Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/3131342e3134312e39332e302f32342d3234203d3e203338373733.roa
File: 3131342e3134312e39332e302f32342d3234203d3e203338373733.roa (raw, json)
Hash identifier: ftGo1MsVKZgbRkzjpDcsnO8o4E+eZA8pvYtufqm8X5Q=
Subject key identifier: 71:D8:A0:63:87:1A:C5:8E:38:D1:0E:F1:0B:2E:7A:11:57:CB:85:F3
Certificate issuer: /CN=1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F
Certificate serial: 0FD4B4370B5DF2103A0C3047405A410BEAD6D83E
Authority key identifier: 1B:F9:9D:4D:CD:5B:F5:03:BE:97:23:AB:F5:51:DD:D7:0D:C1:46:4F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/3131342e3134312e39332e302f32342d3234203d3e203338373733.roa
Signing time: Tue 21 Mar 2023 01:56:30 +0000
ROA not before: Tue 21 Mar 2023 01:51:30 +0000
ROA not after: Tue 19 Mar 2024 01:56:30 +0000
asID: 38773
IP address blocks: 114.141.93.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:d4:b4:37:0b:5d:f2:10:3a:0c:30:47:40:5a:41:0b:ea:d6:d8:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F
Validity
Not Before: Mar 21 01:51:30 2023 GMT
Not After : Mar 19 01:56:30 2024 GMT
Subject: CN=71D8A063871AC58E38D10EF10B2E7A1157CB85F3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:3e:5f:d3:a1:6d:8e:63:e4:40:4a:99:cc:1c:
e2:d1:fb:10:29:d0:bd:39:39:7d:15:f6:fa:be:17:
67:6a:0f:76:a1:6e:ef:8b:a8:8e:f1:50:e8:1b:0b:
43:f9:42:27:39:e3:2f:62:4a:48:13:36:64:60:1f:
03:79:aa:98:d7:08:ac:22:9a:3b:76:1c:af:80:af:
7f:5b:fd:ae:6b:cb:32:5f:16:66:58:5a:1a:2f:2b:
f9:5c:e2:02:6b:b3:d4:12:c9:2e:34:7f:61:6c:7c:
72:63:57:6b:05:2b:97:0a:eb:b3:2f:76:3c:7d:6b:
c1:e1:34:bd:05:64:78:05:17:5c:4e:78:0a:e1:3c:
f9:c4:27:ee:24:a0:bf:0b:70:37:68:14:34:27:e0:
ff:02:0c:7d:b1:e8:34:48:a0:02:34:16:cb:87:f2:
70:3d:c1:fb:37:9e:b3:3a:23:54:2e:a1:a1:72:fb:
74:d0:4a:f9:9d:b8:54:de:08:7a:e8:9e:6f:9d:8a:
fc:ef:fc:87:a1:f4:12:98:e5:8c:4f:16:ff:e9:32:
49:da:9a:05:a6:20:fa:1f:db:50:00:e3:20:e9:f8:
fc:80:4d:d2:e3:45:11:24:4d:2b:d1:b1:50:36:c7:
1e:a8:b3:94:88:44:49:32:9a:40:e6:80:25:81:a9:
01:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:D8:A0:63:87:1A:C5:8E:38:D1:0E:F1:0B:2E:7A:11:57:CB:85:F3
X509v3 Authority Key Identifier:
keyid:1B:F9:9D:4D:CD:5B:F5:03:BE:97:23:AB:F5:51:DD:D7:0D:C1:46:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/3131342e3134312e39332e302f32342d3234203d3e203338373733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.141.93.0/24
Signature Algorithm: sha256WithRSAEncryption
91:16:ff:fe:e1:ab:83:e3:75:28:64:b5:d6:4e:37:e7:93:a8:
f9:69:e0:a4:cd:4e:2d:b8:e7:27:12:ee:53:17:75:da:98:49:
9d:2d:b7:d6:ce:fb:8b:e0:69:cd:86:1d:2e:6a:e1:e7:cb:a5:
a5:3a:72:05:df:ac:ac:8b:82:53:d3:96:2c:63:ac:e8:92:28:
dd:dc:fb:77:90:01:79:05:f8:d1:99:88:2f:20:c5:b0:9a:5c:
6d:92:e6:1b:7e:19:80:94:c2:bb:50:a1:6c:5c:1e:bf:2e:f1:
1c:93:ce:3f:c6:63:e8:43:8a:0b:e1:a3:5e:75:5f:1d:72:b1:
fc:9b:52:13:30:e5:3e:e8:d7:39:e9:ac:03:15:8b:00:5b:54:
0d:6e:cc:1d:7e:73:64:45:7b:4d:7b:6a:f6:bb:b3:4f:eb:2b:
2d:31:6e:44:09:49:99:56:af:09:1c:55:53:24:00:e7:a4:4b:
21:85:48:74:e7:ae:75:5c:9a:eb:7b:ab:69:a0:04:f8:ba:9c:
ed:3b:07:fb:d6:49:c0:62:5a:49:7e:ed:14:08:94:e7:29:88:
37:c2:29:3e:6f:0d:c3:ae:50:4e:cc:84:29:1f:7e:9d:83:24:
fd:9a:87:74:5e:1d:68:80:e0:40:5f:3d:40:42:ba:cb:29:de:
3d:3f:df:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:16 2024 by rpki-client on console-fra.rpki-client.org