Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e31332e302f32342d3234203d3e20313339393831.roa
File: 3230322e3135342e31332e302f32342d3234203d3e20313339393831.roa (raw, json)
Hash identifier: yH2ogEm4lKVKzlX/RCrhDr/TZZtbazZxRiJYq9dSx9Q=
Subject key identifier: 12:FB:A2:97:52:1A:49:3A:4A:55:6F:B5:14:87:6A:1C:65:88:77:E5
Certificate issuer: /CN=10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6
Certificate serial: 1921E9A4CC2D75E431D4250DEFFCB40C8D30178D
Authority key identifier: 10:F0:0F:AE:6F:0B:93:AB:DC:95:62:8A:CE:3C:3C:18:9A:E9:27:F6
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e31332e302f32342d3234203d3e20313339393831.roa
Signing time: Tue 02 Aug 2022 06:32:27 +0000
ROA not before: Tue 02 Aug 2022 06:27:27 +0000
ROA not after: Tue 01 Aug 2023 06:32:27 +0000
asID: 139981
IP address blocks: 202.154.13.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:21:e9:a4:cc:2d:75:e4:31:d4:25:0d:ef:fc:b4:0c:8d:30:17:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6
Validity
Not Before: Aug 2 06:27:27 2022 GMT
Not After : Aug 1 06:32:27 2023 GMT
Subject: CN=12FBA297521A493A4A556FB514876A1C658877E5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2e:42:10:cf:fe:7e:ca:e3:9a:37:85:0b:52:
1c:d4:d6:8f:fc:14:6e:0c:b5:11:8c:37:95:a9:26:
aa:48:53:6c:05:16:4e:a8:eb:25:9c:9d:2e:7b:a3:
9b:37:b3:50:cb:c6:39:88:bd:b3:2f:fb:80:90:20:
e8:cd:63:70:6f:42:47:0a:9b:8d:4c:7b:e6:3e:f9:
43:d6:d4:77:9c:af:5c:01:70:f3:2c:c4:d5:0a:91:
91:6e:61:47:fb:28:91:36:28:6a:ec:9a:ab:88:43:
56:3c:f2:87:d2:a8:4f:f5:19:d0:76:f7:56:de:f5:
88:6d:17:53:f2:49:7a:c3:49:31:cb:3b:18:1f:c7:
f2:62:ef:6c:a8:b7:d6:2a:fc:a8:3c:75:dc:16:3b:
5d:4a:d8:62:92:b5:52:2a:fd:5e:07:a5:d9:60:8c:
5f:25:2c:c2:6f:81:de:97:13:46:b5:42:84:ce:cc:
29:f3:35:14:67:83:5a:73:71:75:cf:0a:11:1a:0d:
d8:7f:4a:fb:4e:ae:fb:63:58:8c:a4:b1:d5:26:98:
81:25:9e:1c:f6:bd:d4:1e:e6:71:f5:e6:70:d3:e4:
91:4d:25:28:60:21:b3:24:0d:d4:c1:45:6f:66:a3:
b5:eb:dc:1a:be:24:f9:97:f3:04:17:eb:99:eb:99:
da:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:FB:A2:97:52:1A:49:3A:4A:55:6F:B5:14:87:6A:1C:65:88:77:E5
X509v3 Authority Key Identifier:
keyid:10:F0:0F:AE:6F:0B:93:AB:DC:95:62:8A:CE:3C:3C:18:9A:E9:27:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e31332e302f32342d3234203d3e20313339393831.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.154.13.0/24
Signature Algorithm: sha256WithRSAEncryption
b8:73:72:a1:92:f0:05:43:64:e1:c8:67:b6:39:00:53:f0:05:
7e:48:20:05:e4:38:02:d4:9a:22:6f:76:17:bd:36:33:cd:e7:
0b:1d:4d:9f:1b:d4:5f:ff:a5:79:b0:59:85:a6:e8:f3:43:d1:
b3:db:bc:45:60:e4:48:43:27:ae:04:90:8e:9b:6f:db:bb:8f:
b2:c5:84:65:0b:66:aa:1d:da:df:bf:6d:2b:72:94:dc:ff:89:
1b:7c:02:95:88:0c:d2:a8:2d:23:96:7c:59:b7:a2:b3:8a:8a:
0c:c4:c1:2d:04:d0:58:5d:3a:b4:f6:9d:a2:ff:01:45:c3:81:
39:cc:9d:c1:49:30:11:b3:98:e5:ec:a1:00:0d:4f:1a:f1:47:
dd:88:17:f6:11:ee:ee:31:fa:b3:2d:0e:54:25:ba:a6:de:65:
7c:37:3f:d2:2d:e8:78:d6:37:29:5d:54:4c:3b:87:49:ad:99:
2b:cc:84:35:41:dc:55:10:5f:47:b0:64:de:49:9f:79:24:1f:
57:e8:0c:54:ee:08:cd:c2:11:ce:68:e6:03:39:ed:3a:84:b5:
30:6c:d0:d9:66:2b:a7:c2:fd:9d:e1:53:35:00:8f:91:da:77:
86:2e:39:d4:29:5f:e0:61:33:75:13:84:44:ad:e9:ea:7f:72:
12:4e:b2:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:40 2024 by rpki-client on console-ams.rpki-client.org