Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/323430343a613663303a3a2f33322d3438203d3e2030.roa
File: 323430343a613663303a3a2f33322d3438203d3e2030.roa (raw, json)
Hash identifier: vAJWYvMuAjij0uTgzYRCZtIHBPfHY9xACgF/QYBU1fo=
Subject key identifier: B3:FF:D6:BF:D7:73:AB:2D:9F:6D:2E:24:EE:1F:BB:DC:62:4A:19:36
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 30D852CE411D3F97B25B9D067245F3B6DC9E74A1
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323430343a613663303a3a2f33322d3438203d3e2030.roa
Signing time: Wed 02 Feb 2022 06:31:09 +0000
ROA not before: Wed 02 Feb 2022 06:26:09 +0000
ROA not after: Thu 02 Feb 2023 06:31:09 +0000
asID: 0
IP address blocks: 2404:a6c0::/32 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
30:d8:52:ce:41:1d:3f:97:b2:5b:9d:06:72:45:f3:b6:dc:9e:74:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Feb 2 06:26:09 2022 GMT
Not After : Feb 2 06:31:09 2023 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:f4:6e:6c:2f:67:45:84:f7:c0:6e:6e:82:49:
30:b5:40:60:e1:de:cb:c0:dd:01:2a:96:37:e1:ca:
25:82:fd:35:3b:77:d0:cb:2d:10:56:bc:de:f6:5a:
e7:a7:18:ff:3c:21:ef:e4:8f:46:19:a3:45:13:7e:
41:55:ec:7a:6c:79:44:64:56:3a:91:e2:69:ba:fe:
35:f8:9f:bb:32:bc:e0:cd:aa:40:b1:5c:8c:80:aa:
54:6f:f8:d6:04:de:19:32:52:bc:11:66:3c:70:be:
48:c5:4e:cf:b5:d4:2c:13:b5:89:2c:36:76:0e:08:
b1:a3:7b:90:27:80:f7:ad:ba:5a:7e:93:1a:3a:b8:
d2:67:99:6d:ca:bc:04:91:6e:fb:8d:57:8d:0d:ef:
de:4b:68:51:6b:0e:c6:95:56:37:65:92:bf:71:d4:
3e:76:b9:77:35:91:d6:c3:bc:fd:58:9f:90:fd:ef:
77:2c:21:b5:d6:e1:39:b8:00:dc:7e:15:e0:1d:13:
8f:1c:98:a2:21:45:15:33:37:4f:bb:71:4e:0e:05:
8e:d2:81:34:a9:79:8c:c7:dc:f8:b1:10:eb:fc:ae:
8b:3f:81:ff:df:6a:aa:b3:e5:93:57:6a:53:59:8c:
a1:d4:77:6e:48:a1:8a:1d:f4:d1:a9:6b:3e:c9:54:
78:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:FF:D6:BF:D7:73:AB:2D:9F:6D:2E:24:EE:1F:BB:DC:62:4A:19:36
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/323430343a613663303a3a2f33322d3438203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2404:a6c0::/32
Signature Algorithm: sha256WithRSAEncryption
43:0a:b3:db:0e:f6:44:79:c5:55:5f:74:c3:3e:1a:6f:0f:64:
e0:60:5d:8b:58:80:42:3b:a9:2b:10:fd:47:7f:54:84:6d:ae:
81:cb:6e:59:6c:02:bc:7f:00:4d:55:8e:f3:95:2f:7a:e0:b3:
71:42:f8:6a:b1:15:46:6d:c6:05:7c:99:97:07:58:58:a9:42:
cb:ef:aa:25:3e:5c:ab:e9:f6:d8:5f:12:e0:20:2d:9f:da:ad:
5d:99:0b:a9:50:fb:b2:da:ca:58:69:e7:5b:5f:5e:cf:51:b9:
71:a0:19:7a:58:ed:09:a3:08:c3:86:6f:09:73:31:fe:c6:c4:
f9:99:db:41:34:53:70:58:df:1b:06:83:2a:d5:58:53:00:8e:
2f:67:ac:ab:60:b8:d9:f8:65:9f:ea:44:6f:4d:94:51:8d:35:
77:01:2d:4b:0a:1f:41:14:59:ab:42:b3:8e:94:40:d7:23:02:
e0:c1:93:c0:b5:20:06:da:85:85:47:82:6e:74:f2:64:8a:9b:
81:cb:5f:df:13:71:b4:3e:78:da:d6:ae:f0:28:6c:e1:13:eb:
ed:8b:b9:5d:51:90:7e:65:95:cf:ee:a3:03:72:36:85:95:b3:
d8:66:61:1a:2b:90:65:a3:ba:ca:34:ac:19:6b:75:11:e1:cf:
ba:e3:0f:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:49 2024 by rpki-client on console-ams.rpki-client.org