Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e31322e302f32342d3234203d3e20313339393831.roa
File: 3230322e3135342e31322e302f32342d3234203d3e20313339393831.roa (raw, json)
Hash identifier: HCpLRBm79RYNseXnPHqJXGTjdXTXjoIS5rFBJ4xeQII=
Subject key identifier: 46:15:DD:82:89:16:81:D4:A3:91:3C:B1:16:43:43:46:71:09:43:40
Certificate issuer: /CN=10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6
Certificate serial: 7420F68E37210C6FC666840D71C25B39DA773967
Authority key identifier: 10:F0:0F:AE:6F:0B:93:AB:DC:95:62:8A:CE:3C:3C:18:9A:E9:27:F6
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e31322e302f32342d3234203d3e20313339393831.roa
Signing time: Tue 02 Aug 2022 06:00:43 +0000
ROA not before: Tue 02 Aug 2022 05:55:43 +0000
ROA not after: Tue 01 Aug 2023 06:00:43 +0000
asID: 139981
IP address blocks: 202.154.12.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
74:20:f6:8e:37:21:0c:6f:c6:66:84:0d:71:c2:5b:39:da:77:39:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6
Validity
Not Before: Aug 2 05:55:43 2022 GMT
Not After : Aug 1 06:00:43 2023 GMT
Subject: CN=4615DD82891681D4A3913CB11643434671094340
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:f9:a4:be:5c:12:02:98:6a:26:f9:95:f3:86:
cc:5b:f7:37:f2:6d:08:e3:d9:02:c0:99:75:fc:24:
16:d0:6b:cb:3c:30:84:0c:41:6c:38:f3:d2:2d:e2:
07:34:4a:1d:81:86:b7:47:c8:32:41:05:db:26:f0:
73:f7:c9:dc:c2:90:87:f4:3e:36:28:68:46:b4:f0:
51:14:c1:22:95:20:04:df:6a:88:67:77:01:ad:7f:
b5:3b:ff:51:cd:8c:be:da:8e:b1:0f:48:97:94:73:
b4:1f:cf:42:98:4e:56:9b:4c:68:f1:19:01:ad:6b:
22:d8:2d:51:5a:14:4b:b8:b9:35:04:2c:92:18:93:
1c:27:e4:9c:93:c1:e7:bb:4b:3a:35:88:64:9e:05:
62:4f:d2:1e:ec:b3:83:9b:ba:72:d1:18:bb:d1:16:
2d:c1:24:0b:25:3d:23:f1:45:45:20:08:e6:1c:0c:
cb:26:5f:41:e7:26:3c:ef:c5:a5:8c:58:89:52:10:
71:98:c6:38:9b:b7:6c:8c:98:18:66:7e:3d:75:be:
c4:fd:c5:db:ca:74:f1:dd:3c:c7:9f:3d:b3:8c:14:
9c:40:62:27:75:2d:5b:32:e6:19:8a:97:fd:82:f8:
94:10:10:df:7b:37:40:69:31:1f:54:fa:e7:cc:20:
60:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:15:DD:82:89:16:81:D4:A3:91:3C:B1:16:43:43:46:71:09:43:40
X509v3 Authority Key Identifier:
keyid:10:F0:0F:AE:6F:0B:93:AB:DC:95:62:8A:CE:3C:3C:18:9A:E9:27:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e31322e302f32342d3234203d3e20313339393831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.154.12.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:ec:ad:c9:b1:7d:02:c5:d4:f5:ac:d2:53:35:7c:93:16:5b:
01:a8:f2:c1:e0:ba:cd:e8:b5:37:c6:94:7a:97:e1:4a:e8:41:
c5:b5:c0:72:59:7b:d1:4a:35:25:8e:71:e1:64:16:65:c2:ad:
65:6f:f7:45:c1:b6:24:31:92:dd:f4:94:34:33:3f:7f:9b:7c:
fd:2b:4e:e8:35:69:21:6e:82:13:98:02:d7:e8:7a:77:4b:4e:
82:90:3a:70:6f:93:3f:3f:b7:d1:1a:3c:4d:f1:79:0f:19:7c:
08:6f:07:b2:ec:09:7c:82:f9:bf:ee:78:cc:a1:73:ac:a6:2d:
b0:fe:f2:71:a5:2a:56:3a:89:78:97:07:ee:76:f8:64:d0:98:
84:d9:7e:6f:dc:07:c3:c5:42:8f:6f:22:3b:4f:5d:82:0c:61:
29:8b:4e:41:34:7d:35:b1:19:5c:47:16:61:1d:31:1c:09:bd:
bc:78:88:fc:2d:12:06:35:7e:8a:c5:9e:37:e4:f4:12:92:e2:
1a:34:2f:0f:d3:c0:dd:af:8d:5d:e8:1b:94:7f:99:fe:b1:16:
a5:a5:af:d4:74:7f:d8:5c:85:e6:05:de:db:a6:37:be:a8:b6:
fb:b8:cf:34:9f:58:33:b4:15:2e:ba:35:2e:66:5f:96:64:bb:
e3:c6:a2:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:07 2024 by rpki-client on console-fra.rpki-client.org