Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/3230322e37332e32332e302f32342d3234203d3e203538383136.roa
File: 3230322e37332e32332e302f32342d3234203d3e203538383136.roa (raw, json)
Hash identifier: 1ZfZI3TREd0Tl4N2Sy9i2Gsb6NH4PFNYXeplzIupknw=
Subject key identifier: 2A:D9:AA:81:B4:D3:D8:E4:E0:43:18:CA:95:49:5D:71:6F:77:47:02
Certificate issuer: /CN=2042008AEC80152F373D2A04DFD3893EE2F92166
Certificate serial: 754BBDF15165840FCC1E087351E0B3D1BA152200
Authority key identifier: 20:42:00:8A:EC:80:15:2F:37:3D:2A:04:DF:D3:89:3E:E2:F9:21:66
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2042008AEC80152F373D2A04DFD3893EE2F92166.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/3230322e37332e32332e302f32342d3234203d3e203538383136.roa
Signing time: Wed 19 Apr 2023 07:49:22 +0000
ROA not before: Wed 19 Apr 2023 07:44:22 +0000
ROA not after: Wed 17 Apr 2024 07:49:22 +0000
asID: 58816
IP address blocks: 202.73.23.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
75:4b:bd:f1:51:65:84:0f:cc:1e:08:73:51:e0:b3:d1:ba:15:22:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2042008AEC80152F373D2A04DFD3893EE2F92166
Validity
Not Before: Apr 19 07:44:22 2023 GMT
Not After : Apr 17 07:49:22 2024 GMT
Subject: CN=2AD9AA81B4D3D8E4E04318CA95495D716F774702
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ce:64:2f:ee:03:73:e7:3f:1b:03:83:dd:ae:
3a:7e:15:15:33:4d:8e:03:b4:c8:41:a9:5c:76:f7:
ea:96:e1:ec:3d:d4:bb:28:eb:46:75:0e:11:0d:7e:
c6:7e:09:3d:31:f4:0f:bf:49:8e:b5:67:85:b2:55:
0b:c8:69:ed:d6:73:95:e7:ce:ec:08:34:e1:12:17:
3f:c1:54:14:64:03:e1:db:f0:14:b9:c5:92:96:fa:
4e:a3:1c:9e:f6:a8:3a:03:9f:93:53:c6:3f:d5:3b:
45:d2:3f:f1:08:aa:52:68:37:ca:9c:16:d7:5b:60:
9a:d7:ed:3c:e3:a2:6f:da:e8:e6:17:00:04:1e:82:
83:8d:f9:4b:13:37:1f:07:03:cb:31:f0:c7:77:ef:
e1:c5:e8:c8:af:23:e5:85:fb:f4:80:78:da:13:be:
4c:1e:16:f4:47:ea:17:51:62:4c:59:0a:7d:d3:0a:
f3:d4:25:f0:97:f7:e7:91:98:42:54:c3:5e:6f:09:
a2:96:7f:d2:c4:1a:fb:f8:e4:ea:e2:ac:6b:83:fb:
d1:9a:5b:3e:14:1c:f5:03:ba:8c:3e:1b:37:24:02:
f8:48:3b:25:c5:89:ed:39:a7:29:51:21:5a:d9:22:
29:80:8b:18:3b:f9:39:a0:32:6a:50:c2:43:db:1b:
c1:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:D9:AA:81:B4:D3:D8:E4:E0:43:18:CA:95:49:5D:71:6F:77:47:02
X509v3 Authority Key Identifier:
keyid:20:42:00:8A:EC:80:15:2F:37:3D:2A:04:DF:D3:89:3E:E2:F9:21:66
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/2042008AEC80152F373D2A04DFD3893EE2F92166.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/2042008AEC80152F373D2A04DFD3893EE2F92166.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/6fc3cbc4-8883-411c-876e-e9e23a8d8ad9/0/3230322e37332e32332e302f32342d3234203d3e203538383136.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.73.23.0/24
Signature Algorithm: sha256WithRSAEncryption
02:32:27:68:c9:7c:8e:ef:ad:2e:d2:1c:f3:61:15:96:48:04:
b3:21:05:28:05:38:93:48:e1:c8:2c:f9:71:de:09:2e:b0:c6:
fe:e2:67:ed:3d:e8:7e:42:69:cf:49:f6:ed:05:de:d2:61:73:
2b:2d:ea:f4:02:4a:e9:81:8a:db:d0:53:85:65:b1:37:82:92:
5a:d0:7b:56:3d:81:be:10:b9:fe:f6:d4:30:0e:b2:2e:08:da:
95:9e:2e:e6:14:2c:a1:b9:20:f1:3f:14:59:96:f6:40:7a:b2:
db:ab:45:51:72:f9:ba:88:aa:8d:c9:10:ea:68:99:60:6c:69:
f2:7e:9e:6c:3d:cd:eb:20:b4:1e:bc:c0:f9:39:78:6e:70:10:
45:39:fb:78:14:a8:8f:4a:c8:98:5e:2d:6f:6d:c8:e6:a5:6a:
6e:9c:e8:8e:70:9e:fd:8a:fb:00:d3:a7:77:81:dc:ee:90:54:
9d:aa:d8:e8:dd:81:1a:43:e7:84:21:ec:a9:c1:18:65:fd:a4:
3d:68:0c:ac:16:7d:a8:e6:b9:0e:f6:57:92:d9:bc:46:9a:2f:
0c:f5:12:bd:52:2a:50:96:4f:db:2e:3d:f4:67:74:a1:91:61:
e5:06:9e:bc:b4:e6:2e:4a:3c:9e:a8:2e:50:32:c0:28:3c:66:
d7:3e:20:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:41 2024 by rpki-client on console-ams.rpki-client.org