Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e31382e302f32332d3234203d3e2034343334.roa
File: 3230322e3135342e31382e302f32332d3234203d3e2034343334.roa (raw, json)
Hash identifier: GRXBihBD9LzxrVUeQwkceGP/ciLM/lHaYYWFFCzi+Iw=
Subject key identifier: 18:8E:F1:14:C9:48:CD:97:A6:4E:34:26:7D:3D:55:2F:6D:C3:65:3E
Certificate issuer: /CN=10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6
Certificate serial: 546EEEA2AAE320EC5BACCB31A5C8EA79FD128CE8
Authority key identifier: 10:F0:0F:AE:6F:0B:93:AB:DC:95:62:8A:CE:3C:3C:18:9A:E9:27:F6
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e31382e302f32332d3234203d3e2034343334.roa
Signing time: Wed 19 Oct 2022 10:47:01 +0000
ROA not before: Wed 19 Oct 2022 10:42:01 +0000
ROA not after: Wed 18 Oct 2023 10:47:01 +0000
asID: 4434
IP address blocks: 202.154.18.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
54:6e:ee:a2:aa:e3:20:ec:5b:ac:cb:31:a5:c8:ea:79:fd:12:8c:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6
Validity
Not Before: Oct 19 10:42:01 2022 GMT
Not After : Oct 18 10:47:01 2023 GMT
Subject: CN=188EF114C948CD97A64E34267D3D552F6DC3653E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:50:29:bd:a8:3a:4e:b8:05:af:52:4a:d9:9e:
31:c0:93:00:d0:f3:39:b7:a5:48:36:55:5e:1a:47:
3e:b0:e8:6e:26:5a:a0:6c:59:8a:3b:29:bb:aa:b8:
3a:4d:6b:c8:10:21:57:6d:69:22:b1:c1:e5:ab:85:
1d:c2:27:ab:95:21:64:72:fa:ec:36:e7:56:6b:f3:
f7:c3:59:7c:f6:e2:3b:d5:4e:9d:63:ae:d3:ab:59:
da:d4:a3:44:7d:33:02:54:46:7f:98:0b:9f:91:01:
4b:f0:50:af:78:e4:75:25:39:59:4c:10:0f:a4:84:
c9:59:1b:16:45:75:33:a3:05:04:9c:ba:79:5f:9d:
86:f5:17:bc:7a:09:94:f8:82:d3:ca:2b:02:9f:d6:
90:d6:49:75:17:50:c8:e3:0a:a8:f7:f7:47:9a:c7:
36:27:c0:46:e0:2e:7e:61:ba:52:fc:74:3d:df:5f:
a4:76:3b:e5:1d:1d:a7:80:a3:f7:fa:be:44:8b:d5:
9c:db:bc:82:6c:d2:7b:7e:25:61:b8:8d:1a:63:45:
13:3e:e5:21:8b:f3:a0:70:96:10:81:40:a9:c1:9f:
84:07:87:35:0c:34:8e:d7:3f:ac:56:33:10:1d:91:
31:a2:c1:3d:00:97:37:dc:a7:77:43:ef:90:c9:ff:
99:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:8E:F1:14:C9:48:CD:97:A6:4E:34:26:7D:3D:55:2F:6D:C3:65:3E
X509v3 Authority Key Identifier:
keyid:10:F0:0F:AE:6F:0B:93:AB:DC:95:62:8A:CE:3C:3C:18:9A:E9:27:F6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/10F00FAE6F0B93ABDC95628ACE3C3C189AE927F6.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/5c0c14a9-3a77-49e2-9194-48d0913458b2/0/3230322e3135342e31382e302f32332d3234203d3e2034343334.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.154.18.0/23
Signature Algorithm: sha256WithRSAEncryption
53:7b:65:5a:b1:b7:19:d7:da:bb:63:5e:85:e8:d6:81:64:15:
00:21:dc:45:58:42:25:56:44:ae:d5:de:2d:04:43:ba:ce:8e:
33:e1:4a:6b:26:57:10:da:34:b6:31:1c:f2:7c:e2:f3:13:6d:
10:39:13:30:ca:ad:d1:54:40:12:d8:e3:9a:41:c3:23:6d:2b:
21:2d:7a:b7:0d:15:39:29:56:1a:97:a0:f4:1d:f9:d0:9b:a1:
45:0c:70:32:37:1f:f1:af:90:a9:43:5b:bc:bd:16:a2:5c:2d:
cf:62:b8:ca:ff:d0:af:c7:12:bd:f9:ac:48:1f:a9:ff:6d:2a:
e2:c0:ba:8d:2e:9e:ba:59:f2:d9:b5:09:25:2c:16:a6:7d:2e:
08:b7:7a:51:7c:3e:9f:a5:cd:e1:27:b5:ec:16:0f:5e:b4:9a:
dd:29:df:2e:70:74:80:48:02:b3:10:d0:6c:f4:b5:98:ed:f1:
c2:30:b4:3f:3f:45:a3:1b:01:db:39:f0:0d:b2:e3:f4:87:45:
70:6f:b5:91:5c:b5:d7:0b:ce:6d:ad:8d:af:9a:be:68:0d:46:
9d:fd:fd:79:f6:65:1d:79:c2:77:4b:0f:58:10:bc:3a:f9:5a:
20:57:17:cf:57:3d:19:ea:7d:6b:db:29:6e:1d:a2:65:0e:f0:
9f:eb:28:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:40 2024 by rpki-client on console-ams.rpki-client.org