Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/3131342e3134312e39342e302f32342d3234203d3e203338373733.roa
File: 3131342e3134312e39342e302f32342d3234203d3e203338373733.roa (raw, json)
Hash identifier: K/Dg/weWAwXBq5ZYHmaTHELUKf2jgVQpnYSuvJzdCws=
Subject key identifier: 88:90:3D:05:3F:39:EE:65:3F:1D:B7:33:38:68:DA:8E:EB:C5:37:84
Certificate issuer: /CN=1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F
Certificate serial: 1362C92305FD1F37D9FA818F6CE3774CD900366D
Authority key identifier: 1B:F9:9D:4D:CD:5B:F5:03:BE:97:23:AB:F5:51:DD:D7:0D:C1:46:4F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/3131342e3134312e39342e302f32342d3234203d3e203338373733.roa
Signing time: Tue 21 Mar 2023 01:57:02 +0000
ROA not before: Tue 21 Mar 2023 01:52:02 +0000
ROA not after: Tue 19 Mar 2024 01:57:02 +0000
asID: 38773
IP address blocks: 114.141.94.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
13:62:c9:23:05:fd:1f:37:d9:fa:81:8f:6c:e3:77:4c:d9:00:36:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F
Validity
Not Before: Mar 21 01:52:02 2023 GMT
Not After : Mar 19 01:57:02 2024 GMT
Subject: CN=88903D053F39EE653F1DB7333868DA8EEBC53784
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:d5:3c:3c:db:0c:d8:5d:c3:f0:bc:48:0c:65:
5a:03:c3:e6:a0:22:65:8e:52:16:e3:29:94:de:ef:
08:dd:dd:d8:0a:52:e2:0e:13:d5:63:7c:bd:3f:9c:
0a:f7:36:7b:90:24:8c:8a:d3:ee:e6:9d:7d:0d:49:
28:fd:83:10:9c:84:e4:41:47:a5:ba:91:3d:e6:68:
8a:82:55:14:11:fd:96:5a:94:a9:93:f8:d4:f4:76:
b8:cd:f2:ed:6d:b7:40:76:87:5d:34:d7:7b:82:80:
e1:29:3a:3b:81:d4:9f:28:20:dc:4e:32:ee:a4:1c:
c6:50:be:db:af:3a:07:48:76:82:da:b9:53:5d:41:
bc:cb:b9:ed:9b:04:26:cf:0a:f7:05:f7:67:f3:81:
3f:c2:52:00:8d:23:f1:81:7f:d3:59:3d:98:93:10:
4d:6a:9f:85:65:10:fa:4a:26:34:fc:bf:e5:6c:ed:
5b:7d:24:bb:e2:fe:7d:bc:e5:00:36:7c:22:73:b0:
75:ad:28:3f:b7:e1:6a:cb:6b:ca:ec:22:15:56:5e:
fa:03:42:39:34:6b:d5:69:c3:26:ae:63:cd:5a:0a:
b8:78:2d:e2:17:02:35:90:de:e1:59:93:ec:fa:29:
07:e5:f0:47:99:8c:78:60:3c:37:07:2f:cf:3d:da:
29:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:90:3D:05:3F:39:EE:65:3F:1D:B7:33:38:68:DA:8E:EB:C5:37:84
X509v3 Authority Key Identifier:
keyid:1B:F9:9D:4D:CD:5B:F5:03:BE:97:23:AB:F5:51:DD:D7:0D:C1:46:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/3131342e3134312e39342e302f32342d3234203d3e203338373733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.141.94.0/24
Signature Algorithm: sha256WithRSAEncryption
27:85:75:97:6f:16:ee:64:27:31:c5:95:c8:24:51:7d:20:a9:
6c:b4:c1:e6:7b:35:07:bc:f7:31:92:48:74:fe:65:43:81:65:
15:ca:d4:8f:c9:7d:52:b3:fe:a9:5d:9f:b6:b8:a6:11:e5:99:
04:7d:0b:fd:e8:26:83:e6:6a:77:05:a2:32:09:7d:2a:81:ea:
07:ac:2f:22:af:7f:d9:20:98:fc:71:d3:88:3e:19:11:ce:be:
bd:1e:b3:a6:31:d6:96:69:9d:89:20:db:51:1c:41:c5:ba:06:
fc:30:7e:64:66:30:6c:e2:44:50:76:bb:1e:83:58:a9:fe:e3:
77:19:fd:ad:28:2f:49:5d:67:bc:eb:35:c9:89:f3:c4:3c:a2:
db:f1:4e:bb:ba:12:75:1b:b9:08:65:28:50:2e:62:b3:a4:dc:
d0:59:a4:83:e9:83:7c:6f:e6:5f:24:0e:b3:13:4a:ba:2c:97:
36:db:cd:ce:be:3f:fb:87:ee:fd:5f:a3:78:0f:52:81:99:de:
85:6e:f1:1d:03:43:9e:48:a8:67:e6:94:82:96:ca:4a:1c:e8:
34:05:76:7f:5b:a5:ca:a4:08:19:bd:54:cc:1c:5b:84:8c:f5:
cb:54:7a:fe:a3:97:e2:b6:43:04:42:e6:da:14:91:5a:75:fb:
85:58:d1:e5
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUE2LJIwX9HzfZ+oGPbON3TNkANm0wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMUJGOTlENERDRDVCRjUwM0JFOTcyM0FCRjU1MURERDcw
REMxNDY0RjAeFw0yMzAzMjEwMTUyMDJaFw0yNDAzMTkwMTU3MDJaMDMxMTAvBgNV
BAMTKDg4OTAzRDA1M0YzOUVFNjUzRjFEQjczMzM4NjhEQThFRUJDNTM3ODQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCS1Tw82wzYXcPwvEgMZVoDw+ag
ImWOUhbjKZTe7wjd3dgKUuIOE9VjfL0/nAr3NnuQJIyK0+7mnX0NSSj9gxCchORB
R6W6kT3maIqCVRQR/ZZalKmT+NT0drjN8u1tt0B2h10013uCgOEpOjuB1J8oINxO
Mu6kHMZQvtuvOgdIdoLauVNdQbzLue2bBCbPCvcF92fzgT/CUgCNI/GBf9NZPZiT
EE1qn4VlEPpKJjT8v+Vs7Vt9JLvi/n285QA2fCJzsHWtKD+34WrLa8rsIhVWXvoD
Qjk0a9VpwyauY81aCrh4LeIXAjWQ3uFZk+z6KQfl8EeZjHhgPDcHL8892ik/AgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUiJA9BT857mU/HbczOGjajuvFN4QwHwYDVR0j
BBgwFoAUG/mdTc1b9QO+lyOr9VHd1w3BRk8wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
N2ZjNTRmYi03MjRlLTQzMTYtYjliYy0xYzRiMDZlYTU3YWUvMC8xQkY5OUQ0RENE
NUJGNTAzQkU5NzIzQUJGNTUxRERENzBEQzE0NjRGLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMUJGOTlENERDRDVCRjUwM0JFOTcyM0FCRjU1MURERDcwREMx
NDY0Ri5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2M3ZmM1NGZiLTcyNGUtNDMxNi1i
OWJjLTFjNGIwNmVhNTdhZS8wLzMxMzEzNDJlMzEzNDMxMmUzOTM0MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzMzODM3MzczMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAHKNXjANBgkqhkiG
9w0BAQsFAAOCAQEAJ4V1l28W7mQnMcWVyCRRfSCpbLTB5ns1B7z3MZJIdP5lQ4Fl
FcrUj8l9UrP+qV2ftrimEeWZBH0L/egmg+ZqdwWiMgl9KoHqB6wvIq9/2SCY/HHT
iD4ZEc6+vR6zpjHWlmmdiSDbURxBxboG/DB+ZGYwbOJEUHa7HoNYqf7jdxn9rSgv
SV1nvOs1yYnzxDyi2/FOu7oSdRu5CGUoUC5is6Tc0Fmkg+mDfG/mXyQOsxNKuiyX
NtvNzr4/+4fu/V+jeA9SgZnehW7xHQNDnkioZ+aUgpbKShzoNAV2f1ulyqQIGb1U
zBxbhIz1y1R6/qOX4rZDBELm2hSRWnX7hVjR5Q==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:16 2024 by rpki-client on console-fra.rpki-client.org