Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/3131362e3230362e3231322e302f32342d3234203d3e203539323832.roa
File: 3131362e3230362e3231322e302f32342d3234203d3e203539323832.roa (raw, json)
Hash identifier: QxUW//Dml9Gd9LN+16w9ytfJu8SgIiPNLPGKyxUQjYE=
Subject key identifier: 64:31:E8:4E:1E:2C:33:F9:7E:4D:21:18:E9:CF:12:DE:B6:4F:9B:F6
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 19D875653D0242970A6CB1D89F424F7DA4D26706
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/3131362e3230362e3231322e302f32342d3234203d3e203539323832.roa
Signing time: Sun 28 Aug 2022 23:06:13 +0000
ROA not before: Sun 28 Aug 2022 23:01:13 +0000
ROA not after: Sun 27 Aug 2023 23:06:13 +0000
asID: 59282
IP address blocks: 116.206.212.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
19:d8:75:65:3d:02:42:97:0a:6c:b1:d8:9f:42:4f:7d:a4:d2:67:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Aug 28 23:01:13 2022 GMT
Not After : Aug 27 23:06:13 2023 GMT
Subject: CN=6431E84E1E2C33F97E4D2118E9CF12DEB64F9BF6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c5:ee:f0:2f:eb:e9:49:b5:19:23:9e:71:55:
4a:4f:9b:55:11:35:da:70:06:af:00:91:5e:46:78:
e0:0e:86:8b:59:55:35:b8:48:72:ad:16:af:d3:41:
85:b5:12:e4:15:49:7b:07:ff:0a:0e:6d:12:4d:ae:
4d:ea:f9:84:5d:a5:18:d3:df:c5:a5:6d:9f:5c:ad:
ae:13:33:2f:e8:d9:31:8d:c7:62:6d:ea:56:35:08:
fb:7a:d6:ed:f4:d6:80:d9:59:bf:46:df:62:c4:d3:
03:e2:8c:88:09:b0:bb:f4:5f:91:33:ee:ca:62:96:
90:f3:61:39:80:2f:de:e8:fe:37:1d:74:5d:6e:a1:
61:f7:9c:15:7d:d8:ba:01:f6:d6:2c:c9:9d:82:c7:
a5:8b:0e:ae:e8:81:94:61:89:f1:7d:9d:7e:93:81:
0e:51:a4:07:7e:b1:f3:e0:fe:7a:1a:01:d3:42:14:
0e:5d:8d:3f:aa:6c:45:c0:51:f5:28:9e:03:16:6d:
25:ce:8c:0c:94:a9:65:4e:4d:1e:1f:fe:4d:06:4d:
e2:40:ac:f1:dc:4f:c0:59:79:0c:ae:05:37:ea:87:
11:f4:59:e0:f6:11:9a:df:00:5c:45:9b:c3:89:2a:
0d:36:c6:18:9f:7f:37:0b:aa:70:ad:b9:0c:a3:10:
a8:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:31:E8:4E:1E:2C:33:F9:7E:4D:21:18:E9:CF:12:DE:B6:4F:9B:F6
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/3131362e3230362e3231322e302f32342d3234203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
116.206.212.0/24
Signature Algorithm: sha256WithRSAEncryption
45:5e:31:dc:b0:1c:b3:91:a9:7d:1d:ae:49:45:a6:95:8d:91:
2c:d2:61:47:35:46:27:2c:bb:3b:48:31:f3:bf:01:18:fa:bd:
30:61:6b:cc:ac:f9:ba:fc:77:f6:24:87:61:ec:07:67:be:01:
1f:a8:fb:81:b4:53:a3:db:af:45:95:a4:82:71:62:66:c5:4d:
9a:ea:b8:e2:14:c7:14:de:ad:42:43:fa:6f:c3:1e:6e:3d:e9:
6a:83:f1:3d:ac:4c:a9:31:3c:d1:7d:7f:74:43:13:a1:e4:c6:
48:73:66:34:ef:88:18:90:5a:71:ec:7d:4c:be:f3:ab:17:5a:
76:4d:6f:d3:67:59:32:07:ea:74:98:25:69:4f:29:a0:53:48:
00:9a:f9:78:b1:a1:16:d2:94:6c:d1:1d:a6:61:ff:8e:04:21:
32:da:64:72:1d:a7:f2:ae:d9:ac:1d:b1:77:17:77:5e:9e:b4:
a1:c1:3d:d3:bc:a7:23:1e:79:3e:c0:0d:1e:5a:72:05:36:9f:
32:e9:16:89:16:b4:6b:fc:0a:c5:1e:bb:c0:37:6b:48:33:33:
13:13:e1:d5:07:17:fb:bf:bc:92:74:68:83:5f:fc:e5:b6:22:
7c:37:f1:bb:da:1f:c9:20:8a:11:df:4c:5f:f8:91:f5:fb:df:
68:1b:a1:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:13 2024 by rpki-client on console-fra.rpki-client.org