Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/3232332e32352e3131312e302f32342d3234203d3e2034383231.roa
File: 3232332e32352e3131312e302f32342d3234203d3e2034383231.roa (raw, json)
Hash identifier: R47m504xJwPD5Kgo+654LfvA8i/MRXm2hDEP9C5KMtg=
Subject key identifier: A2:F0:DB:93:43:23:05:F1:84:83:F1:0D:8D:08:A0:C2:37:B9:E0:30
Certificate issuer: /CN=4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787
Certificate serial: 2E753878A12C09723D9009718DE3386DBB8AE641
Authority key identifier: 4B:F1:DC:C0:BC:C5:B1:A4:B6:BE:52:6A:75:FF:33:39:7F:C3:87:87
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/3232332e32352e3131312e302f32342d3234203d3e2034383231.roa
Signing time: Sun 28 Aug 2022 23:08:21 +0000
ROA not before: Sun 28 Aug 2022 23:03:21 +0000
ROA not after: Sun 27 Aug 2023 23:08:21 +0000
asID: 4821
IP address blocks: 223.25.111.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2e:75:38:78:a1:2c:09:72:3d:90:09:71:8d:e3:38:6d:bb:8a:e6:41
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787
Validity
Not Before: Aug 28 23:03:21 2022 GMT
Not After : Aug 27 23:08:21 2023 GMT
Subject: CN=A2F0DB93432305F18483F10D8D08A0C237B9E030
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:86:3c:a6:e9:ae:89:d8:a3:bd:80:d9:a5:57:
1e:2a:a3:51:c9:7c:3e:e3:a9:72:ab:86:8f:72:8d:
a5:32:21:7f:8b:0d:ae:cc:f2:c4:8e:b0:b8:61:a2:
66:13:45:1e:3e:0a:4f:94:80:05:ce:8e:89:35:e3:
8a:6c:29:68:05:98:17:cd:f1:93:ae:76:30:5d:ad:
60:26:6b:36:25:dd:25:ec:e0:59:61:c9:1c:d1:81:
bb:09:f5:0b:ec:8f:6b:90:9b:7d:79:25:48:2c:aa:
eb:5e:1a:12:88:df:6d:40:dc:95:ca:74:bb:5d:a8:
42:cf:f3:4d:ea:5e:c3:2d:b8:8f:bf:03:4a:2e:c7:
06:c0:27:89:7e:11:ea:5e:48:b3:28:16:c0:ad:8e:
ff:f8:ad:38:79:de:06:c0:84:65:f5:3f:46:22:0b:
fa:68:68:05:84:55:51:89:fe:46:f2:82:39:81:b9:
6c:3c:32:e6:6b:37:74:06:ae:94:af:7e:7d:86:89:
c4:f6:46:72:3b:88:58:87:34:81:58:77:57:d6:83:
ee:f8:06:59:e5:7a:20:26:d8:7e:cb:d6:15:1d:08:
89:a0:e4:61:ba:81:b9:da:01:97:4a:eb:45:5f:a6:
57:d6:e4:84:f3:ee:b5:da:90:d3:52:ee:2a:69:ba:
c3:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:F0:DB:93:43:23:05:F1:84:83:F1:0D:8D:08:A0:C2:37:B9:E0:30
X509v3 Authority Key Identifier:
keyid:4B:F1:DC:C0:BC:C5:B1:A4:B6:BE:52:6A:75:FF:33:39:7F:C3:87:87
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4BF1DCC0BCC5B1A4B6BE526A75FF33397FC38787.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/8d254419-53be-4ad4-bf7f-29f8912523d0/0/3232332e32352e3131312e302f32342d3234203d3e2034383231.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
223.25.111.0/24
Signature Algorithm: sha256WithRSAEncryption
81:8a:d1:18:aa:fd:3c:a7:d4:5a:4f:0e:70:32:1c:46:6b:0a:
07:e6:90:77:69:28:88:08:0f:7f:7b:58:ee:4f:5e:2a:be:d9:
e0:9f:d0:a7:bf:39:63:a7:02:0f:ea:61:15:1b:e7:23:10:06:
f4:43:12:eb:b1:34:9b:04:59:31:2e:3d:1c:bd:bb:bd:72:e2:
e8:3b:96:82:02:7e:1b:cb:ff:5d:f9:4e:cd:7b:4a:37:53:17:
bd:31:01:13:ce:47:32:b9:43:51:a9:0b:2e:7c:74:26:59:02:
f6:ae:48:b1:ea:6c:cf:99:13:1a:11:34:91:2a:58:aa:03:fb:
d5:46:d0:60:47:03:cd:50:8b:36:2f:7e:2a:8d:e6:d9:9c:f8:
4d:8f:68:26:ae:56:8e:1e:99:52:a0:df:99:cd:b2:ec:ea:ad:
f4:71:97:45:69:1c:29:00:fc:55:37:ca:8a:6d:a5:76:5e:f2:
73:17:9e:42:bb:dc:79:dc:e7:34:94:44:63:88:92:95:67:e9:
e2:be:d3:ae:e7:e1:18:bb:3a:d2:f0:ff:58:c5:7c:0b:ee:59:
c8:00:8f:51:2d:96:0e:e2:6e:80:8e:69:c5:6f:e2:ee:46:ad:
04:67:9e:dd:91:6a:60:33:38:6a:75:dd:ca:2b:de:f8:a9:07:
64:43:88:4b
-----BEGIN CERTIFICATE-----
MIIFJjCCBA6gAwIBAgIULnU4eKEsCXI9kAlxjeM4bbuK5kEwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNEJGMURDQzBCQ0M1QjFBNEI2QkU1MjZBNzVGRjMzMzk3
RkMzODc4NzAeFw0yMjA4MjgyMzAzMjFaFw0yMzA4MjcyMzA4MjFaMDMxMTAvBgNV
BAMTKEEyRjBEQjkzNDMyMzA1RjE4NDgzRjEwRDhEMDhBMEMyMzdCOUUwMzAwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhhjym6a6J2KO9gNmlVx4qo1HJ
fD7jqXKrho9yjaUyIX+LDa7M8sSOsLhhomYTRR4+Ck+UgAXOjok144psKWgFmBfN
8ZOudjBdrWAmazYl3SXs4FlhyRzRgbsJ9Qvsj2uQm315JUgsquteGhKI321A3JXK
dLtdqELP803qXsMtuI+/A0ouxwbAJ4l+EepeSLMoFsCtjv/4rTh53gbAhGX1P0Yi
C/poaAWEVVGJ/kbygjmBuWw8MuZrN3QGrpSvfn2GicT2RnI7iFiHNIFYd1fWg+74
BlnleiAm2H7L1hUdCImg5GG6gbnaAZdK60VfplfW5ITz7rXakNNS7ippusMJAgMB
AAGjggIwMIICLDAdBgNVHQ4EFgQUovDbk0MjBfGEg/ENjQigwje54DAwHwYDVR0j
BBgwFoAUS/HcwLzFsaS2vlJqdf8zOX/Dh4cwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84
ZDI1NDQxOS01M2JlLTRhZDQtYmY3Zi0yOWY4OTEyNTIzZDAvMC80QkYxRENDMEJD
QzVCMUE0QjZCRTUyNkE3NUZGMzMzOTdGQzM4Nzg3LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNEJGMURDQzBCQ0M1QjFBNEI2QkU1MjZBNzVGRjMzMzk3RkMz
ODc4Ny5jZXIwgaAGCCsGAQUFBwELBIGTMIGQMIGNBggrBgEFBQcwC4aBgHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzhkMjU0NDE5LTUzYmUtNGFkNC1i
ZjdmLTI5Zjg5MTI1MjNkMC8wLzMyMzIzMzJlMzIzNTJlMzEzMTMxMmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzQzODMyMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYB
BQUHDgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBADfGW8wDQYJKoZIhvcN
AQELBQADggEBAIGK0Riq/Tyn1FpPDnAyHEZrCgfmkHdpKIgID397WO5PXiq+2eCf
0Ke/OWOnAg/qYRUb5yMQBvRDEuuxNJsEWTEuPRy9u71y4ug7loICfhvL/135Ts17
SjdTF70xARPORzK5Q1GpCy58dCZZAvauSLHqbM+ZExoRNJEqWKoD+9VG0GBHA81Q
izYvfiqN5tmc+E2PaCauVo4emVKg35nNsuzqrfRxl0VpHCkA/FU3yoptpXZe8nMX
nkK73Hnc5zSURGOIkpVn6eK+067n4Ri7OtLw/1jFfAvuWcgAj1Etlg7iboCOacVv
4u5GrQRnnt2RamAzOGp13cor3vipB2RDiEs=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:08 2024 by rpki-client on console-fra.rpki-client.org