Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/34332e3233302e3133302e302f32342d3234203d3e203233363739.roa
File: 34332e3233302e3133302e302f32342d3234203d3e203233363739.roa (raw, json)
Hash identifier: JNH3PJz3iv5vLnj5HxO5cumgJVsfo1cyk8axdCnfq6I=
Subject key identifier: 5C:5B:76:8F:56:DF:FE:A1:64:0A:6B:65:84:19:97:39:BA:FC:24:FE
Certificate issuer: /CN=338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B
Certificate serial: 5A1A10981E4078F37FB4AB647CB1210FC123C8C6
Authority key identifier: 33:8D:EB:8D:70:51:C6:3F:C6:CC:D7:B1:A5:DD:8C:9E:3C:93:B9:6B
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/34332e3233302e3133302e302f32342d3234203d3e203233363739.roa
Signing time: Wed 19 Oct 2022 06:00:00 +0000
ROA not before: Wed 19 Oct 2022 05:55:00 +0000
ROA not after: Wed 18 Oct 2023 06:00:00 +0000
asID: 23679
IP address blocks: 43.230.130.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5a:1a:10:98:1e:40:78:f3:7f:b4:ab:64:7c:b1:21:0f:c1:23:c8:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B
Validity
Not Before: Oct 19 05:55:00 2022 GMT
Not After : Oct 18 06:00:00 2023 GMT
Subject: CN=5C5B768F56DFFEA1640A6B6584199739BAFC24FE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:5f:d9:11:53:d6:da:fd:32:1a:5c:34:72:2a:
2c:72:0f:08:62:36:93:bd:59:b1:2a:2d:70:15:76:
02:1c:ca:ac:9b:c9:0a:b5:8c:06:d6:bd:a6:b8:a1:
df:86:12:0e:ee:70:6b:7d:9f:29:f1:9b:49:b9:a7:
f1:8d:00:f8:0b:a8:f1:39:6b:c0:ce:17:e4:7f:58:
e8:d9:aa:ea:4e:70:e5:7b:2b:cf:33:3f:be:bd:65:
8d:f4:97:a1:68:c9:85:f3:eb:b3:fa:df:b7:c3:49:
f2:ae:87:5c:fa:e5:0d:c0:9c:91:aa:1e:54:61:f2:
93:ba:ea:66:2c:dc:b2:f2:6a:2d:90:ab:88:f3:eb:
0e:40:ab:b2:ae:e0:40:67:9e:aa:8e:63:28:cb:38:
ae:0d:f8:bb:92:1a:fe:22:fc:15:b5:48:fc:15:0f:
d3:c3:b5:0f:ef:c6:83:46:3d:5c:03:75:56:7e:5b:
8a:fd:70:b4:8e:06:28:b3:ba:b1:6c:e2:14:16:1f:
00:d8:a3:fc:72:d2:31:05:a0:20:f1:a2:bf:eb:5e:
53:c2:4b:23:06:e9:b5:31:c0:71:5b:57:06:7c:45:
70:81:f5:f3:f8:02:e6:44:18:1b:27:6e:c8:54:29:
20:f7:b1:89:f9:2c:2a:75:8f:f8:75:fb:52:c2:c9:
27:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:5B:76:8F:56:DF:FE:A1:64:0A:6B:65:84:19:97:39:BA:FC:24:FE
X509v3 Authority Key Identifier:
keyid:33:8D:EB:8D:70:51:C6:3F:C6:CC:D7:B1:A5:DD:8C:9E:3C:93:B9:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/338DEB8D7051C63FC6CCD7B1A5DD8C9E3C93B96B.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/324a65f4-4f4b-44b6-a2eb-59957bc6a4d3/0/34332e3233302e3133302e302f32342d3234203d3e203233363739.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.230.130.0/24
Signature Algorithm: sha256WithRSAEncryption
2a:71:93:51:b8:b0:6d:8c:03:80:0a:45:22:dc:d0:3d:90:ad:
08:86:86:a7:69:a9:1c:35:80:b8:60:e7:d1:24:7d:d6:f1:c8:
d5:25:b6:e0:98:2f:46:51:68:9e:27:b2:79:a7:1c:b6:81:92:
75:09:4c:fc:f0:66:de:5d:81:68:26:95:f6:32:29:fb:aa:09:
0f:c7:37:ef:75:c7:2e:53:d5:1f:0b:68:bc:8f:e9:eb:10:6d:
11:0e:31:7f:0f:1c:a3:22:92:0a:6e:21:3d:42:6b:8f:19:62:
b6:40:4d:42:ca:36:f0:43:52:bf:90:95:44:f9:d4:27:ec:e0:
36:d5:00:8f:01:ff:c3:97:59:5e:22:6d:5a:2f:95:98:50:fc:
d7:20:68:c9:a8:f6:7b:27:14:ed:f5:f6:67:12:ea:ea:43:c3:
5f:af:66:64:21:10:10:94:82:62:3c:6d:57:1e:2a:92:cf:30:
26:8f:82:b1:39:d6:a1:d8:72:85:c3:f4:1c:52:68:7a:d4:ab:
05:56:4b:84:12:8c:ef:e9:68:b1:df:3e:ce:ef:04:11:49:f1:
cb:da:54:97:e5:58:ff:c5:19:d4:e2:da:a0:17:53:b6:6f:16:
a1:4b:d1:40:43:d5:30:f6:c9:09:22:c2:fa:d6:bf:81:ef:7c:
d9:af:73:81
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUWhoQmB5AePN/tKtkfLEhD8EjyMYwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzM4REVCOEQ3MDUxQzYzRkM2Q0NEN0IxQTVERDhDOUUz
QzkzQjk2QjAeFw0yMjEwMTkwNTU1MDBaFw0yMzEwMTgwNjAwMDBaMDMxMTAvBgNV
BAMTKDVDNUI3NjhGNTZERkZFQTE2NDBBNkI2NTg0MTk5NzM5QkFGQzI0RkUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDRX9kRU9ba/TIaXDRyKixyDwhi
NpO9WbEqLXAVdgIcyqybyQq1jAbWvaa4od+GEg7ucGt9nynxm0m5p/GNAPgLqPE5
a8DOF+R/WOjZqupOcOV7K88zP769ZY30l6FoyYXz67P637fDSfKuh1z65Q3AnJGq
HlRh8pO66mYs3LLyai2Qq4jz6w5Aq7Ku4EBnnqqOYyjLOK4N+LuSGv4i/BW1SPwV
D9PDtQ/vxoNGPVwDdVZ+W4r9cLSOBiizurFs4hQWHwDYo/xy0jEFoCDxor/rXlPC
SyMG6bUxwHFbVwZ8RXCB9fP4AuZEGBsnbshUKSD3sYn5LCp1j/h1+1LCySdfAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUXFt2j1bf/qFkCmtlhBmXObr8JP4wHwYDVR0j
BBgwFoAUM43rjXBRxj/GzNexpd2MnjyTuWswDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8z
MjRhNjVmNC00ZjRiLTQ0YjYtYTJlYi01OTk1N2JjNmE0ZDMvMC8zMzhERUI4RDcw
NTFDNjNGQzZDQ0Q3QjFBNUREOEM5RTNDOTNCOTZCLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMzM4REVCOEQ3MDUxQzYzRkM2Q0NEN0IxQTVERDhDOUUzQzkz
Qjk2Qi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzMyNGE2NWY0LTRmNGItNDRiNi1h
MmViLTU5OTU3YmM2YTRkMy8wLzM0MzMyZTMyMzMzMDJlMzEzMzMwMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzIzMzM2MzczOS5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEACvmgjANBgkqhkiG
9w0BAQsFAAOCAQEAKnGTUbiwbYwDgApFItzQPZCtCIaGp2mpHDWAuGDn0SR91vHI
1SW24JgvRlFonieyeacctoGSdQlM/PBm3l2BaCaV9jIp+6oJD8c373XHLlPVHwto
vI/p6xBtEQ4xfw8coyKSCm4hPUJrjxlitkBNQso28ENSv5CVRPnUJ+zgNtUAjwH/
w5dZXiJtWi+VmFD81yBoyaj2eycU7fX2ZxLq6kPDX69mZCEQEJSCYjxtVx4qks8w
Jo+CsTnWodhyhcP0HFJoetSrBVZLhBKM7+losd8+zu8EEUnxy9pUl+VY/8UZ1OLa
oBdTtm8WoUvRQEPVMPbJCSLC+ta/ge982a9zgQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:02 2024 by rpki-client on console-fra.rpki-client.org