Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/3131392e322e36342e302f31392d3139203d3e203137343530.roa
File: 3131392e322e36342e302f31392d3139203d3e203137343530.roa (raw, json)
Hash identifier: i/iiPYf52s4he+UvRiOW9z6dXMkggg9c8ZZk2FXa5SE=
Subject key identifier: 34:70:09:56:FB:D0:0D:22:56:D0:56:39:8A:A3:A3:E9:CE:C5:FA:C1
Certificate issuer: /CN=4AC7DCD8EB1234ADC427AEBE3949E8691638A707
Certificate serial: 2001F3C324B5E23901A231E9A10B313FE76C7FE5
Authority key identifier: 4A:C7:DC:D8:EB:12:34:AD:C4:27:AE:BE:39:49:E8:69:16:38:A7:07
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/3131392e322e36342e302f31392d3139203d3e203137343530.roa
Signing time: Wed 08 Feb 2023 02:25:27 +0000
ROA not before: Wed 08 Feb 2023 02:20:27 +0000
ROA not after: Wed 07 Feb 2024 02:25:27 +0000
asID: 17450
IP address blocks: 119.2.64.0/19 maxlen: 19
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
20:01:f3:c3:24:b5:e2:39:01:a2:31:e9:a1:0b:31:3f:e7:6c:7f:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4AC7DCD8EB1234ADC427AEBE3949E8691638A707
Validity
Not Before: Feb 8 02:20:27 2023 GMT
Not After : Feb 7 02:25:27 2024 GMT
Subject: CN=34700956FBD00D2256D056398AA3A3E9CEC5FAC1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:0f:c5:cf:0d:b2:df:00:24:9a:ac:21:27:52:
06:d3:41:46:f9:48:fa:ef:30:85:c8:07:b7:a1:f5:
e6:55:4e:ca:83:9a:09:b9:93:02:76:01:0b:25:19:
08:96:6a:68:35:c2:23:b2:02:ed:73:3e:c9:90:35:
8d:49:6e:00:44:06:d2:67:f3:b1:4e:ac:82:da:f3:
15:6f:49:6d:21:49:b8:71:d1:fd:31:ae:ab:7f:17:
c8:88:ce:1f:74:1b:d6:72:67:96:d9:33:5d:05:43:
cb:57:ce:b8:04:36:4a:07:bf:35:8d:5c:4e:7e:22:
d3:09:3e:8c:1b:c2:f8:3a:27:2e:5e:2b:22:7c:2c:
33:f1:b7:93:89:47:30:5a:61:e5:ef:ac:be:50:f2:
81:00:de:ba:6a:3d:e2:ae:61:38:95:21:a8:63:7b:
de:b3:96:14:41:7e:21:05:b8:58:5d:ae:81:69:6d:
74:be:84:e0:1d:ec:5a:9c:b8:6f:4d:0b:a6:36:b1:
53:a5:ac:62:42:05:f8:f1:aa:80:ee:77:50:3e:ef:
fa:55:d5:08:d7:98:2a:17:bd:e8:b7:5b:a2:ad:cc:
67:a8:8b:2b:66:8e:6d:0f:8b:17:32:88:ee:94:26:
c4:16:17:ca:3e:98:e7:13:04:46:35:c4:7b:e5:cf:
52:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:70:09:56:FB:D0:0D:22:56:D0:56:39:8A:A3:A3:E9:CE:C5:FA:C1
X509v3 Authority Key Identifier:
keyid:4A:C7:DC:D8:EB:12:34:AD:C4:27:AE:BE:39:49:E8:69:16:38:A7:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4AC7DCD8EB1234ADC427AEBE3949E8691638A707.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/438061f1-fa30-4bd6-81a0-2ec670836c42/0/3131392e322e36342e302f31392d3139203d3e203137343530.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.2.64.0/19
Signature Algorithm: sha256WithRSAEncryption
02:ed:d1:74:5f:55:84:4a:89:ff:89:9a:e9:c6:51:dc:9d:e7:
22:39:55:79:6f:5b:53:62:f4:05:66:b5:af:1d:72:af:17:b3:
d6:21:15:24:b6:af:af:ac:6c:4d:fa:10:df:9a:58:b1:b5:f3:
7e:a7:38:ab:44:38:c7:1b:d5:02:62:31:a4:ab:50:86:09:79:
70:54:a9:4c:ac:ad:d6:f7:c0:e8:9c:11:5c:53:1f:89:e1:3c:
b1:98:ef:16:54:1f:0f:e6:53:a8:50:63:fa:8a:5a:c0:54:ee:
64:ef:53:80:e2:7f:60:8b:2f:ea:f8:22:ae:8f:49:9e:15:a8:
bb:3a:94:76:55:46:39:f2:bc:76:67:06:62:36:b1:48:64:fa:
b2:df:4b:17:b3:9f:d7:32:2e:2c:a9:63:0d:a6:e4:2b:54:47:
5f:43:db:ac:3b:65:51:a0:c0:e4:2c:ef:6d:1e:4d:c6:22:83:
8f:64:75:e9:eb:a2:f8:87:b0:9a:eb:e8:4e:1b:4e:73:f7:71:
68:1c:19:03:1a:70:29:09:cd:79:36:07:2a:a1:00:22:52:00:
2c:ec:8d:b9:56:8d:7d:70:52:8a:38:d9:6c:24:c7:fe:38:d0:
1b:63:32:4a:1d:29:0d:2a:a4:95:90:86:c4:ca:a0:c5:0c:5e:
82:ca:c2:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:39 2024 by rpki-client on console-ams.rpki-client.org