5:e1:67:9d:61:0d:67:2b:f3:df:d1:e2:0c:a8:11:3c:24:4a:
37:75:95:be:d3:ac:8f:5a:23:6c:7c:79:f5:74:9b:67:ef:f6:
51:66:c5:ea:d0:5f:76:43:da:87:f1:30:b1:5d:63:d1:4d:35:
a8:ef:93:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:46 2023 by rpki-client on console-fra.rpki-client.org