Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/3230332e3137332e39302e302f32332d3234203d3e203338333230.roa
File: 3230332e3137332e39302e302f32332d3234203d3e203338333230.roa (raw, json)
Hash identifier: 6MMIb/NHERnl6ZiGSMQ0m3cwApg47rDWJVk35BXKgJs=
Subject key identifier: F6:E8:5E:08:74:F6:81:CA:5B:BD:AB:D3:AE:52:35:95:08:87:EA:18
Certificate issuer: /CN=C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1
Certificate serial: 239A6E93FDB6829B731D46CB72280E37B97281FF
Authority key identifier: C8:DD:5D:84:FA:FA:BF:7E:AF:62:B3:B0:F4:E4:5A:23:31:F8:02:E1
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/3230332e3137332e39302e302f32332d3234203d3e203338333230.roa
Signing time: Mon 19 Jun 2023 08:00:00 +0000
ROA not before: Mon 19 Jun 2023 07:55:00 +0000
ROA not after: Mon 17 Jun 2024 08:00:00 +0000
asID: 38320
IP address blocks: 203.173.90.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
23:9a:6e:93:fd:b6:82:9b:73:1d:46:cb:72:28:0e:37:b9:72:81:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1
Validity
Not Before: Jun 19 07:55:00 2023 GMT
Not After : Jun 17 08:00:00 2024 GMT
Subject: CN=F6E85E0874F681CA5BBDABD3AE5235950887EA18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:9f:37:ca:02:cb:23:ad:b1:bf:eb:d7:f3:2a:
cb:79:fa:37:49:51:b5:15:f5:57:a9:1a:ee:0d:8a:
da:f8:78:7b:d6:5d:13:30:f5:61:46:e7:cc:bb:84:
ea:62:40:15:41:f1:51:ff:bc:d0:df:0d:0c:61:6b:
f3:86:4c:cf:03:e0:87:d1:48:f8:4c:d9:02:e9:cb:
bd:7e:65:55:75:8b:01:0a:82:ee:ed:84:84:40:5a:
f8:ef:17:c2:52:a6:64:43:09:65:cc:3d:3f:20:32:
13:8e:f6:4a:97:d5:2f:07:24:ac:58:8a:26:f9:d1:
b8:0a:36:b3:9e:b5:fb:79:6c:37:af:e4:4e:c6:0a:
e6:96:a8:d2:d5:09:00:a9:af:06:53:cc:d5:cb:b9:
dc:6b:03:14:ab:0f:6f:85:a9:cb:52:30:ba:38:44:
b6:78:a2:bb:4f:da:ec:e8:ce:f1:fe:ae:d5:76:77:
78:a7:a7:bb:a2:44:c5:7c:87:61:df:ba:67:a0:90:
10:f8:1e:40:f7:98:fb:de:47:dd:48:87:93:08:b4:
c7:7b:6e:29:54:ca:a6:8c:39:8d:57:8c:7d:93:56:
ae:1b:d1:f0:c5:c3:18:79:e6:1c:e7:bc:c1:42:7c:
b7:36:1a:cd:54:13:49:f6:94:65:b0:1d:58:75:c4:
26:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:E8:5E:08:74:F6:81:CA:5B:BD:AB:D3:AE:52:35:95:08:87:EA:18
X509v3 Authority Key Identifier:
keyid:C8:DD:5D:84:FA:FA:BF:7E:AF:62:B3:B0:F4:E4:5A:23:31:F8:02:E1
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/C8DD5D84FAFABF7EAF62B3B0F4E45A2331F802E1.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/a945b86e-0895-4759-a77c-a06ce14e243c/0/3230332e3137332e39302e302f32332d3234203d3e203338333230.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.173.90.0/23
Signature Algorithm: sha256WithRSAEncryption
47:74:80:6e:37:68:ac:8c:54:3d:d3:f6:fa:38:94:a1:f8:e9:
c0:ee:8d:c0:3c:eb:1d:bb:7a:ac:f9:35:4f:cd:ca:fe:9f:bc:
0f:45:8c:3e:39:b4:75:08:e8:79:4c:6c:0b:57:36:38:49:eb:
a3:c8:fb:a9:3e:c7:47:2d:e3:b9:a7:a2:a9:5d:eb:83:3c:b0:
43:64:1e:24:dd:20:74:43:d1:17:f9:71:69:f8:94:d9:6b:0a:
6d:91:dc:fd:0e:c4:b1:24:4e:26:39:eb:2a:5e:a7:f8:22:1b:
ed:62:c0:cb:90:86:f1:8d:00:b2:44:13:f4:3d:72:b5:46:02:
40:5e:77:1a:6e:75:c9:68:6a:96:26:d9:f1:aa:b2:b8:c6:1d:
8f:c2:38:fb:ad:1c:43:ee:4e:cc:a6:1b:b0:eb:47:d3:f7:13:
99:e2:48:3e:f0:0b:09:6c:05:25:8c:80:d8:3b:af:e8:aa:be:
4b:7b:39:11:15:76:58:25:c3:2c:76:13:ef:a9:70:71:a8:75:
21:56:53:fb:8c:8b:3c:a8:88:29:4c:13:92:e9:aa:04:02:16:
ec:3c:89:46:2b:67:d7:1b:07:65:c3:0e:f3:5b:da:c6:1c:a0:
9e:2d:12:e4:a3:1f:98:dd:fa:d0:e7:6b:44:fe:7c:bf:41:ad:
60:c8:1a:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Feb 21 11:15:18 2025 by rpki-client