Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/3131342e3134312e39352e302f32342d3234203d3e203338373733.roa
File: 3131342e3134312e39352e302f32342d3234203d3e203338373733.roa (raw, json)
Hash identifier: 7V2YgersddIoa3f2zxpoU860I0uoK9EeaTSHqNaOw9I=
Subject key identifier: C0:64:02:47:EC:EA:12:67:13:F1:82:A1:48:36:75:DD:FA:B2:DC:22
Certificate issuer: /CN=1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F
Certificate serial: 5BA6794235DFF6B03A9339E2E7CE68C7FDF96246
Authority key identifier: 1B:F9:9D:4D:CD:5B:F5:03:BE:97:23:AB:F5:51:DD:D7:0D:C1:46:4F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/3131342e3134312e39352e302f32342d3234203d3e203338373733.roa
Signing time: Tue 21 Mar 2023 01:57:20 +0000
ROA not before: Tue 21 Mar 2023 01:52:20 +0000
ROA not after: Tue 19 Mar 2024 01:57:20 +0000
asID: 38773
IP address blocks: 114.141.95.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5b:a6:79:42:35:df:f6:b0:3a:93:39:e2:e7:ce:68:c7:fd:f9:62:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F
Validity
Not Before: Mar 21 01:52:20 2023 GMT
Not After : Mar 19 01:57:20 2024 GMT
Subject: CN=C0640247ECEA126713F182A1483675DDFAB2DC22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:ac:ae:46:4d:af:3b:6a:cd:8b:df:b3:5a:0a:
43:bb:3b:c8:11:fe:75:a7:20:7e:c6:16:40:09:10:
ee:9f:b7:0f:de:eb:98:11:c8:a3:09:79:ed:26:54:
6f:6b:64:c4:3f:78:2f:05:48:36:81:2e:96:e6:4e:
6a:45:ad:84:11:4a:f9:1c:ec:93:69:6a:62:27:94:
81:f3:f5:5e:89:9a:9d:8c:49:88:8e:0e:23:a1:a3:
df:da:7d:f1:73:a6:1d:44:af:bc:48:f5:f5:53:6e:
21:79:1f:82:56:7b:3f:5b:6d:eb:fe:8c:2a:0c:56:
88:2e:da:5d:19:d0:1d:08:d6:47:b1:62:aa:4f:81:
b9:77:f5:e8:d8:fd:23:50:43:21:6a:50:cb:b9:c7:
52:94:37:32:b6:f7:39:cd:22:d4:13:c8:f2:54:c3:
b9:0c:ae:8d:48:ac:52:8c:c2:01:b6:51:b4:f1:4c:
ea:85:48:6f:22:58:cc:c2:40:aa:c5:15:75:62:af:
81:8d:2f:f2:3d:a7:74:32:5b:bc:31:07:96:a9:ff:
91:79:ba:90:cb:cb:97:1f:6f:5b:13:42:b3:a5:49:
46:7c:36:67:5b:5c:39:7a:49:24:b8:e8:40:be:59:
77:07:22:fb:a7:ff:14:c1:4d:e2:c3:63:ee:fb:f7:
6a:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:64:02:47:EC:EA:12:67:13:F1:82:A1:48:36:75:DD:FA:B2:DC:22
X509v3 Authority Key Identifier:
keyid:1B:F9:9D:4D:CD:5B:F5:03:BE:97:23:AB:F5:51:DD:D7:0D:C1:46:4F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/1BF99D4DCD5BF503BE9723ABF551DDD70DC1464F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/c7fc54fb-724e-4316-b9bc-1c4b06ea57ae/0/3131342e3134312e39352e302f32342d3234203d3e203338373733.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
114.141.95.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:1a:23:23:cd:01:02:8e:2a:e1:e0:2e:26:d2:f0:32:43:d0:
fe:d2:a9:04:96:f1:27:0b:87:0a:68:84:4f:39:87:6b:63:1a:
a7:ab:d1:28:ce:a4:6c:e3:7a:b3:cd:22:2c:b5:6e:52:f9:17:
0e:82:a7:05:af:76:e8:9c:ac:ca:f5:08:0b:10:6e:92:90:23:
4a:44:95:b3:4f:35:90:c2:33:73:93:a3:2b:62:8f:56:40:97:
57:47:18:d0:3f:32:b8:ac:8b:fe:c8:ee:cb:9f:ed:48:83:b3:
42:dc:48:42:b2:c5:cb:af:7b:56:cb:6a:08:4a:08:d7:4b:78:
67:73:1e:a1:c1:8d:a0:18:d6:a0:b0:1a:da:a7:a3:82:a7:41:
83:a0:34:43:fd:9e:36:73:0b:93:27:a3:7b:ca:d2:c2:d0:9a:
f3:bd:06:c3:d6:96:2e:14:6e:b7:b3:17:0c:6e:e3:0a:ba:0f:
dc:93:a0:8e:d3:14:d8:39:60:d1:b8:49:72:0b:43:b6:02:22:
a8:45:8e:23:55:06:0a:19:99:ac:d4:fc:74:a9:ae:d6:31:af:
50:b5:d9:82:f4:bf:be:da:7e:94:44:8d:62:b7:ed:e7:b7:94:
01:7d:3e:de:9a:38:63:f1:ef:bd:54:5e:a6:e7:fc:de:e1:a5:
35:18:9d:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:16 2024 by rpki-client on console-fra.rpki-client.org