Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3230322e38302e3231322e302f32332d3234203d3e203137363730.roa
File: 3230322e38302e3231322e302f32332d3234203d3e203137363730.roa (raw, json)
Hash identifier: ZBDD3lWIofNYKoIGWX8XFHBTleXVLbbJRAo0nHy3lEA=
Subject key identifier: 30:C5:41:B8:64:18:3B:CD:C3:0E:A2:AA:35:80:F8:A4:1F:F0:77:3D
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 28F3E889F83666D823E2C82BDE97A39974FB8519
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3230322e38302e3231322e302f32332d3234203d3e203137363730.roa
Signing time: Fri 07 May 2021 11:21:02 +0000
ROA not before: Fri 07 May 2021 11:16:02 +0000
ROA not after: Sat 07 May 2022 11:21:02 +0000
asID: 17670
IP address blocks: 202.80.212.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
28:f3:e8:89:f8:36:66:d8:23:e2:c8:2b:de:97:a3:99:74:fb:85:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: May 7 11:16:02 2021 GMT
Not After : May 7 11:21:02 2022 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:49:b6:dd:28:f4:b9:1d:99:7e:dd:1d:79:e3:
1a:c8:66:eb:85:b4:63:e1:45:a0:55:73:9e:89:fe:
54:d2:71:b5:c4:d6:f1:f4:4f:9e:80:18:29:1a:a6:
ca:5e:e9:2e:8f:da:1b:ba:0f:80:90:ad:49:fe:ec:
24:6b:49:0a:4f:0c:a5:4c:a1:63:c0:90:2d:be:c4:
37:fa:96:a0:74:a5:6d:ce:58:d9:f2:4a:62:3d:b5:
4b:69:35:93:00:1b:67:a6:7e:ed:a2:6b:bb:35:a8:
12:bc:25:3b:1d:c0:90:49:4e:2e:57:60:0f:e5:18:
b9:d2:31:c8:cf:22:fb:26:40:0d:3f:4a:e2:67:99:
fe:a7:e9:e9:3b:6c:59:9f:db:5c:0e:b4:e3:3f:39:
6c:d4:86:60:48:1d:9b:d5:2e:7f:f6:74:da:8f:6c:
78:e0:48:89:17:20:ff:e5:a5:05:75:9c:78:53:cf:
92:e6:1d:8c:cb:aa:f7:89:25:8e:96:20:9f:95:b4:
2b:04:46:f1:39:d9:04:35:b4:45:68:b5:82:ba:15:
f5:cf:1f:69:ba:5b:21:c3:b7:a7:4f:3b:29:08:3b:
ac:42:10:da:1b:c9:46:39:c0:45:cf:b6:6b:d1:77:
0b:25:b5:30:69:c1:6b:3e:d4:26:38:4c:47:3b:b7:
49:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:C5:41:B8:64:18:3B:CD:C3:0E:A2:AA:35:80:F8:A4:1F:F0:77:3D
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3230322e38302e3231322e302f32332d3234203d3e203137363730.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.80.212.0/23
Signature Algorithm: sha256WithRSAEncryption
04:a3:7e:08:dd:76:66:0f:1d:10:55:16:89:f3:ab:6b:e4:20:
b8:cb:9d:7d:8f:4f:75:06:5e:ff:12:10:55:86:a3:1d:9c:cd:
a3:57:67:95:90:23:a0:e4:c3:d4:95:f1:f8:bb:bb:7d:d0:42:
de:0f:51:9d:95:08:10:c0:52:a2:56:87:61:22:c7:67:a0:aa:
fd:a5:b8:97:1d:98:96:5f:6e:88:1d:9c:a9:f5:d8:5b:f4:52:
c4:ec:d9:af:17:70:97:f0:06:ea:de:0d:06:81:ab:4b:2a:5c:
58:05:59:7c:76:57:3c:3c:21:25:7a:d0:76:12:78:c4:f0:c4:
f9:7b:28:72:99:b0:f5:98:b5:54:7c:38:55:d0:73:3b:0d:b5:
69:7e:6e:57:bf:b9:b9:22:32:3b:c3:8a:f6:2a:ce:61:22:29:
4c:de:37:65:7f:99:ec:ac:ef:d8:4d:38:b4:95:44:52:2e:d0:
e0:b4:71:a9:e1:bf:1c:10:24:50:8c:af:99:09:3f:52:06:e4:
c4:6f:bf:0f:fe:f6:f5:35:b1:39:69:47:4f:2e:f1:a1:b7:34:
af:96:5d:4d:1e:77:e2:26:d9:a5:69:4d:d7:2c:6d:c5:97:ea:
c9:cb:05:82:bc:66:d5:a7:56:32:11:4c:dd:06:66:90:a3:f9:
63:28:cc:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:12 2024 by rpki-client on console-fra.rpki-client.org