Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/3131362e3230362e3231322e302f32322d3232203d3e203539323832.roa
File: 3131362e3230362e3231322e302f32322d3232203d3e203539323832.roa (raw, json)
Hash identifier: 54n+5kfjzuxlzX+foBRNM5vhKfqA1YPo6KOr5M+yyaM=
Subject key identifier: AE:3C:42:55:98:53:AD:4E:4C:9B:D2:9E:76:53:D4:F9:D0:C2:86:AC
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 296586AC0557CAE72E8FAE433ABD68D53700CEFF
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/3131362e3230362e3231322e302f32322d3232203d3e203539323832.roa
Signing time: Mon 26 Sep 2022 07:00:03 +0000
ROA not before: Mon 26 Sep 2022 06:55:03 +0000
ROA not after: Mon 25 Sep 2023 07:00:03 +0000
asID: 59282
IP address blocks: 116.206.212.0/22 maxlen: 22
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
29:65:86:ac:05:57:ca:e7:2e:8f:ae:43:3a:bd:68:d5:37:00:ce:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Sep 26 06:55:03 2022 GMT
Not After : Sep 25 07:00:03 2023 GMT
Subject: CN=AE3C42559853AD4E4C9BD29E7653D4F9D0C286AC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:46:64:be:74:95:a7:1d:80:03:21:8d:44:5b:
c2:33:93:65:42:80:90:b9:4f:24:3e:59:e0:22:ae:
9b:57:de:59:e9:68:b7:67:4f:48:34:bc:70:bd:25:
34:0d:7e:17:ab:d9:e8:fe:d0:6c:07:28:59:77:f4:
95:83:ee:03:4f:f3:63:71:2a:b1:6e:33:54:10:19:
ea:42:62:44:e2:96:a7:90:4e:63:a2:d5:fc:85:fb:
1a:e0:63:69:7f:7f:84:b2:73:06:26:1b:d7:ac:fb:
84:47:94:bb:32:e1:06:16:d1:39:cc:db:82:95:02:
6f:0e:1a:04:54:07:bc:19:93:d2:67:e4:ea:68:ee:
33:c5:16:26:f2:bb:b9:d3:56:ee:ad:43:a4:6d:57:
f2:f8:5f:32:fc:6c:8d:84:9d:01:3d:da:5c:aa:20:
e0:92:48:75:30:71:8b:67:3a:e5:1a:7e:c6:17:9c:
4f:7c:80:e1:ec:5c:39:55:33:b7:95:3c:b3:3d:98:
d5:15:ff:bf:15:f3:1b:23:d3:f7:63:1d:f5:64:bb:
3e:24:a2:33:d9:d2:aa:53:09:da:8a:46:60:30:bf:
15:48:fd:71:ba:5f:81:7f:37:ea:b2:65:ab:4d:06:
e4:2b:23:b6:d4:a4:22:93:ab:f1:c6:e3:de:a6:4a:
0c:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:3C:42:55:98:53:AD:4E:4C:9B:D2:9E:76:53:D4:F9:D0:C2:86:AC
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/3131362e3230362e3231322e302f32322d3232203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
116.206.212.0/22
Signature Algorithm: sha256WithRSAEncryption
54:29:c4:84:ec:b6:68:40:67:b6:36:07:30:a0:33:a5:d4:09:
ac:4f:d1:0a:92:09:dc:51:52:b4:df:7f:a3:d6:9a:fb:4a:f0:
eb:fb:46:a7:c8:37:3b:57:81:9c:60:ad:df:a9:e9:ef:41:67:
2a:3c:ef:f3:2c:d8:2c:45:6d:37:0b:0a:d3:ec:bd:05:7c:78:
23:af:a8:38:e9:48:53:6b:3a:54:03:aa:74:f7:70:ac:10:c3:
e8:c0:78:6b:16:5f:b5:67:cb:1b:75:ce:01:ca:06:29:b2:34:
52:54:d1:b6:0a:f6:0e:37:7d:3e:b6:2a:5b:2a:2f:d6:0b:d7:
22:8f:b9:2e:d5:de:e4:8d:7a:ea:9e:81:6a:16:23:d9:05:41:
b6:92:90:7c:84:07:4f:c1:dc:05:c2:af:3b:66:80:64:ec:38:
a4:23:01:ce:b2:ee:1d:d6:00:1e:1f:3e:ed:27:54:29:6b:09:
41:45:a0:dc:8e:1c:f8:4d:a0:17:96:87:0a:25:64:21:af:54:
36:e9:18:10:aa:93:de:b6:78:1a:b4:d3:78:09:1d:44:84:89:
eb:10:13:7f:cb:ef:c0:c7:b5:24:85:96:4a:b9:59:ec:77:9b:
e2:89:21:e9:8e:b0:f6:c0:67:a3:30:c4:fd:79:e5:22:ce:c3:
af:be:0f:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:13 2024 by rpki-client on console-fra.rpki-client.org