Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e33392e302f32342d3234203d3e203137343531.roa
File: 3138322e3235332e33392e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier: D5CrVyOa+Eh2YlKlejrxWjWQDp1sSjFk6NLG0nCsnpk=
Subject key identifier: C7:62:9A:AE:61:B1:34:C8:F8:C5:E0:F0:EF:F3:D3:CD:FE:5D:3A:15
Certificate issuer: /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial: 794DC9A6D0E263A9D86A0FA32160683E11877BB9
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e33392e302f32342d3234203d3e203137343531.roa
Signing time: Sat 12 Mar 2022 17:00:00 +0000
ROA not before: Sat 12 Mar 2022 16:55:00 +0000
ROA not after: Sat 11 Mar 2023 17:00:00 +0000
asID: 17451
IP address blocks: 182.253.39.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
79:4d:c9:a6:d0:e2:63:a9:d8:6a:0f:a3:21:60:68:3e:11:87:7b:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
Validity
Not Before: Mar 12 16:55:00 2022 GMT
Not After : Mar 11 17:00:00 2023 GMT
Subject: CN=C7629AAE61B134C8F8C5E0F0EFF3D3CDFE5D3A15
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:43:f7:4e:b5:77:d1:43:15:0d:db:6f:37:98:
eb:58:35:8e:6a:a5:ac:fa:84:65:f1:9b:1f:2d:d0:
4d:d4:3d:3b:d5:04:4b:74:8a:f4:0c:88:3e:aa:d1:
bc:e6:6d:4f:b0:5b:8d:ef:3b:e0:de:92:a7:d3:f1:
b5:0f:c8:f0:7c:13:7b:4a:9c:53:39:6a:cd:eb:6d:
59:aa:1d:ec:81:38:1b:e4:b1:2e:02:36:29:07:34:
db:98:0d:5a:74:5e:f0:b5:2d:27:26:e5:aa:84:d1:
c6:7c:2b:97:08:0f:a8:c6:49:7c:20:ca:a2:b5:e8:
44:13:e2:46:37:fa:bd:b3:e2:a9:e2:66:91:65:2b:
83:90:2d:fd:e5:d9:6a:a7:03:99:01:1f:0b:8d:5c:
35:d0:ab:fa:8c:fb:32:38:19:1c:5d:18:9d:ee:1c:
2b:1e:f1:27:74:85:b0:de:d7:01:b3:96:22:a7:71:
3f:8a:09:c8:21:81:ce:43:74:fb:52:b5:ac:ab:ab:
63:1f:c6:be:f7:26:4c:1e:ef:6b:c3:f3:bb:8a:c3:
45:de:b9:19:73:c8:c3:af:9f:29:36:ef:5c:9b:12:
dc:59:b9:0f:93:a6:2d:44:d6:08:1d:35:11:e3:65:
e8:53:c6:c4:cc:eb:53:46:19:b9:d0:88:e6:e1:57:
75:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:62:9A:AE:61:B1:34:C8:F8:C5:E0:F0:EF:F3:D3:CD:FE:5D:3A:15
X509v3 Authority Key Identifier:
keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e33392e302f32342d3234203d3e203137343531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
182.253.39.0/24
Signature Algorithm: sha256WithRSAEncryption
67:68:d2:7b:7b:62:34:61:88:cb:f8:f7:20:af:e5:57:a0:ef:
b6:49:0b:50:96:40:a8:ea:36:9f:67:ad:2b:fc:14:69:0d:56:
81:04:36:36:a7:0d:35:5b:d6:56:23:17:4f:99:9c:4c:6a:f1:
f1:29:bb:c0:ae:b6:a0:f8:91:d1:3f:38:97:46:98:b8:50:5e:
9a:ca:78:23:e2:2c:0c:5f:4a:1e:94:45:dc:4c:52:02:e0:f8:
a8:f8:1f:ed:71:7d:2c:f9:3f:3c:af:7e:21:c6:79:ea:23:70:
be:4e:7a:9d:34:f1:cc:e8:1e:78:50:a2:0a:5a:68:42:e7:28:
ba:1a:34:f9:e5:64:be:97:1b:fb:90:7e:c0:1e:19:fe:cf:fc:
25:51:06:d6:8e:af:c4:08:86:37:b3:4c:1e:25:1f:12:1d:3b:
6d:7f:c1:71:35:03:97:71:73:1a:02:e6:d9:96:f3:fb:2d:11:
2b:34:a2:5c:4a:31:76:6a:e3:dc:b6:ba:d3:8d:82:bf:17:37:
4e:69:ed:0f:37:9f:54:da:db:8c:70:8a:ab:83:b8:09:c7:09:
b7:dd:1a:ed:f0:df:84:79:f7:44:cd:4f:b5:d8:85:70:9d:10:
2d:9f:48:dc:04:b7:84:ae:a8:23:6c:a4:37:00:c0:f7:38:36:
18:f5:ab:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:03 2024 by rpki-client on console-fra.rpki-client.org