Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/323030313a6466373a323930303a3a2f34382d3438203d3e20313530353034.roa
File: 323030313a6466373a323930303a3a2f34382d3438203d3e20313530353034.roa (raw, json)
Hash identifier: MICa3idAlt6R/POsuZqcuo3lXRqxvJzXl4+oSTQSUZQ=
Subject key identifier: 76:F5:2B:59:F5:44:A5:D8:8B:78:C8:50:06:2E:FB:80:43:9D:99:D7
Certificate issuer: /CN=4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9
Certificate serial: 55B92C156183C9DDD739A0F2D6564A209A396AA4
Authority key identifier: 4D:EF:BD:D9:85:4B:E8:D1:E2:8F:73:30:A0:B8:02:C3:EE:6A:D1:F9
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/323030313a6466373a323930303a3a2f34382d3438203d3e20313530353034.roa
Signing time: Mon 13 Feb 2023 12:43:48 +0000
ROA not before: Mon 13 Feb 2023 12:38:48 +0000
ROA not after: Mon 12 Feb 2024 12:43:48 +0000
asID: 150504
IP address blocks: 2001:df7:2900::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
55:b9:2c:15:61:83:c9:dd:d7:39:a0:f2:d6:56:4a:20:9a:39:6a:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9
Validity
Not Before: Feb 13 12:38:48 2023 GMT
Not After : Feb 12 12:43:48 2024 GMT
Subject: CN=76F52B59F544A5D88B78C850062EFB80439D99D7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:0f:17:6d:9b:e0:54:79:98:a4:a6:a4:d3:d4:
0b:24:b6:9d:32:44:95:65:96:47:6c:50:64:38:97:
86:47:bd:fe:da:d6:13:d8:b4:b5:71:c0:05:24:a9:
24:1b:34:66:ab:a2:82:5b:d1:3c:14:0c:d4:ad:0f:
d5:e9:49:57:f7:3b:8b:e3:8f:74:8c:23:7b:16:99:
1d:4d:8e:60:85:c0:bd:d6:92:b5:0a:bb:4c:eb:d0:
ef:de:b5:d2:c9:46:92:6b:85:eb:af:38:dd:51:78:
40:19:38:e3:d8:a4:3c:61:3f:d4:1f:06:7b:c0:9a:
f1:5f:9b:cb:6c:7b:32:19:e5:0b:6f:a5:87:76:48:
d4:2f:7c:c0:51:75:27:ef:15:e3:ac:32:7c:b4:79:
76:1b:96:6a:08:e7:65:1c:70:4f:9e:ea:a6:82:12:
cd:e6:9e:d7:ce:c2:30:8d:cc:6d:8d:b6:b4:9c:29:
66:ea:31:d6:bb:b0:53:20:ff:7f:3f:da:ed:28:19:
84:31:c6:90:c0:6e:ac:e0:23:90:45:1b:9c:0c:e0:
da:d8:92:f5:bc:78:6b:89:7e:ea:6e:cd:fe:7d:fc:
98:3f:8f:1f:72:42:4b:00:af:9d:11:05:6e:06:51:
47:0e:25:67:fc:97:72:f3:83:9c:9f:6d:08:64:f1:
b9:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:F5:2B:59:F5:44:A5:D8:8B:78:C8:50:06:2E:FB:80:43:9D:99:D7
X509v3 Authority Key Identifier:
keyid:4D:EF:BD:D9:85:4B:E8:D1:E2:8F:73:30:A0:B8:02:C3:EE:6A:D1:F9
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/4DEFBDD9854BE8D1E28F7330A0B802C3EE6AD1F9.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/90de231f-fb8a-427a-aa36-0a3fc972328d/0/323030313a6466373a323930303a3a2f34382d3438203d3e20313530353034.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:df7:2900::/48
Signature Algorithm: sha256WithRSAEncryption
22:62:04:54:f9:b5:f5:19:03:98:b0:f6:21:75:57:03:1a:46:
ee:b2:2c:9d:b2:6b:44:8d:0b:47:00:bf:23:b7:ef:66:54:a1:
e1:c8:13:49:cc:8b:bf:fa:5d:cf:12:25:94:95:5e:93:a2:00:
63:e0:f6:13:c0:f7:16:18:e1:7a:f4:60:63:dd:fe:52:ac:65:
25:31:0a:be:40:85:92:83:b3:93:39:0f:7e:0c:44:6d:a0:6a:
e7:aa:0b:62:1e:b7:4e:96:dc:9c:fb:1a:cb:60:3e:b7:51:a8:
25:01:af:92:98:54:fd:bb:b3:59:8f:77:36:a6:eb:bc:9d:5a:
87:50:af:20:55:f0:dd:02:c0:bb:99:64:14:0c:df:c9:e6:4b:
fc:8f:3d:64:b7:a1:f7:4e:86:ff:a6:21:3f:52:0c:99:e2:db:
54:73:be:3d:27:79:e1:47:01:8f:fa:b2:63:7f:04:f8:58:a4:
58:0c:c8:d0:c3:2b:e2:6b:38:d6:18:b1:a5:7a:da:f1:98:eb:
f2:40:9a:6e:34:55:49:70:6f:d9:d0:b8:c9:12:52:04:7a:2c:
d5:00:61:f7:03:94:ac:b3:df:01:44:a1:5a:b1:20:31:17:95:
32:a0:ec:4e:ab:e7:3a:f1:76:79:fc:0d:a7:2d:4f:9d:c8:81:
58:3b:3d:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 11:56:48 2025 by rpki-client