Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e3130312e302f32342d3234203d3e203338343832.roa
File: 3131372e3130322e3130312e302f32342d3234203d3e203338343832.roa (raw, json)
Hash identifier: gBR+PhKEPxceC4+udlE5ogISocnVnQ5yZUBlWZxKjAI=
Subject key identifier: 4A:74:CF:E4:75:6E:74:37:45:48:1B:4D:B0:A4:E9:FC:5D:0D:40:94
Certificate issuer: /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial: 55111853A5E729B44F53723BC957A6CEBD3E1078
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e3130312e302f32342d3234203d3e203338343832.roa
Signing time: Fri 25 Feb 2022 08:17:04 +0000
ROA not before: Fri 25 Feb 2022 08:12:04 +0000
ROA not after: Sat 25 Feb 2023 08:17:04 +0000
asID: 38482
IP address blocks: 117.102.101.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:11:18:53:a5:e7:29:b4:4f:53:72:3b:c9:57:a6:ce:bd:3e:10:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
Validity
Not Before: Feb 25 08:12:04 2022 GMT
Not After : Feb 25 08:17:04 2023 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:42:55:13:ae:78:57:53:b4:12:b1:6d:96:f3:
6b:cb:dc:e5:7c:50:ee:c3:6d:9f:04:f1:7a:eb:61:
f9:aa:cc:9e:56:a4:61:43:66:2b:9b:8f:0f:f0:59:
30:44:5f:1a:12:02:cb:c4:5e:f4:1c:88:8c:82:9e:
ba:79:05:d4:87:1e:d3:7c:c8:be:7f:86:fa:70:4a:
9c:72:85:90:1a:31:7a:bd:74:d7:d6:06:a6:18:53:
15:a1:43:ec:9a:33:69:c0:eb:16:7d:d1:84:43:48:
5e:01:cf:e6:74:a8:53:59:cf:95:65:e3:ab:c4:1b:
18:02:d3:7e:5c:c0:ea:d7:31:61:48:62:f0:c3:3b:
c7:36:29:59:6b:82:20:97:ee:2f:12:45:66:0d:55:
80:1f:f2:e7:a2:67:91:a5:d5:60:51:2c:96:a3:02:
a7:34:2a:2a:a6:87:ce:27:68:b9:82:31:da:22:2d:
d4:d4:ee:f3:43:47:77:4d:77:9d:f5:5f:6a:d0:45:
0b:ad:8a:1f:e5:bd:22:45:94:77:8a:9c:90:fe:51:
22:35:cc:73:82:33:52:68:33:2a:82:8a:f9:9d:fe:
6d:cd:07:a2:84:f8:60:d1:42:15:c6:62:9d:6c:76:
bf:20:5f:7c:9e:8a:96:7f:d2:06:41:35:4b:dd:fc:
60:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:74:CF:E4:75:6E:74:37:45:48:1B:4D:B0:A4:E9:FC:5D:0D:40:94
X509v3 Authority Key Identifier:
keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3131372e3130322e3130312e302f32342d3234203d3e203338343832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
117.102.101.0/24
Signature Algorithm: sha256WithRSAEncryption
26:9e:aa:f9:7f:2a:3c:74:bb:a1:89:81:b6:7d:e9:9e:bb:e6:
bf:55:57:83:27:cf:fb:00:fe:70:c1:f2:fe:33:91:4e:01:cc:
d6:0d:e8:3b:b4:bc:01:bd:27:11:24:ff:fa:70:86:1f:59:53:
de:dd:cb:29:96:48:f0:dd:19:2a:dc:c1:fa:33:23:d6:53:5e:
49:e5:07:b8:44:9a:7f:29:7a:5c:06:0e:2b:77:b3:9a:28:0e:
4d:17:2f:34:e7:7c:5f:30:d3:59:f7:a0:90:96:73:db:91:87:
5d:94:2d:32:15:30:91:f7:13:b7:dc:69:81:4d:72:14:c6:20:
90:16:45:fa:2d:b3:89:3c:3c:8f:4f:65:82:cd:fc:85:fd:2c:
1b:fa:3f:db:77:4a:cc:df:a0:52:a1:a3:7b:5d:85:9c:40:1b:
f6:ad:c1:83:83:64:16:ef:19:0c:ad:4d:0b:9b:2d:ec:1f:b3:
9a:c7:3e:e3:fa:ce:47:dc:b4:57:0e:5d:21:ec:2c:db:d7:3e:
42:a2:f8:3c:64:90:ff:89:a1:e4:90:62:b1:fc:cc:93:a1:24:
64:4e:cb:51:8c:4e:1b:50:f8:29:0e:8b:63:3a:98:f8:d1:18:
c3:d4:da:a2:76:b8:0d:2c:e6:9a:f7:b6:46:00:6f:aa:ef:71:
ed:17:0d:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:02 2024 by rpki-client on console-fra.rpki-client.org