Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e33332e302f32342d3234203d3e203137343531.roa
File: 3138322e3235332e33332e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier: 1EyiORiNxWYXLLumCs6MNe7tw2fDzJQZLy8BX2Y0ksM=
Subject key identifier: 2F:C2:6C:87:D7:FC:9E:78:97:88:18:2F:F3:5B:C9:D1:60:B6:75:4C
Certificate issuer: /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial: 096F85A9CA4AB94D9F5312F48BBE69F4161E30E2
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e33332e302f32342d3234203d3e203137343531.roa
Signing time: Tue 14 Sep 2021 05:18:21 +0000
ROA not before: Tue 14 Sep 2021 05:13:21 +0000
ROA not after: Wed 14 Sep 2022 05:18:21 +0000
asID: 17451
IP address blocks: 182.253.33.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
09:6f:85:a9:ca:4a:b9:4d:9f:53:12:f4:8b:be:69:f4:16:1e:30:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
Validity
Not Before: Sep 14 05:13:21 2021 GMT
Not After : Sep 14 05:18:21 2022 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:e4:1c:53:0a:f9:be:e6:84:75:39:cd:31:a5:
0a:dc:c2:bf:13:80:29:bc:ef:46:33:33:1c:3c:7c:
29:93:e3:46:f6:d7:ae:1e:c1:01:7b:ee:86:de:75:
ea:0d:2e:51:5f:26:3f:49:10:8f:22:3d:16:2f:3c:
24:4a:ac:a1:55:5d:bf:48:53:cb:95:c4:9c:10:3f:
81:c9:b2:0c:02:1d:f5:4a:f8:10:79:31:53:a0:60:
1c:f7:45:06:c8:34:9d:85:3e:89:ab:88:4a:9d:1f:
df:51:ba:0e:c2:3c:98:dc:67:f0:be:e6:96:1c:23:
b5:39:30:77:63:49:ef:98:63:38:ac:99:60:f6:bd:
b8:c8:78:c9:a6:5a:4c:dd:c3:c8:f8:54:bf:f4:8f:
77:5b:f6:c4:0e:d8:94:5e:06:94:e3:95:1f:49:ee:
67:80:78:48:87:94:8b:8d:28:c8:23:7d:bf:a2:de:
df:d0:38:65:1d:04:07:61:7a:e1:59:25:d3:c9:b4:
46:30:d5:23:e2:c9:75:99:81:a3:d0:78:f5:dd:cc:
b6:bf:c5:f8:f4:9e:3e:e5:83:7f:ef:76:b1:bb:77:
10:e9:64:a7:d3:b9:72:21:bb:68:c4:64:69:45:6c:
b2:25:51:39:c0:75:8f:1a:22:15:24:16:e6:74:fb:
36:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:C2:6C:87:D7:FC:9E:78:97:88:18:2F:F3:5B:C9:D1:60:B6:75:4C
X509v3 Authority Key Identifier:
keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e33332e302f32342d3234203d3e203137343531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
182.253.33.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:29:f0:90:f6:32:4b:53:13:b1:48:d0:f3:df:10:ee:bb:85:
e9:7c:72:68:a0:11:d9:dd:6b:58:6c:dd:a0:24:49:1f:b9:85:
da:d6:51:bc:24:32:9d:69:dd:12:02:2f:79:4e:4e:2a:4c:0d:
13:54:66:fe:9a:ef:b2:d8:45:8a:3a:ee:8e:7c:a3:cf:dd:00:
09:05:54:e0:c4:77:bc:96:da:1e:8c:84:dc:9f:d3:17:81:98:
27:eb:20:8d:f9:26:69:72:f4:e2:3c:07:40:c1:c3:dd:45:48:
9c:2f:9c:0b:61:79:90:84:67:54:29:c2:67:3e:e7:18:fa:68:
34:d2:b6:95:a8:ec:f8:96:2b:63:5a:f4:7c:ee:4b:8d:e7:1c:
1b:be:41:8b:62:2b:ca:16:ac:43:cd:2f:be:f1:8c:b8:8c:bb:
42:a2:8a:e5:9b:4d:27:e3:5d:51:60:48:0d:80:28:37:2f:c0:
55:c0:7d:83:03:a3:95:ea:b3:df:99:df:0e:1d:7d:46:02:46:
78:2d:41:4e:fd:95:b9:2a:0e:9a:88:6c:fb:91:61:7a:00:07:
3d:ec:8b:6a:98:27:3f:ca:dd:60:d4:35:0e:1f:c6:8b:50:c2:
18:4e:e3:65:ba:f9:a7:f9:87:9e:09:15:ed:e8:eb:a0:2e:76:
11:c3:af:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 23:58:13 2025 by rpki-client