Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/3131382e3135312e3232302e302f32332d3233203d3e203436303332.roa
File: 3131382e3135312e3232302e302f32332d3233203d3e203436303332.roa (raw, json)
Hash identifier: C5WxUgo2BQtQ4XrK2zepZsxIh+Zfr7eKizb+sP/P8zA=
Subject key identifier: 28:13:95:A8:4B:09:DB:0F:3D:9C:F0:FE:17:AF:FA:0F:60:BF:06:6D
Certificate issuer: /CN=F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8
Certificate serial: 77CCD168CAB7B126A1C3DAA3B087572A2295F96A
Authority key identifier: F1:B7:1C:4F:9F:FB:EC:16:8C:86:45:DF:F7:9B:A9:06:BE:B2:3F:E8
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/3131382e3135312e3232302e302f32332d3233203d3e203436303332.roa
Signing time: Sun 28 Aug 2022 23:04:31 +0000
ROA not before: Sun 28 Aug 2022 22:59:31 +0000
ROA not after: Sun 27 Aug 2023 23:04:31 +0000
asID: 46032
IP address blocks: 118.151.220.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
77:cc:d1:68:ca:b7:b1:26:a1:c3:da:a3:b0:87:57:2a:22:95:f9:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8
Validity
Not Before: Aug 28 22:59:31 2022 GMT
Not After : Aug 27 23:04:31 2023 GMT
Subject: CN=281395A84B09DB0F3D9CF0FE17AFFA0F60BF066D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:ec:0f:f2:fe:0f:71:7d:97:5b:91:08:e2:07:
1f:b4:ee:3b:fd:d7:57:3b:27:d2:07:40:32:3c:95:
76:2f:59:af:3d:9c:19:b1:dc:52:aa:b4:9d:9d:3f:
bd:32:4f:62:18:95:27:12:6a:27:87:00:80:2c:e8:
d9:23:cb:9c:3d:b8:64:c2:1a:dd:30:dd:f7:05:7e:
ba:d7:16:ba:13:c9:12:3b:9d:3e:9a:c7:5f:e1:42:
76:90:f3:f4:73:bd:1f:0b:b2:6b:d9:bd:7f:64:c7:
0d:9e:43:30:6d:59:d3:2e:0a:12:3d:c7:21:a1:03:
9b:65:e8:c8:56:b2:28:86:98:fd:22:cd:d7:29:9a:
a9:34:ea:1a:14:8e:5c:28:82:23:ec:c8:2a:c7:d2:
94:fb:70:3f:a0:aa:8f:8a:2d:b9:5f:53:cd:49:69:
69:b9:2f:52:5a:9c:5e:26:7f:3c:76:36:96:36:7e:
19:04:1c:03:ec:b7:c0:d1:78:5d:03:da:c7:3a:4f:
96:a4:ae:88:48:86:31:7c:da:6d:48:01:59:ee:e7:
e2:4f:b9:78:14:c3:52:2c:df:ec:b9:1d:f6:78:b1:
99:5e:c2:45:b6:9a:da:c3:6b:72:04:37:24:67:9a:
80:2e:f9:61:3a:1a:55:57:11:8c:10:e0:20:af:13:
5f:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:13:95:A8:4B:09:DB:0F:3D:9C:F0:FE:17:AF:FA:0F:60:BF:06:6D
X509v3 Authority Key Identifier:
keyid:F1:B7:1C:4F:9F:FB:EC:16:8C:86:45:DF:F7:9B:A9:06:BE:B2:3F:E8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/F1B71C4F9FFBEC168C8645DFF79BA906BEB23FE8.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c57b90cb-8ebd-4c7b-8c31-133a8b4ed69c/0/3131382e3135312e3232302e302f32332d3233203d3e203436303332.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
118.151.220.0/23
Signature Algorithm: sha256WithRSAEncryption
9a:a3:30:e8:96:13:ac:d5:41:26:55:e8:a3:79:84:82:ef:bc:
5e:c4:18:07:7d:55:6e:94:1e:71:c2:c9:10:a6:a9:e2:89:c3:
17:fb:33:3c:64:f7:0b:1f:db:4e:0f:4b:b8:c0:35:ea:74:9a:
e4:4e:97:c1:05:39:31:9e:23:02:b6:47:f6:f3:95:d7:1e:19:
89:54:4e:79:28:79:19:6e:d1:5d:32:a9:aa:8e:f2:36:1e:d9:
00:b0:f7:90:cd:54:55:42:e5:77:2c:a2:d5:d9:e5:9f:fd:2f:
95:62:1f:e2:56:22:8f:a0:e7:0e:ab:79:bc:b8:c8:29:39:7a:
77:57:4a:57:af:98:e9:e5:ab:81:f3:a6:01:8a:c5:15:03:17:
aa:1b:8f:4b:89:10:11:7d:cb:2c:28:8e:03:3c:2f:44:56:7f:
27:98:e0:42:e5:bd:37:9a:d7:31:c6:6a:90:10:3d:5c:54:1a:
00:69:0e:0d:f9:fc:df:ec:30:49:f3:69:10:d4:16:b9:e7:71:
9b:20:fc:d7:75:01:dd:f6:1f:2a:59:6c:77:c2:10:b2:8b:f6:
4b:4b:99:72:d8:4d:ae:f3:74:e4:c5:c2:63:ac:f4:4f:2d:50:
21:ad:7d:ef:50:8d:73:a4:55:00:be:32:66:39:b3:31:08:4c:
b0:65:e2:02
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIUd8zRaMq3sSahw9qjsIdXKiKV+WowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoRjFCNzFDNEY5RkZCRUMxNjhDODY0NURGRjc5QkE5MDZC
RUIyM0ZFODAeFw0yMjA4MjgyMjU5MzFaFw0yMzA4MjcyMzA0MzFaMDMxMTAvBgNV
BAMTKDI4MTM5NUE4NEIwOURCMEYzRDlDRjBGRTE3QUZGQTBGNjBCRjA2NkQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDD7A/y/g9xfZdbkQjiBx+07jv9
11c7J9IHQDI8lXYvWa89nBmx3FKqtJ2dP70yT2IYlScSaieHAIAs6Nkjy5w9uGTC
Gt0w3fcFfrrXFroTyRI7nT6ax1/hQnaQ8/RzvR8LsmvZvX9kxw2eQzBtWdMuChI9
xyGhA5tl6MhWsiiGmP0izdcpmqk06hoUjlwogiPsyCrH0pT7cD+gqo+KLblfU81J
aWm5L1JanF4mfzx2NpY2fhkEHAPst8DReF0D2sc6T5akrohIhjF82m1IAVnu5+JP
uXgUw1Is3+y5HfZ4sZlewkW2mtrDa3IENyRnmoAu+WE6GlVXEYwQ4CCvE19lAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUKBOVqEsJ2w89nPD+F6/6D2C/Bm0wHwYDVR0j
BBgwFoAU8bccT5/77BaMhkXf95upBr6yP+gwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
NTdiOTBjYi04ZWJkLTRjN2ItOGMzMS0xMzNhOGI0ZWQ2OWMvMC9GMUI3MUM0RjlG
RkJFQzE2OEM4NjQ1REZGNzlCQTkwNkJFQjIzRkU4LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvRjFCNzFDNEY5RkZCRUMxNjhDODY0NURGRjc5QkE5MDZCRUIy
M0ZFOC5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M1N2I5MGNiLThlYmQtNGM3Yi04
YzMxLTEzM2E4YjRlZDY5Yy8wLzMxMzEzODJlMzEzNTMxMmUzMjMyMzAyZTMwMmYz
MjMzMmQzMjMzMjAzZDNlMjAzNDM2MzAzMzMyLnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBdpfcMA0GCSqG
SIb3DQEBCwUAA4IBAQCaozDolhOs1UEmVeijeYSC77xexBgHfVVulB5xwskQpqni
icMX+zM8ZPcLH9tOD0u4wDXqdJrkTpfBBTkxniMCtkf285XXHhmJVE55KHkZbtFd
MqmqjvI2HtkAsPeQzVRVQuV3LKLV2eWf/S+VYh/iViKPoOcOq3m8uMgpOXp3V0pX
r5jp5auB86YBisUVAxeqG49LiRARfcssKI4DPC9EVn8nmOBC5b03mtcxxmqQED1c
VBoAaQ4N+fzf7DBJ82kQ1Ba553GbIPzXdQHd9h8qWWx3whCyi/ZLS5ly2E2u83Tk
xcJjrPRPLVAhrX3vUI1zpFUAvjJmObMxCEywZeIC
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:16 2024 by rpki-client on console-fra.rpki-client.org