Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/3230332e3134382e38342e302f32332d3233203d3e203435323839.roa
File: 3230332e3134382e38342e302f32332d3233203d3e203435323839.roa (raw, json)
Hash identifier: C6yfw+YWbQ8PYhbErtwcBrWlUlQyCY0zUX0tIfSutf4=
Subject key identifier: 1F:03:9E:A4:56:0D:14:94:3A:BC:8D:66:CA:62:75:12:4A:0C:6E:AF
Certificate issuer: /CN=9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61
Certificate serial: 14A99B91A3AA4850FDB56251B59CD0E3B6AFB9F0
Authority key identifier: 99:73:E5:D6:F7:F6:5D:CF:01:5E:9D:AF:CE:F3:94:F5:12:E4:FD:61
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/3230332e3134382e38342e302f32332d3233203d3e203435323839.roa
Signing time: Sat 15 Apr 2023 05:45:54 +0000
ROA not before: Sat 15 Apr 2023 05:40:54 +0000
ROA not after: Sat 13 Apr 2024 05:45:54 +0000
asID: 45289
IP address blocks: 203.148.84.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:a9:9b:91:a3:aa:48:50:fd:b5:62:51:b5:9c:d0:e3:b6:af:b9:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61
Validity
Not Before: Apr 15 05:40:54 2023 GMT
Not After : Apr 13 05:45:54 2024 GMT
Subject: CN=1F039EA4560D14943ABC8D66CA6275124A0C6EAF
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:4f:de:e0:95:8a:2e:6b:15:ca:b9:42:ef:7c:
06:d5:87:ae:d9:0b:72:76:ce:06:3c:c4:9e:1c:8a:
71:bb:8a:c3:6f:e9:84:96:15:28:81:af:59:76:2a:
ef:d7:3e:39:26:58:cc:64:d5:51:22:17:f7:10:35:
f7:1b:3e:7e:30:7d:3c:f9:91:57:be:38:34:93:4b:
b8:d6:07:dc:d1:27:da:2e:3e:b8:59:53:01:4d:7a:
d1:be:33:cd:d3:35:eb:f0:ef:ed:76:ea:02:8d:5b:
de:f6:6a:14:4d:e9:65:6c:d5:a0:a0:73:ea:6f:a5:
9d:ab:e3:3e:4b:c8:0f:96:92:ce:3c:1f:78:a9:e6:
de:0d:3f:95:3d:5e:15:c6:a4:89:31:0b:31:8c:60:
77:8c:d0:1b:47:79:51:d2:6f:9c:4e:7d:f6:f8:cc:
3f:54:6c:61:e2:cd:a2:4b:1e:bd:93:90:28:1f:eb:
c1:e6:72:89:f6:ed:08:cf:c4:1d:e7:4a:62:47:ae:
b5:69:01:21:1b:7f:72:77:43:09:79:ae:3d:44:03:
31:bc:14:b6:f1:7a:48:5f:46:a7:3c:85:6f:83:27:
8f:11:cc:d8:a0:2b:47:86:44:d6:42:5c:9f:08:fd:
7f:1a:05:91:6d:07:a1:e1:89:67:71:f1:9b:e3:f2:
f1:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:03:9E:A4:56:0D:14:94:3A:BC:8D:66:CA:62:75:12:4A:0C:6E:AF
X509v3 Authority Key Identifier:
keyid:99:73:E5:D6:F7:F6:5D:CF:01:5E:9D:AF:CE:F3:94:F5:12:E4:FD:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/3230332e3134382e38342e302f32332d3233203d3e203435323839.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.148.84.0/23
Signature Algorithm: sha256WithRSAEncryption
93:3c:02:e5:21:4a:27:37:e4:f1:45:b4:67:eb:be:7c:23:7a:
04:8d:56:4c:63:9f:9b:2b:c6:40:6b:ce:eb:02:db:f9:46:41:
06:c3:a7:2a:09:5f:ab:a9:d5:ed:bb:ec:ad:9f:51:50:fd:e3:
f6:ef:43:38:8c:e7:0b:24:e0:0a:a8:8e:d7:bd:ab:fc:b9:54:
d7:c2:ab:00:61:f0:45:8e:1f:dd:f7:da:9f:6e:f5:57:4f:61:
e1:d2:ea:0b:42:bd:f9:dd:f6:00:1d:f6:61:8c:61:1f:a5:9d:
2c:c0:ae:d6:27:3e:61:3e:d6:f5:32:cc:06:b9:fc:df:99:c6:
46:1f:40:e4:10:fb:1b:4b:f8:ee:01:2d:7b:f6:af:0b:5a:65:
ab:fe:b2:fb:70:12:b1:40:32:f4:d0:7a:30:28:b9:ad:23:2c:
cd:14:38:f2:08:63:75:36:c7:b2:e9:cb:6d:db:1d:f3:d6:ae:
7c:23:6d:79:ab:08:2a:d8:14:04:73:e3:c5:46:75:8f:1a:8a:
8f:cc:be:42:fc:d5:a1:b2:7c:fb:51:09:44:00:8a:e6:a3:16:
68:c9:28:5c:bb:10:93:33:dc:31:bb:0b:97:dd:33:16:4c:b6:
be:89:8a:b4:ca:49:06:c3:6e:ea:37:1a:9d:b5:2f:71:33:ef:
dd:05:03:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:52 2024 by rpki-client on console-ams.rpki-client.org