Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3131392e31312e3135322e302f32312d3231203d3e203130323137.roa
File: 3131392e31312e3135322e302f32312d3231203d3e203130323137.roa (raw, json)
Hash identifier: LxPifrTyCPjnY1+Ym9W0Qz6SJzXfStaJbIBfq/64fZg=
Subject key identifier: 70:F1:6C:4E:DE:7A:95:05:EB:E1:CF:8C:0D:E9:89:85:54:25:8D:FB
Certificate issuer: /CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512
Certificate serial: 626D84BD6808851B081B76B4C76A97B3EDEB2FB9
Authority key identifier: 22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3131392e31312e3135322e302f32312d3231203d3e203130323137.roa
Signing time: Wed 22 Nov 2023 09:10:17 +0000
ROA not before: Wed 22 Nov 2023 09:05:17 +0000
ROA not after: Wed 20 Nov 2024 09:10:17 +0000
asID: 10217
IP address blocks: 119.11.152.0/21 maxlen: 21
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
62:6d:84:bd:68:08:85:1b:08:1b:76:b4:c7:6a:97:b3:ed:eb:2f:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=229866508D6D624523EDAD2A0DE1E82AE2C3B512
Validity
Not Before: Nov 22 09:05:17 2023 GMT
Not After : Nov 20 09:10:17 2024 GMT
Subject: CN=70F16C4EDE7A9505EBE1CF8C0DE9898554258DFB
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f2:25:f8:02:03:66:a3:ad:4a:cf:0e:d7:da:70:
4d:90:7f:5d:23:f3:0e:bf:fb:1a:db:11:e2:09:ca:
6a:84:31:16:db:92:0f:e3:56:c1:71:8e:8b:46:71:
1a:d9:7c:c4:1e:b3:56:50:7b:04:32:04:e0:e5:78:
56:52:19:48:dc:77:3d:a9:e8:68:c0:ca:7a:78:a6:
38:31:f5:49:f2:5b:e8:0a:78:fb:0d:c0:da:65:2f:
2a:0e:e7:00:3c:97:24:5a:dc:76:f0:7b:2e:50:84:
a0:e9:d1:3f:7a:54:50:4a:aa:78:c0:d7:1c:53:0d:
d4:09:24:d1:1d:48:ba:e2:73:ea:79:eb:78:bb:5c:
96:18:1f:a0:61:31:ef:b6:37:b0:f9:f6:43:c7:a4:
0a:45:13:64:72:23:a6:24:a3:3b:ef:6c:ea:91:d2:
6d:d3:2d:d2:99:b5:01:de:e3:b8:ab:aa:bc:e2:58:
12:a0:48:41:c7:fd:d9:37:e6:6b:98:ff:b4:16:0c:
e3:3c:d1:39:13:f4:2b:d4:20:27:31:ed:89:6b:bb:
d9:ab:c2:b1:b9:a6:97:b9:7f:4c:31:d6:6e:06:ea:
47:d6:f1:bb:38:0f:24:88:ab:1a:36:0a:72:81:6e:
90:c5:0b:42:ef:b9:33:9b:9a:f8:ef:6e:88:3b:2e:
98:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:F1:6C:4E:DE:7A:95:05:EB:E1:CF:8C:0D:E9:89:85:54:25:8D:FB
X509v3 Authority Key Identifier:
keyid:22:98:66:50:8D:6D:62:45:23:ED:AD:2A:0D:E1:E8:2A:E2:C3:B5:12
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/229866508D6D624523EDAD2A0DE1E82AE2C3B512.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/229866508D6D624523EDAD2A0DE1E82AE2C3B512.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/2fb70818-2366-42e0-9dbd-254381069e57/0/3131392e31312e3135322e302f32312d3231203d3e203130323137.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.11.152.0/21
Signature Algorithm: sha256WithRSAEncryption
34:7c:de:e4:4d:6c:ef:ec:2d:32:84:cb:8b:f0:ac:26:c5:80:
88:5f:78:31:37:18:7e:13:99:9e:e3:c6:df:ce:e4:61:52:7c:
f7:9c:9f:6e:4d:43:92:8a:14:72:35:23:55:cd:98:a9:8f:b6:
65:88:fe:94:08:15:08:cb:69:59:5f:49:f8:26:98:9c:40:6a:
c8:eb:85:cd:5e:cc:a3:80:16:71:97:07:ee:29:4c:1d:4d:ec:
7b:01:aa:5f:ea:5c:7d:d0:a7:01:69:ec:ea:87:af:e8:92:97:
26:48:9f:5d:fe:37:b2:38:ec:2e:ac:b7:aa:30:77:e2:aa:ec:
fb:83:81:42:20:fb:ca:f5:14:29:9b:d9:fe:0d:e1:6e:fe:91:
2f:a3:e1:78:26:6c:b7:56:0e:87:2a:15:6e:6e:69:94:3f:1c:
b1:07:dd:29:15:c7:aa:eb:7d:54:79:57:da:5b:60:e2:9f:1c:
c5:ce:aa:5c:91:97:ee:31:7c:f1:97:1e:6b:6a:c5:9e:a0:2c:
8b:85:2a:1f:bb:43:74:63:19:1d:88:0b:19:70:3f:b4:02:75:
59:d5:5c:3a:2b:72:01:6a:ed:48:b1:17:d7:b6:73:c9:3e:f4:
e4:bb:7a:ed:c0:07:f9:d2:8b:9d:a7:f4:9e:78:f2:84:bf:a1:
f6:13:b1:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 10 10:57:47 2025 by rpki-client