Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3230332e31322e32302e302f32332d3234203d3e2030.roa
File: 3230332e31322e32302e302f32332d3234203d3e2030.roa (raw, json)
Hash identifier: jlIrc7YNKlGaWPXbP6udUyiTgRmNlGjC1Rv16yHyiW4=
Subject key identifier: 8F:E2:DF:B4:DA:EA:41:10:8A:8C:59:82:D3:06:F6:F1:E4:12:DC:D8
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 73A80220ADD235786CD230ED4B2B57AD4472629F
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3230332e31322e32302e302f32332d3234203d3e2030.roa
Signing time: Mon 31 Jan 2022 03:46:03 +0000
ROA not before: Mon 31 Jan 2022 03:41:03 +0000
ROA not after: Tue 31 Jan 2023 03:46:03 +0000
asID: 0
IP address blocks: 203.12.20.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:a8:02:20:ad:d2:35:78:6c:d2:30:ed:4b:2b:57:ad:44:72:62:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Jan 31 03:41:03 2022 GMT
Not After : Jan 31 03:46:03 2023 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:2a:b1:75:cf:34:aa:71:b7:ca:b6:84:39:22:
5d:5a:a3:40:3c:02:a9:c8:07:ea:e7:d3:4f:fb:60:
33:c1:16:75:6b:01:8f:8e:cc:a9:1c:a2:b9:39:cd:
6d:7f:f5:d4:d9:a2:75:3c:da:36:20:3e:22:9f:b3:
32:aa:b4:46:24:5f:55:0c:f4:db:f5:e3:db:f0:59:
fc:4e:c6:9e:e5:04:5d:d8:0b:19:eb:8c:00:f0:09:
51:41:5d:8d:05:ab:50:04:76:b2:ed:b4:4a:14:2c:
87:87:16:af:7c:85:83:bc:ed:90:eb:89:62:75:04:
d2:c7:b7:98:ba:d2:1d:33:6b:e5:fd:8a:92:9d:0c:
dd:d8:6c:2a:85:51:0a:df:9c:e4:b0:a0:9d:ef:00:
e0:ea:c7:05:4e:48:4d:eb:1a:f9:f6:fd:80:8d:d0:
02:bb:cf:f7:49:0c:e2:ec:5a:0d:81:bf:67:96:57:
1e:0d:5c:04:b9:d1:05:6b:d6:1b:b3:ec:49:bc:6f:
e7:b0:a3:00:76:36:4d:05:d4:82:e5:eb:54:e7:b4:
82:21:98:7f:e8:a6:2b:df:fa:e7:88:5b:05:f2:08:
c9:1b:04:9a:dd:0c:ed:5f:45:ec:e8:fc:25:22:3f:
eb:cf:5c:27:60:2f:38:54:98:a8:27:f0:d6:e5:35:
65:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:E2:DF:B4:DA:EA:41:10:8A:8C:59:82:D3:06:F6:F1:E4:12:DC:D8
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3230332e31322e32302e302f32332d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.12.20.0/23
Signature Algorithm: sha256WithRSAEncryption
67:9d:2b:0f:3c:7e:57:ab:b8:2f:71:06:8e:67:91:2e:c7:ad:
06:c6:86:3c:fc:cf:1c:bd:2d:bb:16:b8:60:68:d9:ae:d2:f8:
2b:81:24:da:f2:19:80:d1:8b:35:fa:74:80:76:7f:74:64:52:
85:1f:3c:bc:eb:23:a4:db:22:4f:83:a4:ea:cc:5b:43:e1:96:
4a:c7:db:3c:91:49:72:36:a1:2e:9a:3a:ac:09:ed:7f:89:f4:
05:15:35:c7:31:2d:28:03:e9:57:da:a5:fd:3f:cc:72:0e:6b:
c1:e1:3e:6f:7e:02:be:4b:77:f8:31:f0:7a:02:1c:18:6e:38:
2f:29:6e:97:17:0f:06:d4:c7:de:8b:c1:b1:f4:72:b9:f4:d2:
d1:27:c3:4d:ed:a4:f2:f0:be:65:fa:62:61:af:40:79:a8:fb:
c5:d1:36:e8:58:13:22:4c:e8:a4:8c:04:5b:f4:3a:e8:7f:ad:
37:99:07:c5:49:3d:c8:0a:32:6b:43:e0:49:4f:f0:e3:7c:33:
72:3a:79:98:31:69:83:a2:21:65:f3:45:40:a3:d1:ff:7f:f7:
70:16:a0:ab:a8:1a:73:06:b5:a0:d1:d8:e0:87:f9:05:f3:46:
54:5a:29:bf:f2:68:18:0f:5d:c4:53:ac:cc:f7:c8:d4:ef:09:
9e:b3:d7:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:12 2024 by rpki-client on console-fra.rpki-client.org