Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3234352e302f32342d3234203d3e203137343531.roa
File: 3138322e3235332e3234352e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier: nsp3Pd/x8KrUH7OCueN7bnZ7yQ5mMC4SMASU/VlTcgY=
Subject key identifier: 56:29:A2:1F:46:F1:79:35:A7:96:89:9F:B9:F7:CA:87:31:E1:0B:EC
Certificate issuer: /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial: 3A06E3D0FC2067406A121E9C0A64653200C20807
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3234352e302f32342d3234203d3e203137343531.roa
Signing time: Thu 30 Sep 2021 00:00:36 +0000
ROA not before: Wed 29 Sep 2021 23:55:36 +0000
ROA not after: Fri 30 Sep 2022 00:00:36 +0000
asID: 17451
IP address blocks: 182.253.245.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
3a:06:e3:d0:fc:20:67:40:6a:12:1e:9c:0a:64:65:32:00:c2:08:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
Validity
Not Before: Sep 29 23:55:36 2021 GMT
Not After : Sep 30 00:00:36 2022 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8d:6a:4b:07:4a:d6:81:e0:49:29:8a:be:1d:
39:e6:40:a9:a0:66:f5:f5:25:7c:75:43:8c:21:1e:
34:39:15:ea:0a:a0:72:0e:3f:e5:2c:75:e4:5c:90:
7b:d3:eb:5f:6e:57:7f:75:5e:11:b0:22:a4:3d:ad:
71:9e:dc:5f:8a:ac:f2:8f:75:0b:67:a7:7d:44:6d:
3f:30:89:13:26:5e:b0:91:43:7b:74:b0:a8:ed:53:
cf:ef:95:af:95:2a:9a:95:dc:80:8b:8f:f5:f0:ed:
7c:71:14:16:37:c5:ad:cf:05:f5:0c:2e:e0:ec:a6:
f0:1e:e2:53:62:71:e8:c5:2c:6a:8e:76:e6:18:a2:
22:f3:4e:17:11:bf:c7:5a:f5:cb:ca:f9:e3:00:73:
90:f1:8d:f0:9c:08:cc:9a:f5:f7:c0:fa:15:72:ab:
31:6c:88:2f:0e:52:2e:76:28:f7:1b:bb:79:8b:9a:
64:0a:f2:e6:aa:b9:29:f7:ba:67:57:5a:24:f1:d8:
b6:a2:a8:18:4b:06:f4:63:ea:50:7d:ba:7d:f3:9a:
6e:65:05:4a:38:25:37:01:79:d6:93:41:23:9e:32:
35:79:44:16:ac:84:4a:89:88:b3:69:32:d4:01:7d:
e6:96:08:d9:a5:d8:92:3d:1e:36:2e:70:e2:98:f7:
06:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:29:A2:1F:46:F1:79:35:A7:96:89:9F:B9:F7:CA:87:31:E1:0B:EC
X509v3 Authority Key Identifier:
keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e3234352e302f32342d3234203d3e203137343531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
182.253.245.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:8b:a7:10:b4:23:d4:49:10:02:81:ff:27:2d:4c:7b:e9:66:
41:78:b5:cf:f5:ca:d3:a8:f3:65:de:98:d0:33:a2:b9:4c:19:
e0:f3:c5:7b:c7:4b:b0:5e:1a:e0:72:98:a7:a4:21:b7:9b:2f:
fb:f8:9b:6d:2b:a0:35:3b:d0:e5:8a:bb:2f:ec:61:ec:1e:49:
cc:67:bc:b4:aa:c8:98:c1:e8:72:27:52:4e:ae:2c:f6:cc:07:
f2:30:c9:d9:7a:75:94:3c:2a:80:8c:8f:b5:1b:59:93:92:69:
b2:42:1d:1f:7a:e5:92:56:12:39:e0:2b:4e:41:90:76:eb:f7:
61:b9:b4:78:00:9f:7b:e2:76:f6:16:c2:7e:7c:08:2b:64:da:
d0:46:ff:9e:ac:8d:d7:e0:74:d2:d2:42:6c:7b:92:b5:83:d5:
51:2f:06:de:8a:75:f7:52:24:4f:60:b7:57:5b:ba:46:a0:6b:
dd:8e:fe:90:4e:df:85:7f:2d:aa:ef:f3:df:04:1f:87:42:bf:
ba:75:34:53:84:60:6e:ac:99:71:d0:b4:09:39:fb:8c:2e:3c:
d7:7f:7e:ac:86:c8:fc:ef:b0:23:6b:49:49:90:03:87:b7:90:
2c:ac:e6:0b:34:73:13:65:7e:2d:f4:76:ee:82:25:d9:32:5c:
c4:ec:50:52
-----BEGIN CERTIFICATE-----
MIIHJjCCBg6gAwIBAgIUOgbj0PwgZ0BqEh6cCmRlMgDCCAcwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJBNDE3
RjcyOERCRjAeFw0yMTA5MjkyMzU1MzZaFw0yMjA5MzAwMDAwMzZaMIICLTGCAikw
ggIlBgNVBAMTggIcMzA4MjAxMEEwMjgyMDEwMTAwQjM4RDZBNEIwNzRBRDY4MUUw
NDkyOThBQkUxRDM5RTY0MEE5QTA2NkY1RjUyNTdDNzU0MzhDMjExRTM0MzkxNUVB
MEFBMDcyMEUzRkU1MkM3NUU0NUM5MDdCRDNFQjVGNkU1NzdGNzU1RTExQjAyMkE0
M0RBRDcxOUVEQzVGOEFBQ0YyOEY3NTBCNjdBNzdENDQ2RDNGMzA4OTEzMjY1RUIw
OTE0MzdCNzRCMEE4RUQ1M0NGRUY5NUFGOTUyQTlBOTVEQzgwOEI4RkY1RjBFRDdD
NzExNDE2MzdDNUFEQ0YwNUY1MEMyRUUwRUNBNkYwMUVFMjUzNjI3MUU4QzUyQzZB
OEU3NkU2MThBMjIyRjM0RTE3MTFCRkM3NUFGNUNCQ0FGOUUzMDA3MzkwRjE4REYw
OUMwOENDOUFGNUY3QzBGQTE1NzJBQjMxNkM4ODJGMEU1MjJFNzYyOEY3MUJCQjc5
OEI5QTY0MEFGMkU2QUFCOTI5RjdCQTY3NTc1QTI0RjFEOEI2QTJBODE4NEIwNkY0
NjNFQTUwN0RCQTdERjM5QTZFNjUwNTRBMzgyNTM3MDE3OUQ2OTM0MTIzOUUzMjM1
Nzk0NDE2QUM4NDRBODk4OEIzNjkzMkQ0MDE3REU2OTYwOEQ5QTVEODkyM0QxRTM2
MkU3MEUyOThGNzA2NzMwMjAzMDEwMDAxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8A
MIIBCgKCAQEAs41qSwdK1oHgSSmKvh055kCpoGb19SV8dUOMIR40ORXqCqByDj/l
LHXkXJB70+tfbld/dV4RsCKkPa1xntxfiqzyj3ULZ6d9RG0/MIkTJl6wkUN7dLCo
7VPP75WvlSqaldyAi4/18O18cRQWN8WtzwX1DC7g7KbwHuJTYnHoxSxqjnbmGKIi
804XEb/HWvXLyvnjAHOQ8Y3wnAjMmvX3wPoVcqsxbIgvDlIudij3G7t5i5pkCvLm
qrkp97pnV1ok8di2oqgYSwb0Y+pQfbp985puZQVKOCU3AXnWk0EjnjI1eUQWrIRK
iYizaTLUAX3mlgjZpdiSPR42LnDimPcGcwIDAQABo4ICNDCCAjAwHQYDVR0OBBYE
FFYpoh9G8Xk1p5aJn7n3yocx4QvsMB8GA1UdIwQYMBaAFKxVVEe6YsORB/Fr9XL4
KkF/co2/MA4GA1UdDwEB/wQEAwIHgDCBhQYDVR0fBH4wfDB6oHigdoZ0cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vMzk5M2YzNTAtYjc1Ni00OTE2LThk
ODQtNDg0ZjAyNWRmZmNjLzAvQUM1NTU0NDdCQTYyQzM5MTA3RjE2QkY1NzJGODJB
NDE3RjcyOERCRi5jcmwwdAYIKwYBBQUHAQEEaDBmMGQGCCsGAQUFBzAChlhyc3lu
YzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9JRE5JQy1JRC8yL0FDNTU1NDQ3
QkE2MkMzOTEwN0YxNkJGNTcyRjgyQTQxN0Y3MjhEQkYuY2VyMIGkBggrBgEFBQcB
CwSBlzCBlDCBkQYIKwYBBQUHMAuGgYRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5u
ZXQvcmVwby8zOTkzZjM1MC1iNzU2LTQ5MTYtOGQ4NC00ODRmMDI1ZGZmY2MvMC8z
MTM4MzIyZTMyMzUzMzJlMzIzNDM1MmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzEz
NzM0MzUzMS5yb2EwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAfBggrBgEFBQcB
BwEB/wQQMA4wDAQCAAEwBgMEALb99TANBgkqhkiG9w0BAQsFAAOCAQEAnIunELQj
1EkQAoH/Jy1Me+lmQXi1z/XK06jzZd6Y0DOiuUwZ4PPFe8dLsF4a4HKYp6Qht5sv
+/ibbSugNTvQ5Yq7L+xh7B5JzGe8tKrImMHocidSTq4s9swH8jDJ2Xp1lDwqgIyP
tRtZk5JpskIdH3rlklYSOeArTkGQduv3Ybm0eACfe+J29hbCfnwIK2Ta0Eb/nqyN
1+B00tJCbHuStYPVUS8G3op191IkT2C3V1u6RqBr3Y7+kE7fhX8tqu/z3wQfh0K/
unU0U4RgbqyZcdC0CTn7jC48139+rIbI/O+wI2tJSZADh7eQLKzmCzRzE2V+LfR2
7oIl2TJcxOxQUg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:03 2024 by rpki-client on console-fra.rpki-client.org