Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/3131302e37362e3134342e302f32332d3234203d3e203338353036.roa
File: 3131302e37362e3134342e302f32332d3234203d3e203338353036.roa (raw, json)
Hash identifier: izJgFqV62KyA9OSsNrS3+EuyqETW5bVRCBsMc1WYwbY=
Subject key identifier: CA:84:B9:55:9F:E3:6A:1D:A8:37:2E:C9:BC:63:CC:D5:95:1B:D0:3B
Certificate issuer: /CN=0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2
Certificate serial: 1A04281CE6605D1D0530B41909FC1B27873A3B8A
Authority key identifier: 0F:D0:44:D6:13:48:C8:8D:DC:FF:C4:F3:C3:3B:FB:C4:51:BC:17:A2
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/3131302e37362e3134342e302f32332d3234203d3e203338353036.roa
Signing time: Thu 13 Apr 2023 08:01:55 +0000
ROA not before: Thu 13 Apr 2023 07:56:55 +0000
ROA not after: Thu 11 Apr 2024 08:01:55 +0000
asID: 38506
IP address blocks: 110.76.144.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1a:04:28:1c:e6:60:5d:1d:05:30:b4:19:09:fc:1b:27:87:3a:3b:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2
Validity
Not Before: Apr 13 07:56:55 2023 GMT
Not After : Apr 11 08:01:55 2024 GMT
Subject: CN=CA84B9559FE36A1DA8372EC9BC63CCD5951BD03B
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:81:ae:97:a8:e3:ac:81:8c:a8:0b:52:c5:be:
9c:5a:c6:24:a9:7a:ef:6f:8e:dd:21:c8:e1:07:b3:
7d:5c:01:86:93:24:b1:f3:96:fc:27:0e:8c:61:92:
af:0d:d6:34:cd:66:5f:25:57:11:28:b3:e9:1b:e4:
e0:62:f9:6b:9d:0d:bf:a6:fd:4e:cb:17:b5:b8:da:
5e:de:98:2f:38:a8:01:c2:50:87:0c:e2:88:94:ef:
f5:53:61:92:e2:1e:1d:5f:78:7b:2c:7b:03:08:08:
88:8f:cd:09:f0:a0:de:8d:58:86:07:91:a0:4e:f7:
88:e9:64:17:84:21:42:bc:cd:38:c2:dc:c5:49:48:
27:e7:24:18:65:0e:db:42:ec:c0:4d:e1:87:0b:a5:
41:ad:7f:ce:22:21:69:4a:86:a8:9c:03:ab:62:f6:
03:a1:9c:14:59:db:42:20:d8:6f:3c:68:e2:cb:79:
bc:f8:b7:08:1b:2e:7c:ee:72:90:ff:16:73:64:92:
21:2b:62:06:f5:05:80:b5:64:83:86:52:2c:0c:7c:
d8:e0:2a:66:ee:93:c5:4b:47:aa:f8:2d:ed:53:84:
d0:cf:16:16:6e:23:f0:3f:f1:98:ec:12:3e:98:2c:
ff:7b:52:f6:fe:a7:72:3b:f1:3e:13:ca:22:65:13:
e1:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:84:B9:55:9F:E3:6A:1D:A8:37:2E:C9:BC:63:CC:D5:95:1B:D0:3B
X509v3 Authority Key Identifier:
keyid:0F:D0:44:D6:13:48:C8:8D:DC:FF:C4:F3:C3:3B:FB:C4:51:BC:17:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/3131302e37362e3134342e302f32332d3234203d3e203338353036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
110.76.144.0/23
Signature Algorithm: sha256WithRSAEncryption
43:52:a8:c0:81:ff:5a:3f:de:52:a2:15:49:9b:92:e7:b2:64:
02:89:8f:bf:55:75:91:89:49:0d:2b:84:9f:d7:c9:cf:b3:02:
13:e3:72:1b:0f:d8:ef:b6:97:05:9f:77:4a:1d:ce:01:8e:e7:
1e:b5:1c:0a:6d:5e:24:7b:e0:16:e2:ae:cc:42:ec:c8:8a:66:
5b:04:60:a6:d0:f4:37:25:a6:e8:ed:79:ff:d5:1a:6a:73:0f:
8b:04:a4:14:76:d5:4f:7e:c3:4b:e0:4e:17:b0:47:51:11:4e:
e8:24:e8:63:ec:20:95:d3:ff:8c:0c:63:00:af:90:37:fd:d4:
17:45:94:56:70:9a:db:ec:91:69:e9:d8:13:67:56:0b:c9:69:
17:5b:97:2d:6d:ab:e6:6d:ac:65:93:20:29:2e:46:78:6c:29:
44:8f:63:56:45:96:8c:6e:86:fb:df:d5:7b:99:40:a7:50:19:
96:d5:89:25:a3:d5:28:e5:bd:30:b7:ce:a0:b8:4d:0b:a8:af:
5d:94:f1:c1:29:98:55:45:6f:bf:cd:28:10:a6:65:92:dd:b8:
0b:1a:5d:ea:fe:3d:b7:d3:91:dc:11:23:3a:de:8b:bd:09:21:
54:8e:2b:d8:df:77:a7:95:b9:ad:a8:05:46:9f:78:b4:04:d6:
27:55:de:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:41 2024 by rpki-client on console-ams.rpki-client.org