Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/3131342e3134312e39322e302f32342d3234203d3e203338373733.roa
File: 3131342e3134312e39322e302f32342d3234203d3e203338373733.roa (raw, json)
Hash identifier: pbG1sO4ITPCNhFSU+y7k+g7II4SYFEf4fRkVhVYmWwY=
Subject key identifier: 74:EF:97:42:F3:BE:3D:61:D3:55:04:9D:CA:F2:F3:89:54:41:EA:BE
Certificate issuer: /CN=1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F
Certificate serial: 5F449AAF693B4BBE9F6905849D2A8633C1D22E68
Authority key identifier: 1B:F9:9D:4D:CD:5B:F5:03:BE:97:23:AB:F5:51:DD:D7:0D:C1:46:4F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/3131342e3134312e39322e302f32342d3234203d3e203338373733.roa
Signing time: Tue 21 Mar 2023 01:56:15 +0000
ROA not before: Tue 21 Mar 2023 01:51:15 +0000
ROA not after: Tue 19 Mar 2024 01:56:15 +0000
asID: 38773
IP address blocks: 114.141.92.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5f:44:9a:af:69:3b:4b:be:9f:69:05:84:9d:2a:86:33:c1:d2:2e:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F
Validity
Not Before: Mar 21 01:51:15 2023 GMT
Not After : Mar 19 01:56:15 2024 GMT
Subject: CN=74EF9742F3BE3D61D355049DCAF2F3895441EABE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:b7:7a:49:fe:50:4f:b0:99:55:89:20:6f:61:
15:f1:78:5b:2b:79:91:6d:bd:47:06:cd:b2:98:5b:
59:6b:8d:5e:dc:36:82:7a:82:97:a7:04:87:6d:14:
a8:d1:8f:c2:a0:da:7d:f0:c4:6c:16:fd:23:cf:49:
7f:e2:bd:3a:9e:38:50:33:09:9a:88:f1:47:68:7b:
aa:13:19:c9:fc:cd:3a:29:75:c3:62:8a:fb:38:47:
53:da:53:f0:98:d5:84:60:f8:00:e8:49:68:95:5c:
fc:f1:31:75:48:a6:bb:b9:56:9d:f3:21:95:24:43:
1e:56:ac:6b:c8:62:76:b6:81:15:f3:13:c0:c7:5c:
d0:f3:1c:19:ab:a0:79:f9:12:88:14:4b:45:15:b7:
08:ec:ea:c0:d8:01:88:01:30:af:1c:d6:55:58:f1:
ef:24:d2:bf:d7:64:1c:f1:84:aa:e4:87:0e:d4:f5:
2e:22:e6:b1:71:64:dd:8c:06:09:48:45:00:0c:25:
41:8d:e2:50:6f:46:be:51:15:ab:d8:60:7c:32:be:
7b:2e:90:cc:69:a4:c7:38:40:c6:2f:08:78:4b:e8:
7e:cc:45:e5:f7:0f:a6:ed:b3:81:aa:e7:5b:ff:e8:
3e:26:b7:f0:6b:95:10:b7:96:2a:38:93:de:59:ea:
dc:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:EF:97:42:F3:BE:3D:61:D3:55:04:9D:CA:F2:F3:89:54:41:EA:BE
X509v3 Authority Key Identifier:
keyid:1B:F9:9D:4D:CD:5B:F5:03:BE:97:23:AB:F5:51:DD:D7:0D:C1:46:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/3131342e3134312e39322e302f32342d3234203d3e203338373733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.141.92.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:ab:dc:1e:ec:bd:e4:7d:b1:9e:e8:6b:07:bb:40:62:c0:45:
3d:70:01:ab:d8:0e:e2:3f:46:2f:9d:96:0e:7a:89:7f:20:9c:
f9:57:41:65:c5:e9:3b:53:ea:0e:cd:1e:68:8c:6b:c7:94:10:
40:ce:6e:31:ee:5e:91:d8:f9:fe:78:fc:b9:e7:42:1d:07:73:
31:15:5b:14:b1:c4:66:26:4d:f3:03:89:c0:29:dd:be:57:46:
fa:2c:9c:4e:ed:7a:6c:fb:ef:68:72:93:8f:87:fa:91:a8:97:
f5:d1:a5:9d:15:76:40:43:ce:e0:1c:44:04:0f:03:2c:50:c5:
b2:b9:c6:32:be:4b:fb:64:89:c1:7e:19:f5:7b:41:57:be:1c:
29:be:f8:c1:79:1b:df:57:64:5b:aa:91:1a:0f:1c:d1:4a:61:
2a:df:31:cd:a7:45:4a:42:bc:c4:15:95:a4:e5:0b:87:69:74:
61:36:86:69:b3:48:62:02:d0:1b:f3:c3:3c:ee:8c:16:62:b0:
4a:98:db:4d:46:a2:c6:75:6c:d2:55:f0:10:d7:1d:23:bd:2a:
82:72:26:41:37:2a:e8:86:8d:39:43:ea:48:40:30:6a:9c:d4:
61:6b:d7:e1:ae:eb:5a:c0:f9:0e:d8:db:88:15:7e:a6:01:d7:
00:e9:a5:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:52 2024 by rpki-client on console-ams.rpki-client.org