Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/3131342e3134312e38382e302f32342d3234203d3e20313338383138.roa
File: 3131342e3134312e38382e302f32342d3234203d3e20313338383138.roa (raw, json)
Hash identifier: hw6IRF+9Jv1b/K2jbXoaWFd1o0kO05G6IenIFU2CS1A=
Subject key identifier: FC:4D:3D:51:FE:3A:1F:32:91:C6:4C:5A:90:C7:84:5B:7C:6A:87:38
Certificate issuer: /CN=1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F
Certificate serial: 257C8048ECDE0DB43DEBE04D4F7A55C58DA69961
Authority key identifier: 1B:F9:9D:4D:CD:5B:F5:03:BE:97:23:AB:F5:51:DD:D7:0D:C1:46:4F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/3131342e3134312e38382e302f32342d3234203d3e20313338383138.roa
Signing time: Tue 21 Mar 2023 01:54:27 +0000
ROA not before: Tue 21 Mar 2023 01:49:27 +0000
ROA not after: Tue 19 Mar 2024 01:54:27 +0000
asID: 138818
IP address blocks: 114.141.88.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
25:7c:80:48:ec:de:0d:b4:3d:eb:e0:4d:4f:7a:55:c5:8d:a6:99:61
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F
Validity
Not Before: Mar 21 01:49:27 2023 GMT
Not After : Mar 19 01:54:27 2024 GMT
Subject: CN=FC4D3D51FE3A1F3291C64C5A90C7845B7C6A8738
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:c5:5e:4c:d1:86:1e:4d:90:e1:f7:a3:91:e5:
3f:06:bf:6c:b0:79:cd:5a:50:65:62:9e:0d:3c:3a:
28:af:c7:07:63:48:46:c3:94:8c:2e:73:ee:05:51:
ee:6a:7f:10:27:e4:00:f4:5a:34:b3:4c:a3:aa:cb:
72:df:ef:bf:79:ca:42:5d:89:d7:05:9c:82:12:08:
22:b6:d4:76:3c:13:2c:15:34:a7:d3:ec:cc:bd:15:
df:4e:f2:52:ed:68:81:d1:00:c7:28:dd:c2:eb:77:
f8:88:b8:f0:7d:6e:88:22:67:26:91:84:78:85:05:
4b:f7:3b:7c:71:b4:bc:c7:2e:82:bf:c7:f7:9e:e9:
62:ac:ab:c3:c4:e1:86:64:28:34:a4:8d:18:21:f4:
84:b7:41:9a:7c:29:af:86:f2:ae:4c:d3:cc:00:d7:
2c:7f:e3:7b:62:7c:da:84:10:e5:7a:4a:23:9d:29:
06:13:69:12:9e:3b:f8:7b:f4:f9:86:46:a7:1f:56:
4e:c8:2e:77:ae:71:4f:14:4b:26:bc:13:2b:db:dd:
7e:36:e5:54:a8:fd:50:a3:e8:52:a1:fb:e1:f9:cc:
bd:3f:1d:82:f5:b3:ea:c0:58:32:fd:6e:c7:6c:ad:
90:80:ac:75:8f:f7:94:99:93:fa:9b:56:bc:e2:cd:
fa:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FC:4D:3D:51:FE:3A:1F:32:91:C6:4C:5A:90:C7:84:5B:7C:6A:87:38
X509v3 Authority Key Identifier:
keyid:1B:F9:9D:4D:CD:5B:F5:03:BE:97:23:AB:F5:51:DD:D7:0D:C1:46:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/3131342e3134312e38382e302f32342d3234203d3e20313338383138.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.141.88.0/24
Signature Algorithm: sha256WithRSAEncryption
55:dd:bb:a1:5f:14:a8:79:a4:28:47:d4:f2:08:da:8c:12:2b:
4c:8b:aa:87:c2:51:da:cf:20:ab:02:d6:7d:4f:70:ba:9b:bb:
2e:35:b0:1e:39:a3:f6:c2:fe:73:ca:2b:62:91:22:62:60:ad:
4d:ec:c9:32:15:b1:b4:c1:b5:2f:c1:eb:80:dd:df:24:a0:9f:
73:de:65:fe:95:a2:60:54:4f:a1:8f:98:bf:05:50:01:fb:38:
d8:1d:b9:26:37:72:11:ef:56:f9:a5:ea:54:16:e3:8e:71:61:
7b:7d:aa:28:e1:d8:6e:95:a0:af:ad:66:c3:fb:27:3d:e9:0b:
9c:5f:d7:4b:d7:07:d7:95:eb:d7:ce:26:db:c2:78:41:b4:ba:
86:a3:b4:32:d9:9d:05:d7:81:1c:89:43:17:9a:d7:f5:45:fb:
d8:d1:37:e4:2e:d5:68:ab:eb:a5:e7:90:95:58:d7:9b:89:2f:
53:39:59:bf:08:04:ea:a9:10:b5:7b:ed:0c:e6:7e:97:0b:06:
f1:d7:7b:af:ba:4a:42:da:07:12:19:3f:af:8f:76:f4:37:13:
fa:44:e2:e9:c8:2e:02:bb:c6:39:a2:2d:d8:95:19:f9:8a:36:
e6:d8:67:f5:36:f6:23:fc:9d:5e:2d:37:61:ec:15:68:e3:f2:
f9:c7:a9:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:16 2024 by rpki-client on console-fra.rpki-client.org