Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/3230322e37332e32322e302f32342d3234203d3e20313337383331.roa
File: 3230322e37332e32322e302f32342d3234203d3e20313337383331.roa (raw, json)
Hash identifier: hpEJcXdLcKTQEv1s6jEcmUKsBbZecpbXTF4G+zjm+1c=
Subject key identifier: B0:67:77:5D:A7:22:5C:74:69:94:3C:92:A1:A9:DB:EA:7C:58:20:DA
Certificate issuer: /CN=2042008AEC80152F373D2A04DFD3893EE2F92166
Certificate serial: 46B4107DC74FA7ADB01379B374A51210C664E836
Authority key identifier: 20:42:00:8A:EC:80:15:2F:37:3D:2A:04:DF:D3:89:3E:E2:F9:21:66
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2042008AEC80152F373D2A04DFD3893EE2F92166.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/3230322e37332e32322e302f32342d3234203d3e20313337383331.roa
Signing time: Wed 19 Apr 2023 07:59:47 +0000
ROA not before: Wed 19 Apr 2023 07:54:47 +0000
ROA not after: Wed 17 Apr 2024 07:59:47 +0000
asID: 137831
IP address blocks: 202.73.22.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
46:b4:10:7d:c7:4f:a7:ad:b0:13:79:b3:74:a5:12:10:c6:64:e8:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2042008AEC80152F373D2A04DFD3893EE2F92166
Validity
Not Before: Apr 19 07:54:47 2023 GMT
Not After : Apr 17 07:59:47 2024 GMT
Subject: CN=B067775DA7225C7469943C92A1A9DBEA7C5820DA
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:71:cb:e1:3b:0d:9b:c2:7b:4e:88:92:c9:8a:
7c:c0:49:e6:d4:53:59:98:9a:6c:d9:7f:9a:83:23:
da:ac:ae:47:1f:90:98:b2:c1:b3:61:1f:82:31:4a:
3c:8c:3a:51:c4:35:23:0e:2a:fa:d7:7e:fe:cb:07:
09:e6:60:b1:1e:34:a5:3a:67:a9:b2:64:69:5e:2c:
5f:f8:49:eb:72:a8:28:c9:84:ac:d1:50:86:ac:b0:
4a:fb:95:5b:41:3f:98:70:3c:89:dc:08:0b:c0:04:
74:22:e2:24:6a:51:ac:70:f7:02:1b:7c:84:e3:1f:
00:c1:a7:6a:75:15:09:32:49:d4:76:03:31:bc:15:
cf:6b:19:5b:82:6b:6c:83:4a:fe:04:40:02:f3:a9:
49:69:fd:64:0f:11:37:9f:c6:52:09:29:4b:9c:ac:
13:18:47:5e:07:66:1d:c2:60:12:20:66:69:33:98:
8a:cb:2c:3f:de:f0:08:f1:9e:e8:c9:56:9e:e5:9e:
26:b7:ff:68:08:91:93:92:ea:3d:bf:77:62:54:f2:
a9:72:a8:b0:8f:4e:ee:d2:82:48:15:47:ab:3a:da:
30:1d:f0:11:f4:4f:3d:97:21:62:b7:e4:e9:2d:3c:
db:d5:ff:46:01:65:4a:46:57:72:7e:97:cc:2d:64:
ea:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:67:77:5D:A7:22:5C:74:69:94:3C:92:A1:A9:DB:EA:7C:58:20:DA
X509v3 Authority Key Identifier:
keyid:20:42:00:8A:EC:80:15:2F:37:3D:2A:04:DF:D3:89:3E:E2:F9:21:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/2042008AEC80152F373D2A04DFD3893EE2F92166.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2042008AEC80152F373D2A04DFD3893EE2F92166.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/3230322e37332e32322e302f32342d3234203d3e20313337383331.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.73.22.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:2a:30:b6:d9:7f:8a:f3:3f:af:52:ac:fd:ef:98:d3:67:66:
4f:56:b1:5b:d6:d5:b2:21:4e:cf:d8:a0:2a:9a:38:ae:17:b4:
8d:1e:f9:2f:7d:15:9e:04:e5:ad:f1:7f:4b:4e:99:e4:9a:b4:
48:ae:9a:1d:14:ce:0c:b6:16:16:4c:b4:aa:ee:fd:c8:42:9b:
96:31:a1:81:85:63:d4:e2:4a:f8:da:5c:d6:d7:61:38:12:29:
43:0d:bb:42:30:c9:18:4d:c6:3f:fe:62:56:96:75:9e:c6:13:
60:63:98:68:68:b6:93:96:d5:6f:6f:6f:04:9e:4d:b9:24:75:
3e:f8:e2:74:ab:8c:12:7e:34:ba:99:b9:62:5f:ab:02:f3:f3:
99:77:60:dc:63:4e:7c:7c:c3:bb:65:b8:33:1b:f7:a3:9f:3c:
35:58:fe:d3:97:a6:7c:66:6e:c7:5a:8e:46:3b:e9:10:ee:65:
ff:ab:07:ac:9c:a0:9b:1a:c2:00:20:97:66:ae:30:84:5a:1a:
bf:0c:c8:5f:41:bd:6a:0b:5c:ad:8c:f1:5f:6a:6f:eb:2d:1c:
2e:03:5c:05:ea:84:58:80:78:5c:5d:84:d7:bd:7f:96:fd:4d:
17:b0:71:0a:70:08:28:f4:1d:1f:49:3e:53:fc:d2:6b:4e:8a:
d6:64:7d:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:41 2024 by rpki-client on console-ams.rpki-client.org