Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/AS131713.roa
File: AS131713.roa (raw, json)
Hash identifier: Hht6foRV87ly6aS+FyGJG+PcYh10GJ9l75i+MozwGY4=
Subject key identifier: 7C:8C:26:6A:74:40:E8:AC:40:6F:08:1F:7F:3B:7B:50:B3:A8:57:29
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 117B9CEA75CF11D7D20CBF886AB3497D7E5FA356
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS131713.roa
Signing time: Thu 11 Aug 2022 08:06:06 +0000
ROA not before: Thu 11 Aug 2022 08:01:06 +0000
ROA not after: Thu 10 Aug 2023 08:06:06 +0000
asID: 131713
IP address blocks: 2001:df3:2980::/48 maxlen: 48
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
11:7b:9c:ea:75:cf:11:d7:d2:0c:bf:88:6a:b3:49:7d:7e:5f:a3:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Aug 11 08:01:06 2022 GMT
Not After : Aug 10 08:06:06 2023 GMT
Subject: CN=7C8C266A7440E8AC406F081F7F3B7B50B3A85729
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:f8:d8:f8:15:34:27:94:7a:1b:27:72:04:28:
d1:0b:14:3d:37:99:49:c4:6e:b1:42:af:0e:99:39:
29:a7:f8:1b:6d:75:b4:79:c5:17:62:de:94:d9:59:
a7:03:ee:a7:14:e7:ba:f0:c2:90:9b:b9:b5:27:5b:
68:ad:45:4b:cc:50:2d:87:31:da:8e:5a:c7:fd:03:
4a:6e:26:bd:f7:16:6a:a7:b2:17:0e:15:dd:61:f5:
d9:d7:fe:91:d4:2b:01:07:ab:29:ff:d9:f7:d9:f2:
5c:9d:b8:81:28:50:3e:2a:e7:b8:aa:e5:5c:e1:f9:
8a:1e:67:92:c6:9a:d0:2a:68:df:ec:bb:13:c0:df:
50:a5:73:26:7e:e4:16:ce:90:d3:12:12:b2:2f:1d:
fd:15:0a:ff:c7:93:3e:d5:c8:cd:d4:a6:74:78:e8:
bf:07:75:41:ae:de:7f:47:21:b8:f8:8a:42:25:e7:
c6:7a:26:e8:35:43:26:e8:56:84:3e:f6:25:42:ad:
30:29:49:bb:55:44:5b:35:b2:15:88:9e:2c:00:7b:
f3:44:b4:97:3b:d6:d7:36:a0:38:3a:a8:b1:5a:9c:
b2:11:77:e9:b7:43:24:7d:8e:f3:85:2d:9e:0b:f1:
19:2c:f2:2a:0e:d1:a5:16:2d:5a:96:b4:95:40:4f:
73:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:8C:26:6A:74:40:E8:AC:40:6F:08:1F:7F:3B:7B:50:B3:A8:57:29
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/AS131713.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:df3:2980::/48
Signature Algorithm: sha256WithRSAEncryption
16:78:86:26:86:2d:fa:96:43:6f:82:fc:49:55:8a:33:a8:2b:
82:a0:0f:80:9a:83:ef:12:51:78:86:c6:f9:e6:92:90:fb:da:
6e:98:a3:6f:c8:eb:4a:9e:0e:da:4b:ba:0d:26:3d:46:50:dd:
5f:97:f3:ec:4c:8f:c1:75:53:04:6e:24:c4:ab:5f:7e:7c:0f:
e5:00:cc:77:b0:7d:8b:2d:1a:2e:34:5e:52:91:fd:68:33:a6:
ca:83:c2:15:26:cb:9e:9d:ac:5d:54:82:b7:63:72:65:32:a9:
1c:a1:55:d9:ca:fe:72:c6:2c:18:5a:6b:75:91:42:2a:42:21:
da:44:07:74:fa:26:a0:5f:63:f6:3f:3f:57:c4:c3:a8:d4:cb:
6f:37:0d:89:5c:32:30:2d:32:c2:ee:2f:72:5f:04:70:c2:48:
91:19:a2:fd:d1:47:cd:e2:fe:8a:04:ef:9a:76:a0:44:c7:a3:
ee:be:ac:ed:10:97:45:59:a9:63:22:63:73:9b:f7:57:a6:77:
9a:92:90:b6:a3:61:13:64:2a:5f:bc:94:d9:c6:7d:98:eb:5a:
fe:f1:e9:4d:eb:2e:af:f1:17:38:89:ec:7a:fc:a9:df:ab:0b:
e3:cd:8e:f9:a2:37:da:d4:af:f7:17:03:92:52:22:97:0f:29:
7d:da:e1:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:13 2024 by rpki-client on console-fra.rpki-client.org