Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/323030313a6466333a396430303a3a2f34382d3438203d3e2030.roa
File: 323030313a6466333a396430303a3a2f34382d3438203d3e2030.roa (raw, json)
Hash identifier: ERg6AtmmiFD9PTGy8UR1+d/z8z1u6NoG7UIVxu0JOI4=
Subject key identifier: D6:01:FD:0C:5D:6F:AA:BE:B4:19:5F:70:BA:3D:F1:7F:64:30:6F:3C
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 30E0D8772179F03D22391E55C2317FAF2492B174
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323030313a6466333a396430303a3a2f34382d3438203d3e2030.roa
Signing time: Wed 02 Feb 2022 06:20:40 +0000
ROA not before: Wed 02 Feb 2022 06:15:40 +0000
ROA not after: Thu 02 Feb 2023 06:20:40 +0000
asID: 0
IP address blocks: 2001:df3:9d00::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:e0:d8:77:21:79:f0:3d:22:39:1e:55:c2:31:7f:af:24:92:b1:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Feb 2 06:15:40 2022 GMT
Not After : Feb 2 06:20:40 2023 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:f7:de:6c:56:56:df:b5:ba:3e:6c:78:73:33:
2a:8f:b5:b5:6d:c6:d2:35:a4:aa:22:42:f1:55:2f:
c7:50:73:06:a6:01:9a:9a:a2:5e:42:14:b5:0a:f6:
8e:57:d6:3e:d2:b6:a5:45:16:78:17:37:8c:42:8d:
44:3f:19:1b:81:1c:4e:f3:e6:6b:9c:a2:7c:4d:89:
ee:e7:ca:16:01:3d:0d:6d:e1:77:fc:1c:53:f3:73:
96:22:1c:ce:9b:89:c3:8c:7f:1b:7e:ef:53:52:cb:
6d:2b:13:2c:57:be:84:98:e5:4e:a0:80:df:c0:99:
b3:47:32:22:f0:79:4d:0d:4c:9a:10:1e:ce:f6:dd:
f5:26:82:df:50:40:b7:33:cc:91:c6:40:69:af:5b:
9d:d6:2a:a8:54:39:4a:90:eb:d4:da:31:cf:65:5a:
f9:83:8a:02:70:60:10:04:34:2f:fe:0b:21:2d:93:
32:01:8c:71:1b:9d:52:fd:af:91:0b:be:d7:e5:69:
ab:e8:2c:ac:ff:c2:d6:ac:15:68:e0:48:df:cb:6e:
b6:8b:62:a4:35:89:7d:ef:42:d3:5f:f1:6f:be:78:
e8:dc:54:e9:b4:09:7b:6f:fe:a3:79:18:70:3e:87:
62:cf:96:63:7a:c9:8e:04:b4:d3:5d:50:7d:d7:4f:
10:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:01:FD:0C:5D:6F:AA:BE:B4:19:5F:70:BA:3D:F1:7F:64:30:6F:3C
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323030313a6466333a396430303a3a2f34382d3438203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:df3:9d00::/48
Signature Algorithm: sha256WithRSAEncryption
6c:0e:9c:df:77:97:29:b6:f3:7f:3f:8e:a2:79:90:7d:0f:06:
24:6a:08:22:ae:88:0d:7e:d7:cb:a9:c9:99:44:9e:7f:8c:cf:
75:7c:5e:65:e8:79:3d:7c:49:d5:d4:08:9f:28:71:0b:70:96:
e0:e7:74:19:33:e1:1b:4c:3a:f6:44:26:20:30:f5:7d:53:0c:
49:99:e3:cb:5a:d4:f7:2a:f9:5b:67:a2:82:57:ea:24:b7:75:
23:24:60:aa:38:49:50:d6:e4:64:9d:71:aa:59:80:4f:f2:92:
e9:59:8c:9b:41:20:1b:a5:14:e7:7d:62:7a:0b:a6:9d:d8:45:
e8:f7:c2:43:c5:a0:d4:09:94:06:47:dd:27:e2:3f:1c:cf:5f:
fd:9a:29:54:27:e6:30:6e:35:b3:94:4d:d6:71:52:e4:f5:75:
fd:7b:10:db:46:63:4b:3d:ee:39:c8:81:46:70:78:fd:c4:5b:
4d:79:66:e9:d4:a7:86:3c:4d:11:6f:22:39:88:c1:90:d5:d0:
6b:f9:b2:43:72:11:d3:5a:fb:b3:19:2b:94:06:8f:9a:b0:ba:
98:97:64:c0:93:cb:7b:ea:76:e5:cf:ab:92:7b:e5:58:44:64:
06:ef:fb:3d:a3:e0:cc:bd:5c:4d:9b:1d:3e:42:d2:b0:94:44:
c2:e9:29:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:48 2024 by rpki-client on console-ams.rpki-client.org