Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/3230332e32392e32372e302f32342d3234203d3e20313335343737.roa
File: 3230332e32392e32372e302f32342d3234203d3e20313335343737.roa (raw, json)
Hash identifier: Qh8QFjWxIseUlpieQP0lZNMIlGNgQK+NrVu4eeSJN2o=
Subject key identifier: C6:C4:91:88:FC:A1:3F:75:8B:28:0F:49:D2:D3:09:1F:5B:29:91:DE
Certificate issuer: /CN=9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61
Certificate serial: 0F2D468A2E3A5EF475906F98A4E3F1ADF23B808C
Authority key identifier: 99:73:E5:D6:F7:F6:5D:CF:01:5E:9D:AF:CE:F3:94:F5:12:E4:FD:61
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/3230332e32392e32372e302f32342d3234203d3e20313335343737.roa
Signing time: Sat 31 Dec 2022 04:00:00 +0000
ROA not before: Sat 31 Dec 2022 03:55:00 +0000
ROA not after: Sat 30 Dec 2023 04:00:00 +0000
asID: 135477
IP address blocks: 203.29.27.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0f:2d:46:8a:2e:3a:5e:f4:75:90:6f:98:a4:e3:f1:ad:f2:3b:80:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61
Validity
Not Before: Dec 31 03:55:00 2022 GMT
Not After : Dec 30 04:00:00 2023 GMT
Subject: CN=C6C49188FCA13F758B280F49D2D3091F5B2991DE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:48:ce:94:ab:8c:77:2b:bc:b9:3d:bd:dd:d2:
13:12:23:21:8a:9b:fe:63:19:33:bc:b6:ec:76:0c:
84:d2:b0:8d:d6:bc:63:91:9f:32:2b:65:5c:d2:26:
12:61:0b:9e:62:7c:68:9a:f9:cc:68:9a:c9:a7:f9:
8e:ad:bb:d7:c1:80:a7:bf:0f:b4:7e:7c:9d:4c:9c:
63:be:e0:4b:57:a4:36:dd:d8:13:23:56:e4:72:c9:
f7:b3:cf:f9:4e:24:30:66:92:61:cc:b7:66:11:cb:
c6:8a:88:14:c4:02:ca:f3:aa:b1:e8:68:95:af:27:
98:2e:d2:85:82:e0:9d:53:ca:71:29:5b:0f:91:85:
d4:86:07:5d:aa:59:78:db:d9:25:66:73:68:ff:ce:
af:6d:71:3d:14:be:d2:b4:d0:35:04:25:75:d3:b5:
36:d9:03:07:2a:5f:e1:ab:0a:b3:ba:2a:de:48:af:
ea:f1:2b:84:f1:05:42:ac:0d:ae:6d:41:e3:66:0b:
13:3b:d4:64:5a:a4:ed:54:61:90:e6:0d:bb:a0:e2:
56:15:06:09:25:de:1b:43:23:64:a8:8f:15:ef:ab:
49:c5:c3:75:aa:0f:26:1f:fc:46:d2:31:60:bb:c9:
1f:a9:02:f2:2c:bc:90:a5:ce:c1:4b:15:fb:02:c3:
7e:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:C4:91:88:FC:A1:3F:75:8B:28:0F:49:D2:D3:09:1F:5B:29:91:DE
X509v3 Authority Key Identifier:
keyid:99:73:E5:D6:F7:F6:5D:CF:01:5E:9D:AF:CE:F3:94:F5:12:E4:FD:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9973E5D6F7F65DCF015E9DAFCEF394F512E4FD61.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/ccbcc00d-ce79-4216-a62b-e3d50cc79442/0/3230332e32392e32372e302f32342d3234203d3e20313335343737.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
203.29.27.0/24
Signature Algorithm: sha256WithRSAEncryption
1e:31:1b:1a:63:d0:24:4e:34:62:d3:d3:9b:b9:a3:03:0c:8e:
cd:37:24:21:d8:0a:22:21:6c:62:00:8b:4c:ba:6f:f1:1f:df:
09:43:17:a8:3e:87:07:c6:94:5e:b3:11:20:a8:cb:a4:3a:e2:
cf:61:0f:92:5e:0d:4b:04:91:26:0b:55:d2:36:34:7f:7f:3e:
76:60:95:b7:65:5b:42:0b:f7:5d:1c:2b:e0:7f:6d:12:79:5a:
d7:8e:1e:67:a0:3c:7b:1c:02:81:a0:f8:76:69:4e:61:2e:2a:
01:fa:0b:32:78:20:b6:33:65:1a:49:43:90:89:41:53:cc:c3:
89:98:75:9a:33:96:16:26:ba:2e:22:71:2a:52:1d:d9:be:87:
bc:3c:83:35:97:bd:ad:f3:38:16:dd:2a:5e:a5:ef:6f:3f:1e:
60:fd:d7:41:67:20:0e:f3:30:74:0f:f3:b8:a8:1f:92:28:d2:
56:00:e0:99:9f:b0:3a:a5:6b:6f:45:6e:75:e3:3f:bc:df:c7:
00:71:f3:dc:9f:98:16:4e:aa:a5:39:2f:e2:6b:e5:bc:ec:99:
69:86:01:6e:c5:20:a6:ed:7b:31:38:f4:44:2c:2e:ed:0c:22:
e3:77:af:e3:38:71:48:f9:fa:59:05:02:d4:07:e6:e4:93:83:
c0:1f:a9:b9
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUDy1Gii46XvR1kG+YpOPxrfI7gIwwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOTk3M0U1RDZGN0Y2NURDRjAxNUU5REFGQ0VGMzk0RjUx
MkU0RkQ2MTAeFw0yMjEyMzEwMzU1MDBaFw0yMzEyMzAwNDAwMDBaMDMxMTAvBgNV
BAMTKEM2QzQ5MTg4RkNBMTNGNzU4QjI4MEY0OUQyRDMwOTFGNUIyOTkxREUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDKSM6Uq4x3K7y5Pb3d0hMSIyGK
m/5jGTO8tux2DITSsI3WvGORnzIrZVzSJhJhC55ifGia+cxomsmn+Y6tu9fBgKe/
D7R+fJ1MnGO+4EtXpDbd2BMjVuRyyfezz/lOJDBmkmHMt2YRy8aKiBTEAsrzqrHo
aJWvJ5gu0oWC4J1TynEpWw+RhdSGB12qWXjb2SVmc2j/zq9tcT0UvtK00DUEJXXT
tTbZAwcqX+GrCrO6Kt5Ir+rxK4TxBUKsDa5tQeNmCxM71GRapO1UYZDmDbug4lYV
Bgkl3htDI2SojxXvq0nFw3WqDyYf/EbSMWC7yR+pAvIsvJClzsFLFfsCw379AgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUxsSRiPyhP3WLKA9J0tMJH1spkd4wHwYDVR0j
BBgwFoAUmXPl1vf2Xc8BXp2vzvOU9RLk/WEwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
Y2JjYzAwZC1jZTc5LTQyMTYtYTYyYi1lM2Q1MGNjNzk0NDIvMC85OTczRTVENkY3
RjY1RENGMDE1RTlEQUZDRUYzOTRGNTEyRTRGRDYxLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOTk3M0U1RDZGN0Y2NURDRjAxNUU5REFGQ0VGMzk0RjUxMkU0
RkQ2MS5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2NjYmNjMDBkLWNlNzktNDIxNi1h
NjJiLWUzZDUwY2M3OTQ0Mi8wLzMyMzAzMzJlMzIzOTJlMzIzNzJlMzAyZjMyMzQy
ZDMyMzQyMDNkM2UyMDMxMzMzNTM0MzczNy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMsdGzANBgkqhkiG
9w0BAQsFAAOCAQEAHjEbGmPQJE40YtPTm7mjAwyOzTckIdgKIiFsYgCLTLpv8R/f
CUMXqD6HB8aUXrMRIKjLpDriz2EPkl4NSwSRJgtV0jY0f38+dmCVt2VbQgv3XRwr
4H9tEnla144eZ6A8exwCgaD4dmlOYS4qAfoLMnggtjNlGklDkIlBU8zDiZh1mjOW
Fia6LiJxKlId2b6HvDyDNZe9rfM4Ft0qXqXvbz8eYP3XQWcgDvMwdA/zuKgfkijS
VgDgmZ+wOqVrb0VudeM/vN/HAHHz3J+YFk6qpTkv4mvlvOyZaYYBbsUgpu17MTj0
RCwu7Qwi43ev4zhxSPn6WQUC1Afm5JODwB+puQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:52 2024 by rpki-client on console-ams.rpki-client.org