Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/3131302e37362e3135302e302f32342d3234203d3e203338353036.roa
File: 3131302e37362e3135302e302f32342d3234203d3e203338353036.roa (raw, json)
Hash identifier: YhSHL715+8PkRkmvygPtFdA11izBCVW+wJulauGPLdM=
Subject key identifier: 78:E4:49:DD:AE:52:6C:24:7C:43:20:73:D6:6F:43:FE:F2:56:16:38
Certificate issuer: /CN=0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2
Certificate serial: 6CD038C6EAAA93B46761F09FDA7BC4769BEBD97D
Authority key identifier: 0F:D0:44:D6:13:48:C8:8D:DC:FF:C4:F3:C3:3B:FB:C4:51:BC:17:A2
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/3131302e37362e3135302e302f32342d3234203d3e203338353036.roa
Signing time: Sat 14 Jan 2023 17:11:45 +0000
ROA not before: Sat 14 Jan 2023 17:06:45 +0000
ROA not after: Sat 13 Jan 2024 17:11:45 +0000
asID: 38506
IP address blocks: 110.76.150.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6c:d0:38:c6:ea:aa:93:b4:67:61:f0:9f:da:7b:c4:76:9b:eb:d9:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2
Validity
Not Before: Jan 14 17:06:45 2023 GMT
Not After : Jan 13 17:11:45 2024 GMT
Subject: CN=78E449DDAE526C247C432073D66F43FEF2561638
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:dd:0a:61:25:99:52:17:8f:ea:ce:fe:54:d1:
07:35:64:c2:8a:fc:d6:4d:bc:65:62:10:b7:53:c7:
cf:a1:cb:5d:60:34:2e:3a:c2:bf:ea:c7:fe:e6:ca:
5a:81:21:f3:23:31:00:88:fc:67:85:cf:89:db:e1:
21:7a:e1:68:cf:0a:7b:b1:03:0a:91:47:19:75:28:
e6:32:53:ef:37:96:e5:15:3c:d8:6b:31:14:9c:f2:
a2:ac:f8:99:f9:67:f2:a6:e1:99:c5:f2:d1:95:a3:
8f:26:ca:ab:39:a0:bc:29:c4:91:c5:cf:ea:9c:38:
0e:19:92:5d:9c:05:ab:e3:42:93:0c:13:7b:bb:d1:
a8:01:a0:9f:06:2e:aa:7f:e2:c8:8c:35:44:65:8b:
31:fa:8f:04:0e:36:17:95:03:cf:a3:13:14:0a:77:
7b:19:77:ab:32:c1:a4:21:d2:19:0e:9d:23:12:81:
09:e4:78:15:20:2a:08:b3:d2:0f:95:ea:a4:29:ef:
a5:00:b1:9d:5e:a8:9b:ad:7b:c0:c5:78:af:60:11:
8b:f7:f6:44:85:48:4e:71:31:af:f3:00:63:ec:dc:
e2:c7:08:17:e4:31:90:a8:21:0d:a8:e3:df:fd:6a:
a5:67:88:f0:5d:30:0a:ca:fb:f2:d4:92:32:2e:90:
23:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:E4:49:DD:AE:52:6C:24:7C:43:20:73:D6:6F:43:FE:F2:56:16:38
X509v3 Authority Key Identifier:
keyid:0F:D0:44:D6:13:48:C8:8D:DC:FF:C4:F3:C3:3B:FB:C4:51:BC:17:A2
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/0FD044D61348C88DDCFFC4F3C33BFBC451BC17A2.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8b548bad-7fed-41fd-b42e-780372c45255/0/3131302e37362e3135302e302f32342d3234203d3e203338353036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
110.76.150.0/24
Signature Algorithm: sha256WithRSAEncryption
89:10:c8:06:10:1f:41:a5:b5:3e:60:37:ff:d2:7d:03:c3:41:
8b:de:ce:a5:f4:6b:5d:35:e3:cf:c3:df:1e:76:d9:ac:9c:68:
98:3a:44:6f:b4:af:61:93:59:9f:7f:b8:72:26:7a:f1:8f:3a:
e0:d8:1c:95:48:49:a1:d4:93:ea:e4:8d:39:7b:c9:e4:25:62:
7f:d3:ca:29:b3:36:9c:f4:89:22:c0:e7:66:37:da:a3:98:3f:
6c:5d:3c:d0:79:1f:57:41:b9:99:aa:0b:27:3a:12:8d:67:fa:
a5:14:71:6a:e9:71:38:e3:87:56:c9:ce:6a:49:8f:5f:45:32:
23:74:e2:84:c4:82:6c:8e:81:8a:dd:1b:52:0a:cb:31:02:c9:
03:55:9f:45:39:e1:91:92:03:de:b8:8c:0e:2c:57:b7:5b:2d:
44:34:5a:7e:0e:d7:40:5b:22:6f:ea:eb:60:87:cd:c7:1a:1e:
f5:eb:c3:fa:56:14:8f:d4:3f:2d:50:84:b8:fa:05:57:57:fd:
7a:78:3c:43:31:09:4f:d9:2e:b4:6f:ba:02:5e:0a:48:ee:e2:
d4:cd:1d:7a:a7:2b:f0:b3:41:4c:95:1c:18:e8:5a:e3:bc:1e:
36:ee:b8:46:bf:84:6e:47:4c:83:13:a0:f7:e9:d9:f2:fe:92:
bf:a6:50:54
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUbNA4xuqqk7RnYfCf2nvEdpvr2X0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMEZEMDQ0RDYxMzQ4Qzg4RERDRkZDNEYzQzMzQkZCQzQ1
MUJDMTdBMjAeFw0yMzAxMTQxNzA2NDVaFw0yNDAxMTMxNzExNDVaMDMxMTAvBgNV
BAMTKDc4RTQ0OUREQUU1MjZDMjQ3QzQzMjA3M0Q2NkY0M0ZFRjI1NjE2MzgwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDg3QphJZlSF4/qzv5U0Qc1ZMKK
/NZNvGViELdTx8+hy11gNC46wr/qx/7mylqBIfMjMQCI/GeFz4nb4SF64WjPCnux
AwqRRxl1KOYyU+83luUVPNhrMRSc8qKs+Jn5Z/Km4ZnF8tGVo48myqs5oLwpxJHF
z+qcOA4Zkl2cBavjQpMME3u70agBoJ8GLqp/4siMNURlizH6jwQONheVA8+jExQK
d3sZd6sywaQh0hkOnSMSgQnkeBUgKgiz0g+V6qQp76UAsZ1eqJute8DFeK9gEYv3
9kSFSE5xMa/zAGPs3OLHCBfkMZCoIQ2o49/9aqVniPBdMArK+/LUkjIukCO1AgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUeORJ3a5SbCR8QyBz1m9D/vJWFjgwHwYDVR0j
BBgwFoAUD9BE1hNIyI3c/8Tzwzv7xFG8F6IwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
YjU0OGJhZC03ZmVkLTQxZmQtYjQyZS03ODAzNzJjNDUyNTUvMC8wRkQwNDRENjEz
NDhDODhERENGRkM0RjNDMzNCRkJDNDUxQkMxN0EyLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMEZEMDQ0RDYxMzQ4Qzg4RERDRkZDNEYzQzMzQkZCQzQ1MUJD
MTdBMi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhiNTQ4YmFkLTdmZWQtNDFmZC1i
NDJlLTc4MDM3MmM0NTI1NS8wLzMxMzEzMDJlMzczNjJlMzEzNTMwMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzMzODM1MzAzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAG5MljANBgkqhkiG
9w0BAQsFAAOCAQEAiRDIBhAfQaW1PmA3/9J9A8NBi97OpfRrXTXjz8PfHnbZrJxo
mDpEb7SvYZNZn3+4ciZ68Y864NgclUhJodST6uSNOXvJ5CVif9PKKbM2nPSJIsDn
Zjfao5g/bF080HkfV0G5maoLJzoSjWf6pRRxaulxOOOHVsnOakmPX0UyI3TihMSC
bI6Bit0bUgrLMQLJA1WfRTnhkZID3riMDixXt1stRDRafg7XQFsib+rrYIfNxxoe
9evD+lYUj9Q/LVCEuPoFV1f9eng8QzEJT9kutG+6Al4KSO7i1M0deqcr8LNBTJUc
GOha47weNu64Rr+EbkdMgxOg9+nZ8v6Sv6ZQVA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:08 2024 by rpki-client on console-fra.rpki-client.org