Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/3230322e39332e3234342e302f32332d3234203d3e203338373738.roa
File: 3230322e39332e3234342e302f32332d3234203d3e203338373738.roa (raw, json)
Hash identifier: tsNLiHlJfn4Or3tKQGtAp8WARdaNRhcv5FntwxRxU6o=
Subject key identifier: C9:4E:28:97:4A:13:17:05:07:D3:51:F2:B6:C1:D5:1A:14:DE:4D:26
Certificate issuer: /CN=F38DFF094E16843854EAC1403C69FD7F77809D02
Certificate serial: 650642F4847EC43AE068BCC7F85B51805C3B6655
Authority key identifier: F3:8D:FF:09:4E:16:84:38:54:EA:C1:40:3C:69:FD:7F:77:80:9D:02
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38DFF094E16843854EAC1403C69FD7F77809D02.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/3230322e39332e3234342e302f32332d3234203d3e203338373738.roa
Signing time: Thu 30 Jun 2022 08:24:20 +0000
ROA not before: Thu 30 Jun 2022 08:19:20 +0000
ROA not after: Thu 29 Jun 2023 08:24:20 +0000
asID: 38778
IP address blocks: 202.93.244.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:06:42:f4:84:7e:c4:3a:e0:68:bc:c7:f8:5b:51:80:5c:3b:66:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F38DFF094E16843854EAC1403C69FD7F77809D02
Validity
Not Before: Jun 30 08:19:20 2022 GMT
Not After : Jun 29 08:24:20 2023 GMT
Subject: CN=C94E28974A13170507D351F2B6C1D51A14DE4D26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e7:f7:fd:7d:5d:d0:13:bf:96:97:be:e1:d1:
11:0e:21:86:22:21:79:f1:74:89:50:76:9d:a3:a3:
cf:6a:c6:67:55:16:8b:b9:f7:99:e8:fa:c9:f0:dd:
b5:51:04:04:e4:b6:2a:b5:67:28:b2:15:31:41:64:
75:69:43:83:35:0a:a8:fa:bb:04:c6:73:f8:df:8a:
b2:a8:bb:9d:54:d3:ca:c7:2c:54:1f:c1:40:60:17:
ea:08:ea:86:e7:17:7a:dd:66:4d:ad:79:c7:79:7d:
fa:91:d7:00:59:20:09:21:43:ae:15:84:fb:84:b6:
67:f4:49:10:c2:6e:1e:d6:53:25:26:4b:d6:f2:7a:
79:ab:62:11:97:cf:45:5d:7c:6b:fe:c1:6e:ef:df:
e9:b1:7e:81:36:c8:47:dd:db:70:13:b5:5f:38:ca:
f1:82:fd:0d:03:44:d7:d9:3b:f3:4c:11:75:d3:1c:
74:27:37:a2:36:3b:09:ae:ee:27:11:3f:b1:c7:82:
94:c7:45:94:48:18:99:e4:5e:25:16:98:29:b1:28:
a1:e9:8f:17:6a:e6:2b:aa:c4:2b:e0:81:93:9c:17:
28:31:b5:0f:ef:47:22:82:db:bd:d2:df:72:a7:5f:
fc:98:b0:05:64:df:19:7d:3a:e7:a2:ff:41:9a:e0:
b0:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:4E:28:97:4A:13:17:05:07:D3:51:F2:B6:C1:D5:1A:14:DE:4D:26
X509v3 Authority Key Identifier:
keyid:F3:8D:FF:09:4E:16:84:38:54:EA:C1:40:3C:69:FD:7F:77:80:9D:02
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/F38DFF094E16843854EAC1403C69FD7F77809D02.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F38DFF094E16843854EAC1403C69FD7F77809D02.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5ad6dcc9-1700-48eb-9099-6678f91bf44e/0/3230322e39332e3234342e302f32332d3234203d3e203338373738.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.93.244.0/23
Signature Algorithm: sha256WithRSAEncryption
29:a5:3c:22:ef:8b:6d:0a:00:3e:c6:d4:d4:05:27:54:c2:7b:
1f:c6:e7:49:ee:c8:2e:42:77:06:38:6f:93:0d:3d:08:e5:29:
3d:3a:66:3a:6e:29:8b:92:50:12:43:34:31:88:44:86:b4:ce:
aa:4e:95:33:c5:64:88:7e:5f:0b:03:11:76:3b:29:dd:00:79:
3f:50:56:29:db:3d:3d:fd:b5:47:61:1b:38:f4:da:50:bc:c9:
9a:0a:66:18:31:9b:e2:c3:2d:85:aa:d5:c1:e3:9e:7b:36:41:
31:4f:51:8b:08:f3:e9:08:eb:1f:81:57:ec:9d:0a:bc:f1:8c:
21:4a:3f:d1:92:db:e7:d3:1c:f7:82:46:0e:ad:73:5b:0a:1a:
dd:c8:3d:40:0d:4f:54:33:b9:23:0e:4d:50:25:69:21:98:57:
7b:27:0d:30:99:f6:8a:5f:43:33:93:c9:63:1e:54:d0:4d:15:
fd:0a:f6:e6:28:12:2c:0c:ee:b1:7a:7f:15:42:c1:07:80:76:
0c:5d:d0:88:06:9d:01:56:a7:d6:3c:bd:6d:9e:eb:26:87:bf:
39:a4:43:a5:94:6d:1e:58:a6:c0:67:b4:c5:46:98:f8:3f:81:
86:53:d2:80:5f:05:de:9c:95:5b:bb:9e:8d:d9:27:f1:ca:76:
ba:02:ae:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:07 2024 by rpki-client on console-fra.rpki-client.org