Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/34332e3234352e3138302e302f32322d3234203d3e2030.roa
File: 34332e3234352e3138302e302f32322d3234203d3e2030.roa (raw, json)
Hash identifier: Gp3dBATh17NvoNXE4MAigcf8sQv4IW+UxawIRBp/ucM=
Subject key identifier: 40:D9:45:62:9A:B8:D0:F5:BB:D4:75:FC:DE:15:A2:7D:A9:5B:45:A6
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 3838B552EBFAC25EB0D52B305DC77B265F3421C9
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34332e3234352e3138302e302f32322d3234203d3e2030.roa
Signing time: Wed 02 Feb 2022 06:20:13 +0000
ROA not before: Wed 02 Feb 2022 06:15:13 +0000
ROA not after: Thu 02 Feb 2023 06:20:13 +0000
asID: 0
IP address blocks: 43.245.180.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
38:38:b5:52:eb:fa:c2:5e:b0:d5:2b:30:5d:c7:7b:26:5f:34:21:c9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Feb 2 06:15:13 2022 GMT
Not After : Feb 2 06:20:13 2023 GMT
Subject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
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:72:2d:5a:69:d7:fb:0b:00:9b:2a:63:9b:1f:
44:b9:0c:be:99:31:09:2c:00:86:df:7a:c6:57:c2:
74:5d:0d:df:75:50:8e:a4:21:9a:f5:70:93:55:c4:
45:1a:37:bb:dd:e2:07:20:cf:4d:e3:8a:c4:f8:e2:
99:2b:a0:5d:15:da:cc:0c:48:7f:ec:8a:fb:04:53:
46:1d:ae:cb:d1:72:e0:7e:22:72:b7:34:36:78:a1:
31:21:74:bf:0f:63:f1:5f:c0:47:ae:b8:2b:1d:39:
5a:fd:b4:92:0b:b5:d3:93:83:4d:86:0d:c2:a5:be:
ce:d0:fe:6c:73:07:c8:be:d7:72:70:79:bc:93:66:
75:5e:66:8c:a7:52:6f:76:68:70:12:c5:d0:e6:29:
d7:60:02:78:43:2f:24:47:3c:af:8c:23:1a:91:4a:
4f:43:42:5d:ff:c4:e6:c5:f0:7a:a3:51:62:3a:7d:
5a:9b:60:81:75:71:fc:39:7d:36:46:bc:13:3a:61:
30:89:ed:56:05:7a:bf:45:db:a6:4a:64:90:0f:b1:
3d:42:29:18:0b:78:7e:5f:23:12:ea:b7:fd:21:48:
67:e5:55:f3:e2:7e:70:53:43:99:ab:96:8b:f2:5a:
ec:e7:6c:00:19:e1:91:f5:56:9b:54:da:77:02:0d:
95:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:D9:45:62:9A:B8:D0:F5:BB:D4:75:FC:DE:15:A2:7D:A9:5B:45:A6
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/34332e3234352e3138302e302f32322d3234203d3e2030.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.245.180.0/22
Signature Algorithm: sha256WithRSAEncryption
26:e0:dc:31:39:6f:7f:de:1b:e7:54:c3:2d:97:22:95:0a:f2:
01:13:bb:87:4f:e6:66:57:a8:da:26:a5:e9:bf:7c:8a:2c:88:
88:ba:44:7a:f6:0c:f8:e2:f3:ae:96:43:13:fd:3d:13:1d:f2:
34:f7:3b:ec:bb:b0:48:d3:f6:06:37:b3:23:73:08:34:bc:ca:
f1:9e:0e:a8:ca:1c:9e:96:a9:a0:61:d6:c0:c7:1b:51:1e:f1:
b8:ae:ba:1c:b5:19:ab:7a:4e:49:2e:9c:25:46:82:ec:82:9c:
fc:2b:a2:78:35:f5:38:ba:00:86:32:32:c1:75:86:f3:da:0b:
14:73:65:a4:9c:45:59:01:11:b5:c5:fe:85:ea:bf:9b:5e:62:
95:80:35:2a:26:d9:c8:2b:6c:5f:74:f8:4d:62:2d:fb:5f:36:
58:27:ac:36:62:ef:a7:fe:45:12:7f:a9:38:0b:87:c3:06:30:
ea:10:b5:bf:7f:6f:98:ea:c7:e4:9f:07:74:db:2c:a5:b8:96:
68:c3:cc:5c:7a:a9:72:2b:8e:01:1d:2b:dc:44:1f:90:1e:d9:
e1:6b:9e:2d:40:bf:76:fc:28:5d:99:22:26:81:3d:34:60:40:
07:35:ca:11:3b:45:8b:46:04:15:96:b7:8c:18:e0:6f:37:60:
4f:b9:26:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:49 2024 by rpki-client on console-ams.rpki-client.org