Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3230332e3134322e37342e302f32342d3234203d3e203137343531.roa
File: 3230332e3134322e37342e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier: KEY0Hm5xrEGBxc0wD6claaf2xiNmGpN8pEzuNev3Vgs=
Subject key identifier: 99:FB:C9:86:4D:77:B1:61:45:D4:B1:F6:AF:52:C5:6C:F8:81:4D:18
Certificate issuer: /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial: 12C034F7CD3EC9713E2D5D344EEFE90931B0A1D0
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3230332e3134322e37342e302f32342d3234203d3e203137343531.roa
Signing time: Thu 30 Sep 2021 00:00:06 +0000
ROA not before: Wed 29 Sep 2021 23:55:06 +0000
ROA not after: Fri 30 Sep 2022 00:00:06 +0000
asID: 17451
IP address blocks: 203.142.74.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
12:c0:34:f7:cd:3e:c9:71:3e:2d:5d:34:4e:ef:e9:09:31:b0:a1:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
Validity
Not Before: Sep 29 23:55:06 2021 GMT
Not After : Sep 30 00:00:06 2022 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:6d:a6:3d:d0:19:6a:a8:72:d0:8f:7c:46:1d:
5b:d0:ad:b2:25:76:a4:1a:07:3f:0b:fb:ae:4d:70:
4e:94:64:ce:f9:be:68:96:b6:d9:d6:95:18:70:63:
14:9f:54:e1:b0:8a:2f:25:60:e1:bb:d1:75:56:17:
7c:5d:99:ac:13:33:3d:b2:30:b5:db:c6:f4:22:d7:
31:89:4f:9f:75:15:46:81:d7:21:79:45:b2:6d:eb:
8f:8f:b4:27:a2:af:2f:a0:06:f6:20:e6:d3:18:7f:
fc:c2:57:fe:9d:86:7a:e4:04:87:b5:d6:bd:27:df:
0b:15:5f:08:90:50:0e:84:ed:af:2f:39:93:c8:af:
8d:bc:4a:7f:18:96:ab:9e:5c:fb:3f:d2:3d:d7:26:
e2:a6:ea:54:c6:f1:ed:66:9d:dd:9c:4d:c2:db:ab:
b7:98:a4:a8:f1:02:3a:7c:11:a8:0f:51:a6:4d:12:
b9:de:aa:a7:a2:98:25:01:d3:1b:23:7b:43:72:83:
ae:e0:2e:48:6c:71:78:09:82:8f:95:f9:38:81:99:
b6:10:c5:54:0e:7a:79:8f:1b:ad:6e:13:77:ea:af:
ce:93:af:34:96:47:a7:5f:81:82:f5:b5:69:96:08:
cd:ce:78:1f:00:58:44:81:56:85:86:64:c8:8e:f6:
51:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:FB:C9:86:4D:77:B1:61:45:D4:B1:F6:AF:52:C5:6C:F8:81:4D:18
X509v3 Authority Key Identifier:
keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3230332e3134322e37342e302f32342d3234203d3e203137343531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.142.74.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:91:7d:21:24:03:b4:a9:41:99:11:ff:ff:82:31:e9:37:e9:
6c:a0:de:06:85:bb:a1:5b:5e:c0:05:bd:0b:ec:0e:91:6d:55:
da:9f:51:80:42:58:9e:f1:04:69:9a:f0:ef:8f:de:53:0c:77:
69:97:09:49:bd:ae:d4:a0:73:97:c8:44:f2:ef:92:e4:a0:b8:
9e:8f:79:cd:7a:19:47:fd:95:ae:72:e9:2f:b8:d0:4c:73:d4:
99:7a:c8:d9:a0:6f:1a:57:39:1b:29:46:48:2f:c5:10:a6:1c:
6b:50:5e:8d:f6:44:62:ae:ca:fc:ab:53:78:4b:72:22:c3:4d:
60:5e:dc:e6:60:cf:4e:85:cf:c2:7b:fc:be:09:39:f9:b0:8b:
80:1e:48:ee:e4:d7:d8:3b:2c:04:78:bc:7b:6d:f3:65:80:2b:
fe:9b:36:25:47:a1:55:b3:50:19:19:9d:30:08:76:8e:77:0c:
34:2b:40:17:d0:54:04:e8:a3:51:6c:58:1e:aa:7f:00:41:e1:
af:5c:a0:69:da:e5:2c:2a:31:95:ee:ae:7e:8e:74:74:38:e8:
8a:04:34:a6:96:15:70:e0:ca:c8:cb:5c:14:d3:5a:44:53:1b:
b0:22:2e:9b:48:28:91:59:f5:4c:74:07:7e:5d:fb:0f:7b:33:
07:77:9b:00
-----BEGIN CERTIFICATE-----
MIIHJDCCBgygAwIBAgIUEsA0980+yXE+LV00Tu/pCTGwodAwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJBNDE3
RjcyOERCRjAeFw0yMTA5MjkyMzU1MDZaFw0yMjA5MzAwMDAwMDZaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQzc2REE2M0REMDE5NkFBODcy
RDA4RjdDNDYxRDVCRDBBREIyMjU3NkE0MUEwNzNGMEJGQkFFNEQ3MDRFOTQ2NENF
RjlCRTY4OTZCNkQ5RDY5NTE4NzA2MzE0OUY1NEUxQjA4QTJGMjU2MEUxQkJEMTc1
NTYxNzdDNUQ5OUFDMTMzMzNEQjIzMEI1REJDNkY0MjJENzMxODk0RjlGNzUxNTQ2
ODFENzIxNzk0NUIyNkRFQjhGOEZCNDI3QTJBRjJGQTAwNkY2MjBFNkQzMTg3RkZD
QzI1N0ZFOUQ4NjdBRTQwNDg3QjVENkJEMjdERjBCMTU1RjA4OTA1MDBFODRFREFG
MkYzOTkzQzhBRjhEQkM0QTdGMTg5NkFCOUU1Q0ZCM0ZEMjNERDcyNkUyQTZFQTU0
QzZGMUVENjY5REREOUM0REMyREJBQkI3OThBNEE4RjEwMjNBN0MxMUE4MEY1MUE2
NEQxMkI5REVBQUE3QTI5ODI1MDFEMzFCMjM3QjQzNzI4M0FFRTAyRTQ4NkM3MTc4
MDk4MjhGOTVGOTM4ODE5OUI2MTBDNTU0MEU3QTc5OEYxQkFENkUxMzc3RUFBRkNF
OTNBRjM0OTY0N0E3NUY4MTgyRjVCNTY5OTYwOENEQ0U3ODFGMDA1ODQ0ODE1Njg1
ODY2NEM4OEVGNjUxRkIwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAx22mPdAZaqhy0I98Rh1b0K2yJXakGgc/C/uuTXBOlGTO+b5olrbZ
1pUYcGMUn1ThsIovJWDhu9F1Vhd8XZmsEzM9sjC128b0ItcxiU+fdRVGgdcheUWy
beuPj7Qnoq8voAb2IObTGH/8wlf+nYZ65ASHtda9J98LFV8IkFAOhO2vLzmTyK+N
vEp/GJarnlz7P9I91ybipupUxvHtZp3dnE3C26u3mKSo8QI6fBGoD1GmTRK53qqn
opglAdMbI3tDcoOu4C5IbHF4CYKPlfk4gZm2EMVUDnp5jxutbhN36q/Ok680lken
X4GC9bVplgjNzngfAFhEgVaFhmTIjvZR+wIDAQABo4ICMjCCAi4wHQYDVR0OBBYE
FJn7yYZNd7FhRdSx9q9SxWz4gU0YMB8GA1UdIwQYMBaAFKxVVEe6YsORB/Fr9XL4
KkF/co2/MA4GA1UdDwEB/wQEAwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzk5M2YzNTAtYjc1Ni00OTE2LThk
ODQtNDg0ZjAyNWRmZmNjLzAvQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJB
NDE3RjcyOERCRi5jcmwwdAYIKwYBBQUHAQEEaDBmMGQGCCsGAQUFBzAChlhyc3lu
YzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8yL0FDNTU1NDQ3
QkE2MkMzOTEwN0YxNkJGNTcyRjgyQTQxN0Y3MjhEQkYuY2VyMIGiBggrBgEFBQcB
CwSBlTCBkjCBjwYIKwYBBQUHMAuGgYJyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby8zOTkzZjM1MC1iNzU2LTQ5MTYtOGQ4NC00ODRmMDI1ZGZmY2MvMC8z
MjMwMzMyZTMxMzQzMjJlMzczNDJlMzAyZjMyMzQyZDMyMzQyMDNkM2UyMDMxMzcz
NDM1MzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwHwYIKwYBBQUHAQcB
Af8EEDAOMAwEAgABMAYDBADLjkowDQYJKoZIhvcNAQELBQADggEBADuRfSEkA7Sp
QZkR//+CMek36Wyg3gaFu6FbXsAFvQvsDpFtVdqfUYBCWJ7xBGma8O+P3lMMd2mX
CUm9rtSgc5fIRPLvkuSguJ6Pec16GUf9la5y6S+40Exz1Jl6yNmgbxpXORspRkgv
xRCmHGtQXo32RGKuyvyrU3hLciLDTWBe3OZgz06Fz8J7/L4JOfmwi4AeSO7k19g7
LAR4vHtt82WAK/6bNiVHoVWzUBkZnTAIdo53DDQrQBfQVAToo1FsWB6qfwBB4a9c
oGna5SwqMZXurn6OdHQ46IoENKaWFXDgysjLXBTTWkRTG7AiLptIKJFZ9Ux0B35d
+w97Mwd3mwA=
-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:46 2023 by rpki-client on console-fra.rpki-client.org