Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/32372e3132342e38352e302f32342d3234203d3e20313335343530.roa
File: 32372e3132342e38352e302f32342d3234203d3e20313335343530.roa (raw, json)
Hash identifier: 17SNOwZResC1E5ZPKIM+jibk0uApkE6AhXyOjXs6TD4=
Subject key identifier: C4:AF:AE:54:A9:94:39:C6:23:76:FD:14:F8:5E:51:B2:9E:9A:59:F3
Certificate issuer: /CN=228E752BBFB8C16B3B46F3D388ECED50CF9A6473
Certificate serial: 20C008F6BAD2FE2F85977A67185A4EEFEB09F193
Authority key identifier: 22:8E:75:2B:BF:B8:C1:6B:3B:46:F3:D3:88:EC:ED:50:CF:9A:64:73
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/32372e3132342e38352e302f32342d3234203d3e20313335343530.roa
Signing time: Fri 17 Mar 2023 04:15:56 +0000
ROA not before: Fri 17 Mar 2023 04:10:56 +0000
ROA not after: Fri 15 Mar 2024 04:15:56 +0000
asID: 135450
IP address blocks: 27.124.85.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:c0:08:f6:ba:d2:fe:2f:85:97:7a:67:18:5a:4e:ef:eb:09:f1:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=228E752BBFB8C16B3B46F3D388ECED50CF9A6473
Validity
Not Before: Mar 17 04:10:56 2023 GMT
Not After : Mar 15 04:15:56 2024 GMT
Subject: CN=C4AFAE54A99439C62376FD14F85E51B29E9A59F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:8e:d0:e5:22:67:e6:cc:41:4b:4e:e2:8a:18:
a2:f0:2f:bf:1c:2d:b5:62:c0:40:7f:53:4c:da:59:
cf:05:03:49:32:f5:1f:71:59:d5:b1:2a:e0:16:94:
d0:d2:72:b9:0e:ba:ba:0a:93:bd:ed:69:36:97:c1:
c9:fd:23:06:c7:fa:8d:61:0b:a7:3d:68:bc:6e:95:
bc:4d:a9:cf:6b:06:92:69:9d:e9:a5:97:62:26:98:
69:36:20:af:ac:9f:79:da:1c:2e:63:42:0e:54:27:
ba:8b:55:b9:dc:af:e8:b3:e6:56:77:53:53:d7:12:
4f:d2:42:47:63:d5:be:e1:8d:77:a2:00:a1:83:0b:
7a:bd:9e:95:60:1e:b4:7b:1c:63:1f:04:74:96:e9:
25:74:bc:82:a4:e1:5c:15:0a:6e:79:33:89:64:ba:
de:74:0e:86:47:c6:18:c8:b6:7e:4d:9c:ae:66:99:
dd:86:9b:6a:50:39:c4:db:78:1d:64:88:fe:3c:7c:
5f:32:c7:7f:2c:d0:bd:b2:15:2c:3b:c5:bf:60:d2:
ed:36:db:54:ae:2b:3a:07:e6:19:b9:c3:18:e3:33:
5f:d3:f3:6c:dc:8a:33:5c:5e:fd:4b:19:53:f0:be:
cb:5d:82:18:48:6f:70:6e:e0:2d:45:30:19:21:e8:
78:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:AF:AE:54:A9:94:39:C6:23:76:FD:14:F8:5E:51:B2:9E:9A:59:F3
X509v3 Authority Key Identifier:
keyid:22:8E:75:2B:BF:B8:C1:6B:3B:46:F3:D3:88:EC:ED:50:CF:9A:64:73
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/228E752BBFB8C16B3B46F3D388ECED50CF9A6473.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/317efd2a-02ab-4202-970f-f699dff97de5/0/32372e3132342e38352e302f32342d3234203d3e20313335343530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
27.124.85.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:84:c5:97:ae:05:02:70:5d:bb:ba:05:70:84:9e:e2:8f:e4:
97:69:80:6c:4a:42:bb:81:94:11:65:72:ae:1c:07:3e:37:1a:
93:85:e9:7e:6e:42:ec:24:76:bd:1b:d5:0c:6e:3b:11:cc:2d:
75:68:f4:a1:be:bc:00:0c:45:5a:36:3c:d3:6f:1c:bd:d3:97:
0a:a9:a9:86:f2:bd:d9:09:b0:61:62:39:bc:21:25:0c:5d:01:
da:dd:cc:6a:a6:ed:ca:6d:ff:1b:17:4f:f7:5a:b0:d3:b4:8b:
52:54:ef:70:64:e8:45:55:78:5d:68:da:63:34:5d:97:a8:d3:
d4:82:a5:6b:73:0b:f9:07:5e:e1:a1:dc:87:5b:b0:e1:1f:c1:
aa:05:2b:a9:eb:4b:bb:3e:23:a9:d0:2a:01:b4:34:6f:43:27:
c8:00:ca:ac:ad:eb:c8:f1:fe:7e:58:b6:22:f3:a9:39:6a:04:
95:bf:ca:17:c0:01:c8:0f:72:9c:d0:00:d4:32:f1:2a:eb:95:
a5:88:72:0a:a6:d0:ac:41:9a:7a:75:e2:36:df:0e:6e:93:d5:
32:11:90:f6:88:79:37:13:6b:be:75:27:0a:8b:b6:0c:a8:16:
69:77:ce:74:1c:9b:10:8d:3f:fd:94:8f:b9:93:3e:f5:da:95:
08:bb:94:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:02 2024 by rpki-client on console-fra.rpki-client.org