Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/3131362e3230362e3231352e302f32342d3234203d3e203539323832.roa
File: 3131362e3230362e3231352e302f32342d3234203d3e203539323832.roa (raw, json)
Hash identifier: EISYTT21TyJ/vMDWS8LRJg3Gsz81ePpEzXl5vquu9B0=
Subject key identifier: EC:3F:96:73:81:87:EF:D7:28:A8:E1:8E:EE:C1:3E:93:CC:2B:06:AE
Certificate issuer: /CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Certificate serial: 63B4267980E6E0AD01CA984EF8E48FB556081F80
Authority key identifier: 63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/3131362e3230362e3231352e302f32342d3234203d3e203539323832.roa
Signing time: Sun 28 Aug 2022 23:06:14 +0000
ROA not before: Sun 28 Aug 2022 23:01:14 +0000
ROA not after: Sun 27 Aug 2023 23:06:14 +0000
asID: 59282
IP address blocks: 116.206.215.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
63:b4:26:79:80:e6:e0:ad:01:ca:98:4e:f8:e4:8f:b5:56:08:1f:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=639473CD2054A78B39F9AC7A83232462F00E71AA
Validity
Not Before: Aug 28 23:01:14 2022 GMT
Not After : Aug 27 23:06:14 2023 GMT
Subject: CN=EC3F96738187EFD728A8E18EEEC13E93CC2B06AE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:ed:04:64:b7:7d:cd:57:28:55:fc:5c:9d:a4:
9b:69:34:ee:32:22:1e:e2:2f:ff:58:0f:d1:3d:c1:
f3:43:ef:72:0d:18:53:48:7d:9d:fc:bb:48:6c:1c:
38:82:10:0c:0a:e9:01:ca:3c:a8:33:c6:70:cb:37:
da:bf:86:25:89:e7:a3:9d:19:df:93:4c:92:12:2a:
78:b2:84:83:9b:30:ef:90:b7:07:ea:ea:b2:9d:5b:
9f:53:41:e0:68:b6:98:5d:e7:3a:a0:ae:b1:3b:25:
1a:88:b0:24:6c:16:b7:a7:a2:26:22:82:8f:1d:ed:
d1:4d:29:d3:d7:a7:77:1f:0d:91:d1:ce:88:ef:a9:
3c:44:5d:c2:1c:2f:ee:a3:31:b5:4f:de:a4:da:bd:
53:d3:c3:3d:6b:84:8d:49:98:bb:ab:80:b0:91:10:
76:c6:a2:7b:81:e9:c8:bd:c6:a5:a5:e3:08:29:14:
e8:5b:22:42:96:61:79:3b:9c:84:e0:29:79:0e:82:
e7:c4:df:5c:23:25:bc:d0:f3:b3:eb:fb:5c:67:4c:
fa:ff:56:2a:dd:07:d1:55:c2:62:28:1d:20:97:81:
eb:be:8a:b1:34:78:90:7a:ca:17:f6:7a:34:e5:64:
c1:d6:14:33:cc:f3:91:b4:20:67:1e:b9:25:4b:63:
ed:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:3F:96:73:81:87:EF:D7:28:A8:E1:8E:EE:C1:3E:93:CC:2B:06:AE
X509v3 Authority Key Identifier:
keyid:63:94:73:CD:20:54:A7:8B:39:F9:AC:7A:83:23:24:62:F0:0E:71:AA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/639473CD2054A78B39F9AC7A83232462F00E71AA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/639473CD2054A78B39F9AC7A83232462F00E71AA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a8464a5b-2fce-47da-8047-68d2bd63c9c3/0/3131362e3230362e3231352e302f32342d3234203d3e203539323832.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
116.206.215.0/24
Signature Algorithm: sha256WithRSAEncryption
9e:bf:be:a7:36:05:d9:ce:e5:2f:c3:9f:6a:dd:24:63:2e:48:
76:54:cf:d3:cc:b2:81:4a:54:d1:2e:90:53:52:c2:d5:e3:04:
bb:af:b4:f6:81:13:11:f3:5b:71:d0:7f:3b:e5:90:32:ef:11:
c8:b5:af:e1:71:f5:93:8c:42:dd:b9:d1:90:bf:58:0d:90:d1:
63:e9:b8:60:f7:36:c6:9d:67:96:43:18:dd:15:98:39:d1:c1:
ac:f4:5d:ab:03:92:e0:63:21:27:6e:3d:94:5d:5f:5c:38:79:
62:9d:3e:4a:82:00:90:30:9e:e2:71:df:78:2d:bb:10:e3:54:
1d:b1:08:7f:58:f1:e2:1e:a4:ba:07:bc:30:68:ca:90:a5:e8:
9a:44:42:ba:4a:28:6f:65:69:16:3e:9a:bd:8b:a6:7d:e0:ad:
e6:02:e4:08:cc:09:13:f9:81:66:29:b4:a4:d1:ec:50:74:75:
3f:44:69:03:b3:96:6c:34:ff:40:e8:70:54:94:bd:8b:fd:a6:
7e:fa:c6:71:52:16:e4:12:91:58:24:ae:68:d3:b7:ce:d9:5f:
bc:26:bd:4b:70:b0:b8:52:04:56:ed:9d:cb:00:37:ce:da:36:
10:c0:fe:36:65:d8:c0:54:20:52:47:22:3a:d0:01:fc:93:fe:
42:31:4d:fc
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUY7QmeYDm4K0ByphO+OSPtVYIH4AwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJG
MDBFNzFBQTAeFw0yMjA4MjgyMzAxMTRaFw0yMzA4MjcyMzA2MTRaMDMxMTAvBgNV
BAMTKEVDM0Y5NjczODE4N0VGRDcyOEE4RTE4RUVFQzEzRTkzQ0MyQjA2QUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDM7QRkt33NVyhV/FydpJtpNO4y
Ih7iL/9YD9E9wfND73INGFNIfZ38u0hsHDiCEAwK6QHKPKgzxnDLN9q/hiWJ56Od
Gd+TTJISKniyhIObMO+Qtwfq6rKdW59TQeBotphd5zqgrrE7JRqIsCRsFrenoiYi
go8d7dFNKdPXp3cfDZHRzojvqTxEXcIcL+6jMbVP3qTavVPTwz1rhI1JmLurgLCR
EHbGonuB6ci9xqWl4wgpFOhbIkKWYXk7nITgKXkOgufE31wjJbzQ87Pr+1xnTPr/
VirdB9FVwmIoHSCXgeu+irE0eJB6yhf2ejTlZMHWFDPM85G0IGceuSVLY+31AgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQU7D+Wc4GH79coqOGO7sE+k8wrBq4wHwYDVR0j
BBgwFoAUY5RzzSBUp4s5+ax6gyMkYvAOcaowDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9h
ODQ2NGE1Yi0yZmNlLTQ3ZGEtODA0Ny02OGQyYmQ2M2M5YzMvMC82Mzk0NzNDRDIw
NTRBNzhCMzlGOUFDN0E4MzIzMjQ2MkYwMEU3MUFBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjM5NDczQ0QyMDU0QTc4QjM5RjlBQzdBODMyMzI0NjJGMDBF
NzFBQS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2E4NDY0YTViLTJmY2UtNDdkYS04
MDQ3LTY4ZDJiZDYzYzljMy8wLzMxMzEzNjJlMzIzMDM2MmUzMjMxMzUyZTMwMmYz
MjM0MmQzMjM0MjAzZDNlMjAzNTM5MzIzODMyLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAdM7XMA0GCSqG
SIb3DQEBCwUAA4IBAQCev76nNgXZzuUvw59q3SRjLkh2VM/TzLKBSlTRLpBTUsLV
4wS7r7T2gRMR81tx0H875ZAy7xHIta/hcfWTjELdudGQv1gNkNFj6bhg9zbGnWeW
QxjdFZg50cGs9F2rA5LgYyEnbj2UXV9cOHlinT5KggCQMJ7icd94LbsQ41QdsQh/
WPHiHqS6B7wwaMqQpeiaREK6SihvZWkWPpq9i6Z94K3mAuQIzAkT+YFmKbSk0exQ
dHU/RGkDs5ZsNP9A6HBUlL2L/aZ++sZxUhbkEpFYJK5o07fO2V+8Jr1LcLC4UgRW
7Z3LADfO2jYQwP42ZdjAVCBSRyI60AH8k/5CMU38
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:13 2024 by rpki-client on console-fra.rpki-client.org