Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/34332e3234352e3138342e302f32322d3234203d3e20313331373535.roa
File: 34332e3234352e3138342e302f32322d3234203d3e20313331373535.roa (raw, json)
Hash identifier: FdRQJx61o8zwGIJ9zIY3DVlQhVXsMm2+z140aBaLXEI=
Subject key identifier: 9B:B3:B7:9F:F4:41:E7:29:DA:E3:11:A3:6C:2A:3A:32:10:68:49:D7
Certificate issuer: /CN=DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB
Certificate serial: 2A487BF4CE9F0B285122CF8FDC8643946DFDCAC3
Authority key identifier: DC:34:C8:B5:F4:38:B8:D4:CB:13:F2:45:1A:D1:F0:95:5E:5F:7F:BB
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/34332e3234352e3138342e302f32322d3234203d3e20313331373535.roa
Signing time: Thu 26 Oct 2023 06:01:13 +0000
ROA not before: Thu 26 Oct 2023 05:56:13 +0000
ROA not after: Thu 24 Oct 2024 06:01:13 +0000
asID: 131755
IP address blocks: 43.245.184.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2a:48:7b:f4:ce:9f:0b:28:51:22:cf:8f:dc:86:43:94:6d:fd:ca:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB
Validity
Not Before: Oct 26 05:56:13 2023 GMT
Not After : Oct 24 06:01:13 2024 GMT
Subject: CN=9BB3B79FF441E729DAE311A36C2A3A32106849D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:14:d9:e9:8b:47:2a:e5:66:38:83:88:de:6f:
00:fb:c4:68:2e:35:cc:33:d0:c4:77:e7:b4:a5:45:
04:67:cd:22:e0:e9:d4:c2:91:89:7e:ba:14:1e:3e:
22:7a:9d:35:c8:d3:5f:a3:77:6c:5f:66:6f:85:f7:
c7:87:6d:83:3c:3b:b2:df:cb:58:33:51:83:7d:18:
6a:67:b0:80:9e:d4:ed:ec:f7:41:53:a2:4c:5d:eb:
10:7b:c7:20:08:eb:4c:3a:ef:ca:9a:25:13:00:49:
31:d1:9d:c7:b6:76:b8:52:aa:e5:d6:f9:91:2e:cf:
b1:07:60:da:1b:3c:52:ce:8d:e4:ac:c2:78:f6:10:
9b:87:6e:6f:37:f2:c0:9f:74:f8:bd:3c:8d:08:a8:
0b:11:27:ce:f2:d4:27:15:91:94:7f:ee:2a:3c:94:
18:b4:14:9d:87:87:5b:fd:57:25:a6:80:92:1a:41:
33:6e:87:4b:f6:17:2b:0a:86:6f:fc:4b:72:86:1e:
1b:f8:8a:53:19:8b:cd:5b:60:35:fc:d2:4f:68:09:
29:a3:e0:aa:2f:e7:b4:cd:db:d4:14:40:35:8f:1e:
94:e0:5a:d9:af:40:54:00:b2:61:97:49:3c:dc:63:
be:19:40:04:61:8c:45:b7:eb:fc:29:94:b7:04:c5:
45:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:B3:B7:9F:F4:41:E7:29:DA:E3:11:A3:6C:2A:3A:32:10:68:49:D7
X509v3 Authority Key Identifier:
keyid:DC:34:C8:B5:F4:38:B8:D4:CB:13:F2:45:1A:D1:F0:95:5E:5F:7F:BB
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/DC34C8B5F438B8D4CB13F2451AD1F0955E5F7FBB.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2a8f0435-4d38-47ef-850f-51ba4617fb3d/0/34332e3234352e3138342e302f32322d3234203d3e20313331373535.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.245.184.0/22
Signature Algorithm: sha256WithRSAEncryption
8b:07:2b:ea:97:c2:08:46:6e:b5:f3:e7:46:9d:71:80:2a:8a:
e9:7d:82:69:6e:e0:07:c7:c2:f8:72:ad:3e:bf:70:67:f1:a4:
d3:c5:d8:93:0c:c0:46:02:30:3f:ff:18:62:75:c7:9b:9b:a2:
d4:66:63:f2:53:52:19:af:c5:c1:d2:cf:d2:d1:69:11:40:f5:
9f:e2:7a:1f:86:c2:86:36:69:05:d1:d0:7a:43:a2:72:94:ab:
c4:89:88:95:ef:2c:2b:72:0c:dc:78:50:0b:15:cb:7a:ae:1f:
08:f8:36:2e:56:22:b8:8a:b7:b6:da:95:03:cb:ac:04:ee:57:
2d:fd:79:cc:2c:4a:a8:ab:b9:31:57:11:55:fb:74:df:0c:42:
a0:60:45:76:52:2c:6c:da:2d:76:d4:fe:74:a5:fd:1b:44:5a:
f0:16:a9:76:4a:34:ce:34:47:08:d1:ad:80:cf:f6:a1:f0:9e:
33:71:44:25:05:d0:a9:a7:6d:37:1b:19:7e:41:7e:ae:66:43:
58:8c:ca:64:0c:22:a4:62:a5:c0:f0:04:f0:c2:87:c7:c1:6c:
f2:ac:b1:a2:db:23:2e:ea:d4:b4:39:1e:bc:57:a1:9f:f3:ac:
53:7d:d0:cb:3e:de:11:d0:36:8e:0c:cc:a4:f6:4a:5f:c6:2d:
ca:f5:08:fc
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUKkh79M6fCyhRIs+P3IZDlG39ysMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoREMzNEM4QjVGNDM4QjhENENCMTNGMjQ1MUFEMUYwOTU1
RTVGN0ZCQjAeFw0yMzEwMjYwNTU2MTNaFw0yNDEwMjQwNjAxMTNaMDMxMTAvBgNV
BAMTKDlCQjNCNzlGRjQ0MUU3MjlEQUUzMTFBMzZDMkEzQTMyMTA2ODQ5RDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCYFNnpi0cq5WY4g4jebwD7xGgu
Ncwz0MR357SlRQRnzSLg6dTCkYl+uhQePiJ6nTXI01+jd2xfZm+F98eHbYM8O7Lf
y1gzUYN9GGpnsICe1O3s90FTokxd6xB7xyAI60w678qaJRMASTHRnce2drhSquXW
+ZEuz7EHYNobPFLOjeSswnj2EJuHbm838sCfdPi9PI0IqAsRJ87y1CcVkZR/7io8
lBi0FJ2Hh1v9VyWmgJIaQTNuh0v2FysKhm/8S3KGHhv4ilMZi81bYDX80k9oCSmj
4Kov57TN29QUQDWPHpTgWtmvQFQAsmGXSTzcY74ZQARhjEW36/wplLcExUVTAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUm7O3n/RB5yna4xGjbCo6MhBoSdcwHwYDVR0j
BBgwFoAU3DTItfQ4uNTLE/JFGtHwlV5ff7swDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8y
YThmMDQzNS00ZDM4LTQ3ZWYtODUwZi01MWJhNDYxN2ZiM2QvMC9EQzM0QzhCNUY0
MzhCOEQ0Q0IxM0YyNDUxQUQxRjA5NTVFNUY3RkJCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvREMzNEM4QjVGNDM4QjhENENCMTNGMjQ1MUFEMUYwOTU1RTVG
N0ZCQi5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzJhOGYwNDM1LTRkMzgtNDdlZi04
NTBmLTUxYmE0NjE3ZmIzZC8wLzM0MzMyZTMyMzQzNTJlMzEzODM0MmUzMDJmMzIz
MjJkMzIzNDIwM2QzZTIwMzEzMzMxMzczNTM1LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCK/W4MA0GCSqG
SIb3DQEBCwUAA4IBAQCLByvql8IIRm618+dGnXGAKorpfYJpbuAHx8L4cq0+v3Bn
8aTTxdiTDMBGAjA//xhidcebm6LUZmPyU1IZr8XB0s/S0WkRQPWf4nofhsKGNmkF
0dB6Q6JylKvEiYiV7ywrcgzceFALFct6rh8I+DYuViK4ire22pUDy6wE7lct/XnM
LEqoq7kxVxFV+3TfDEKgYEV2Uixs2i121P50pf0bRFrwFql2SjTONEcI0a2Az/ah
8J4zcUQlBdCpp203Gxl+QX6uZkNYjMpkDCKkYqXA8ATwwofHwWzyrLGi2yMu6tS0
OR68V6Gf86xTfdDLPt4R0DaODMyk9kpfxi3K9Qj8
-----END CERTIFICATE-----
Generated at Fri Feb 21 11:10:00 2025 by rpki-client