Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e34372e302f32342d3234203d3e203137343531.roa
File: 3138322e3235332e34372e302f32342d3234203d3e203137343531.roa (raw, json)
Hash identifier: BzwyRWyUCLSDris1lPKzF2VFZufBssB5k6/ieYeYnvI=
Subject key identifier: 3D:5D:FF:30:42:C6:88:AF:85:1C:37:D7:AC:02:33:2C:B4:6E:65:E1
Certificate issuer: /CN=AC555447BA62C39107F16BF572F82A417F728DBF
Certificate serial: 56138E50D1195C8201B4D834A85ED06336E3819E
Authority key identifier: AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e34372e302f32342d3234203d3e203137343531.roa
Signing time: Tue 08 Mar 2022 03:00:00 +0000
ROA not before: Tue 08 Mar 2022 02:55:00 +0000
ROA not after: Tue 07 Mar 2023 03:00:00 +0000
asID: 17451
IP address blocks: 182.253.47.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
56:13:8e:50:d1:19:5c:82:01:b4:d8:34:a8:5e:d0:63:36:e3:81:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=AC555447BA62C39107F16BF572F82A417F728DBF
Validity
Not Before: Mar 8 02:55:00 2022 GMT
Not After : Mar 7 03:00:00 2023 GMT
Subject: CN=3D5DFF3042C688AF851C37D7AC02332CB46E65E1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d6:89:25:d3:5c:16:30:27:4c:c8:e0:fb:33:
af:31:a4:c7:e0:63:ea:73:fc:ae:fd:7f:2f:f6:d9:
a6:19:66:b0:e5:a1:2e:f0:57:2b:82:95:1a:38:b3:
ef:55:1c:c4:e6:9d:d9:f4:6f:fd:11:da:3e:5c:32:
ca:37:a1:65:79:c2:18:dc:41:e7:cd:0a:19:75:a0:
3a:8f:3f:73:38:a3:0f:59:04:9d:0b:0f:07:67:63:
81:9f:8c:7f:5d:d2:8c:27:48:7e:2c:73:72:aa:1c:
8e:9e:6e:1a:04:21:f4:c1:02:17:00:52:cf:bb:55:
c9:7e:e6:ec:33:d1:0e:72:37:eb:56:e4:31:4b:e4:
46:42:0d:eb:c4:33:1c:52:da:f9:ca:72:ca:ef:fb:
8d:d9:0c:2b:9a:92:b0:8b:e1:02:7a:09:bc:b3:bc:
d4:1d:57:f8:97:7a:8b:95:e4:67:7c:a7:05:a0:a6:
ab:b1:37:10:2b:92:f1:40:0a:bb:06:76:d8:f0:de:
89:5d:8e:4e:97:8c:7d:c5:66:df:b1:b5:a6:e1:0f:
cd:82:a2:b6:45:43:ab:ef:88:83:7d:b6:f1:ca:d3:
77:d1:8c:df:84:d2:b6:30:b2:9d:97:fb:f4:3b:f2:
c2:0b:a2:02:7b:3d:cf:ba:19:93:54:d0:97:87:57:
f6:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:5D:FF:30:42:C6:88:AF:85:1C:37:D7:AC:02:33:2C:B4:6E:65:E1
X509v3 Authority Key Identifier:
keyid:AC:55:54:47:BA:62:C3:91:07:F1:6B:F5:72:F8:2A:41:7F:72:8D:BF
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/AC555447BA62C39107F16BF572F82A417F728DBF.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AC555447BA62C39107F16BF572F82A417F728DBF.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/3993f350-b756-4916-8d84-484f025dffcc/0/3138322e3235332e34372e302f32342d3234203d3e203137343531.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
182.253.47.0/24
Signature Algorithm: sha256WithRSAEncryption
41:eb:c9:b9:7f:bb:d0:9a:3b:59:d3:81:ba:9c:e5:aa:0c:7e:
74:65:55:d4:7c:94:ab:09:7e:8c:06:b4:f9:4c:f1:1b:e1:7c:
6d:0b:d4:a4:18:78:a0:74:c3:5b:3b:26:df:ed:78:02:b7:7d:
c9:4e:be:90:d4:4d:9d:89:d1:48:4a:eb:2a:16:1d:1f:9f:ec:
cc:9b:ac:83:9d:80:37:d3:46:4c:04:b8:a2:37:51:49:72:9b:
19:96:c1:3f:ca:7a:24:2f:fa:e2:ca:d6:7c:2a:a4:54:59:0a:
3d:f9:89:b0:73:59:59:b7:b4:be:a1:d5:b6:c5:ec:56:36:15:
db:02:0f:7d:f9:12:ed:55:61:52:49:c9:fa:35:83:3d:1b:d1:
04:fd:23:e6:f9:5d:70:8f:4f:29:3b:36:bc:c9:69:7c:13:aa:
34:c3:a6:3c:b6:59:37:df:72:43:bc:a6:f2:1c:5e:ed:7e:0b:
28:de:28:53:0e:c1:71:f3:ab:e7:fe:8e:d5:83:0b:90:2b:27:
c6:06:37:e6:5a:6d:b2:a4:aa:ef:43:9e:8d:0a:2a:95:2b:a0:
00:2b:8a:90:c2:f1:d8:19:91:ea:16:bc:15:85:1a:ee:dd:8a:
0a:c6:b0:9a:22:e3:3b:c0:9e:62:11:d8:51:d9:f1:96:44:ca:
fd:e5:f1:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:03 2024 by rpki-client on console-fra.rpki-client.org