Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/34332e3234302e3232342e302f32342d3234203d3e203633343933.roa
File: 34332e3234302e3232342e302f32342d3234203d3e203633343933.roa (raw, json)
Hash identifier: 5Xi9/g2RnBBm1gcaMVP8IKg3OPwzE4qVscJsnEuseVc=
Subject key identifier: BD:7E:18:07:7A:D9:35:F3:CF:AA:43:CF:C5:25:91:A6:33:A6:FA:3F
Certificate issuer: /CN=194F6EF659F1115C068AB59065D57F150E23F5B6
Certificate serial: 5C0CD9C21907F5DC0555F51D209A036FD8A0CB6B
Authority key identifier: 19:4F:6E:F6:59:F1:11:5C:06:8A:B5:90:65:D5:7F:15:0E:23:F5:B6
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/194F6EF659F1115C068AB59065D57F150E23F5B6.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/34332e3234302e3232342e302f32342d3234203d3e203633343933.roa
Signing time: Mon 19 Dec 2022 03:39:53 +0000
ROA not before: Mon 19 Dec 2022 03:34:53 +0000
ROA not after: Mon 18 Dec 2023 03:39:53 +0000
asID: 63493
IP address blocks: 43.240.224.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
5c:0c:d9:c2:19:07:f5:dc:05:55:f5:1d:20:9a:03:6f:d8:a0:cb:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=194F6EF659F1115C068AB59065D57F150E23F5B6
Validity
Not Before: Dec 19 03:34:53 2022 GMT
Not After : Dec 18 03:39:53 2023 GMT
Subject: CN=BD7E18077AD935F3CFAA43CFC52591A633A6FA3F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:35:cb:06:c2:fb:89:f7:29:f9:c4:b8:00:39:
eb:cf:a2:1b:c1:09:73:84:f1:a1:8e:38:d6:13:6d:
13:6a:b9:aa:80:64:3d:23:9e:67:fd:47:2e:75:83:
f4:57:22:a5:ca:c8:ec:7d:71:ae:5d:da:c1:d4:7c:
7e:53:18:29:c2:91:d9:c6:6f:31:cd:e6:1b:83:8d:
dd:87:60:89:26:6e:20:2a:9c:ae:29:f8:cb:02:4a:
8f:e1:83:67:fa:e1:6d:1d:2f:17:0e:49:bd:15:b2:
f9:f4:bb:26:d0:a3:36:e9:fb:19:74:65:3b:ab:b6:
a8:cf:b0:ed:92:34:20:87:60:20:8a:fa:76:46:00:
1c:44:4a:9d:f7:11:ef:5a:35:0a:11:8b:71:f1:ee:
ad:33:99:9a:45:2a:da:ea:fe:5f:ba:94:96:01:19:
6b:d9:57:c1:05:b9:b3:86:ae:67:2d:40:8a:cc:57:
f1:11:f6:a2:d2:9f:1e:f4:12:0d:ac:4c:40:52:9f:
c1:57:dc:22:88:d2:15:d4:49:2c:5d:0c:23:44:3e:
bc:51:0a:75:0e:4e:f2:7d:27:c8:60:63:21:02:e8:
7e:8e:66:72:73:88:97:46:22:93:13:c0:8b:7f:72:
ab:5f:d2:7a:24:7b:86:90:62:b8:a1:e5:4d:79:b7:
65:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:7E:18:07:7A:D9:35:F3:CF:AA:43:CF:C5:25:91:A6:33:A6:FA:3F
X509v3 Authority Key Identifier:
keyid:19:4F:6E:F6:59:F1:11:5C:06:8A:B5:90:65:D5:7F:15:0E:23:F5:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/194F6EF659F1115C068AB59065D57F150E23F5B6.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/194F6EF659F1115C068AB59065D57F150E23F5B6.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/34332e3234302e3232342e302f32342d3234203d3e203633343933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.240.224.0/24
Signature Algorithm: sha256WithRSAEncryption
b2:ae:8e:51:f0:23:e4:7b:bf:9e:00:b9:d3:e2:99:0f:3c:71:
f3:2a:ed:8d:c5:49:02:ec:bf:18:16:fd:b4:de:00:ca:16:4b:
0a:79:3b:ad:11:fa:64:60:f7:6d:8d:d9:9e:f6:b9:a1:d3:5c:
78:24:f7:de:43:f0:d2:5b:46:0b:dc:92:b0:dd:97:c7:bc:c7:
ca:61:32:4a:98:ba:6a:82:31:cf:53:d0:54:8d:86:54:2c:f1:
53:28:2f:dc:8c:ac:38:4b:41:42:b7:ea:18:47:de:6c:47:d3:
56:03:17:1c:6a:cf:5d:cc:b7:a7:d7:81:85:eb:6d:34:f5:33:
1b:40:69:d5:54:cc:da:53:79:74:70:99:e0:40:5c:ca:65:fe:
21:e2:be:c4:ba:92:36:b7:6b:93:8a:b8:18:06:8e:1b:ec:7a:
02:e2:2a:d9:12:cf:ff:57:3c:74:58:28:36:a7:69:51:e9:e3:
20:1f:33:93:a2:94:21:5a:8e:67:ee:2f:b0:02:77:51:d8:4b:
af:de:f9:e0:1e:9c:1c:b9:8f:ed:97:df:2e:6a:85:4a:75:fe:
83:18:51:ec:f9:00:5c:83:c8:b3:33:82:0f:bf:0d:fa:4a:bc:
a5:1f:ec:17:a6:4f:ee:64:67:b9:8d:9b:63:f8:7f:7d:98:b3:
c2:b5:c1:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:16 2024 by rpki-client on console-fra.rpki-client.org