Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/3230322e35372e32362e302f32332d3234203d3e20313430343639.roa
File: 3230322e35372e32362e302f32332d3234203d3e20313430343639.roa (raw, json)
Hash identifier: gGOLzVfVa+zB3aPfWEWpP0dfFqpSpbSGKb1Rij5mfDg=
Subject key identifier: 10:A8:51:9C:42:DD:5E:15:75:AA:27:0E:0E:9B:CC:B1:DD:2A:4C:79
Certificate issuer: /CN=1F969EE9B0838D22156118A888B81BF27B859BD5
Certificate serial: 35DD3E8BD2F17027579077C1B2B061F1A51B3678
Authority key identifier: 1F:96:9E:E9:B0:83:8D:22:15:61:18:A8:88:B8:1B:F2:7B:85:9B:D5
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F969EE9B0838D22156118A888B81BF27B859BD5.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/3230322e35372e32362e302f32332d3234203d3e20313430343639.roa
Signing time: Tue 17 May 2022 05:23:13 +0000
ROA not before: Tue 17 May 2022 05:18:13 +0000
ROA not after: Tue 16 May 2023 05:23:13 +0000
asID: 140469
IP address blocks: 202.57.26.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
35:dd:3e:8b:d2:f1:70:27:57:90:77:c1:b2:b0:61:f1:a5:1b:36:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1F969EE9B0838D22156118A888B81BF27B859BD5
Validity
Not Before: May 17 05:18:13 2022 GMT
Not After : May 16 05:23:13 2023 GMT
Subject: CN=10A8519C42DD5E1575AA270E0E9BCCB1DD2A4C79
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:c5:55:15:6a:f7:fb:66:bc:ad:dc:54:76:ef:
19:74:18:03:ef:7a:6a:2f:4b:c2:93:31:54:fe:4d:
bb:ac:9e:c6:64:2a:66:a9:dc:8c:44:de:54:99:7b:
f6:53:b7:6e:d2:1d:88:19:2a:8e:d6:5c:7e:e8:ca:
7e:fa:39:c5:d4:ad:02:3b:68:75:d5:97:c4:06:5a:
07:b4:bc:26:d7:9d:0f:2c:8f:c2:86:86:21:9b:6a:
07:7c:d7:c5:81:ac:1e:6d:0b:76:2c:00:73:ec:ad:
0b:23:86:d1:6f:8b:a9:32:e9:09:16:09:70:02:d2:
87:39:f1:ed:48:d6:0f:22:2d:a1:32:42:24:ba:30:
fd:07:ee:93:8e:bd:6f:d9:41:d0:e8:00:eb:35:1f:
ac:d3:92:b3:07:56:f8:b5:d8:a2:07:21:15:74:8a:
44:95:46:32:9c:f0:50:48:ac:fe:9b:87:7b:05:34:
6d:cf:b1:50:bf:39:21:de:0a:5b:ea:48:fa:40:23:
e2:d3:e5:3d:5d:8f:ca:7f:91:a8:bd:7b:6f:30:2f:
4e:13:46:98:1f:c0:f7:04:23:a4:3d:67:c4:72:22:
aa:b4:77:b5:f0:28:0b:da:19:29:8a:bb:67:2e:99:
7b:28:4c:75:4b:cb:73:bf:4e:e3:d5:23:d6:e3:b2:
52:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:A8:51:9C:42:DD:5E:15:75:AA:27:0E:0E:9B:CC:B1:DD:2A:4C:79
X509v3 Authority Key Identifier:
keyid:1F:96:9E:E9:B0:83:8D:22:15:61:18:A8:88:B8:1B:F2:7B:85:9B:D5
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/1F969EE9B0838D22156118A888B81BF27B859BD5.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1F969EE9B0838D22156118A888B81BF27B859BD5.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0d3f095b-7130-4122-af25-7d2e7a11b1b1/0/3230322e35372e32362e302f32332d3234203d3e20313430343639.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.57.26.0/23
Signature Algorithm: sha256WithRSAEncryption
4b:32:c8:61:8b:48:0b:ac:66:6b:89:75:eb:c4:33:d3:50:c6:
ab:bf:f6:67:64:44:59:55:08:96:92:81:a0:88:30:f5:9b:be:
f1:25:f5:22:d6:47:91:1e:40:d0:87:e1:76:57:e5:2b:2b:7a:
50:f3:ac:08:d1:98:bb:60:cf:72:a5:69:c7:37:67:5e:25:ef:
18:54:dd:3f:50:8d:dd:6f:1e:c5:44:58:ef:85:c7:be:1c:50:
51:1e:2c:21:f7:e1:c3:de:fd:ac:a1:d3:8f:a8:fc:77:4b:6f:
a0:f8:c0:b3:53:6e:17:59:b4:e9:fe:d1:16:7e:24:95:41:bd:
a4:70:ee:9f:a2:4a:d9:6d:cd:c0:a4:2e:4c:92:76:4d:79:37:
6b:83:08:92:52:a3:22:21:29:60:4c:da:f0:45:5f:2f:46:f6:
47:2a:be:2a:07:f8:ec:a6:1d:bf:12:95:98:2d:2d:13:25:84:
d7:01:11:63:b0:17:b4:d8:f6:15:21:5c:74:4d:b7:b8:78:89:
56:d0:f6:f5:7c:c4:08:a3:01:ec:99:89:03:8f:92:df:2e:7e:
8f:42:35:f4:4a:4b:f6:c8:7b:d7:cf:44:18:55:1f:83:c7:b4:
3f:70:62:9d:ab:af:45:7d:3c:bf:bf:0a:f3:86:fa:1a:da:20:
63:41:4e:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:59 2023 by rpki-client on console-ams.rpki-client.org