Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/34332e3234302e3232362e302f32342d3234203d3e203633343933.roa
File: 34332e3234302e3232362e302f32342d3234203d3e203633343933.roa (raw, json)
Hash identifier: SKHFyelnuRkwJ/CN/RH5MCb8F7iDhYG4E9OxwE64dy8=
Subject key identifier: 86:30:D6:31:97:85:03:83:3E:49:0A:11:8D:EA:70:C5:1F:B0:CF:1D
Certificate issuer: /CN=194F6EF659F1115C068AB59065D57F150E23F5B6
Certificate serial: 146DB1B2A84FE5B7B4F06AB6696D81845A38A443
Authority key identifier: 19:4F:6E:F6:59:F1:11:5C:06:8A:B5:90:65:D5:7F:15:0E:23:F5:B6
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/194F6EF659F1115C068AB59065D57F150E23F5B6.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/34332e3234302e3232362e302f32342d3234203d3e203633343933.roa
Signing time: Mon 19 Dec 2022 03:40:58 +0000
ROA not before: Mon 19 Dec 2022 03:35:58 +0000
ROA not after: Mon 18 Dec 2023 03:40:58 +0000
asID: 63493
IP address blocks: 43.240.226.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:6d:b1:b2:a8:4f:e5:b7:b4:f0:6a:b6:69:6d:81:84:5a:38:a4:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=194F6EF659F1115C068AB59065D57F150E23F5B6
Validity
Not Before: Dec 19 03:35:58 2022 GMT
Not After : Dec 18 03:40:58 2023 GMT
Subject: CN=8630D631978503833E490A118DEA70C51FB0CF1D
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:ab:24:4a:58:d1:2b:11:ef:85:98:c9:40:b0:
4c:ca:50:c6:6b:6f:9e:3c:c5:0b:13:f7:b2:e5:d2:
ab:a5:70:62:58:5f:c0:0e:27:d6:14:50:78:28:c3:
ab:6b:eb:45:87:5e:65:6a:55:39:b3:38:56:7b:03:
d4:29:09:ec:e0:93:10:76:e4:ab:f2:27:bc:d6:12:
b8:ea:b4:96:53:de:23:d2:59:d9:5e:52:07:69:54:
03:16:7e:93:a8:02:eb:b6:fe:ca:b8:49:84:92:66:
69:a3:a8:c8:00:f7:36:81:21:00:af:c1:77:96:33:
9f:1d:78:d4:ad:2b:98:d3:17:a7:1a:27:89:e2:7e:
3c:30:5a:f5:dd:4a:31:df:4e:fa:90:f2:12:25:0c:
1f:d5:1e:70:04:91:df:c0:27:74:76:c4:97:50:66:
ac:87:53:4e:da:5a:74:eb:7b:9f:ab:80:9d:fc:25:
3f:36:b1:34:8a:b7:f2:0d:4b:7e:7e:24:fa:5b:f6:
f7:e0:a1:3f:64:f7:ea:45:b9:fe:e1:b0:f9:32:e1:
b4:2b:cb:01:8a:8e:ee:9d:db:3f:f1:2a:79:e5:24:
62:a7:73:f8:a2:e6:37:fc:6a:cb:c1:96:c0:c4:fe:
8b:1b:d5:23:90:61:3f:bc:c1:dc:5e:65:60:7e:c3:
5a:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:30:D6:31:97:85:03:83:3E:49:0A:11:8D:EA:70:C5:1F:B0:CF:1D
X509v3 Authority Key Identifier:
keyid:19:4F:6E:F6:59:F1:11:5C:06:8A:B5:90:65:D5:7F:15:0E:23:F5:B6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/194F6EF659F1115C068AB59065D57F150E23F5B6.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/194F6EF659F1115C068AB59065D57F150E23F5B6.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/cfabec71-7ecb-4dbd-a421-99b9cd20903a/0/34332e3234302e3232362e302f32342d3234203d3e203633343933.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.240.226.0/24
Signature Algorithm: sha256WithRSAEncryption
1d:03:7f:47:ca:d6:ca:70:dc:4a:9d:db:c4:74:b1:78:9e:2e:
be:44:6c:fa:46:c1:39:f9:4a:98:b7:3f:8a:c5:b1:88:2c:4a:
38:a8:38:cb:20:9f:98:6c:a3:95:8a:4a:41:33:b2:bd:98:8c:
96:3f:d1:15:6a:05:ea:4c:6f:fa:86:a9:1f:75:51:38:2e:81:
db:5f:7f:24:03:df:33:54:8c:d9:69:09:25:77:24:00:6f:08:
19:d8:54:2d:c9:68:cd:19:8d:9a:cd:0b:d2:c8:20:50:38:9b:
13:b5:2a:ef:bc:07:11:3d:11:fd:a7:f6:13:1f:6c:d2:d1:03:
57:28:34:c8:bd:0c:c4:11:f3:e5:0b:4e:17:7d:e2:26:ba:ee:
39:d8:ce:1f:b2:8e:e7:4b:0c:f4:f4:a5:31:92:ae:57:a6:46:
dc:ae:93:bf:98:ac:b4:f0:e2:fa:7e:7a:24:e6:28:3d:91:ba:
8c:56:e2:ce:f4:34:64:42:e6:81:13:1f:93:10:56:bd:80:51:
cb:73:5b:58:6c:15:3b:1b:e3:ce:3a:31:ed:72:27:c6:a6:7e:
c9:72:de:00:04:fc:c3:07:fd:d9:cc:eb:19:e1:cc:34:f3:b7:
8f:25:de:4e:82:05:b8:98:5d:71:bf:95:c0:00:8c:74:48:ba:
60:f3:8c:6f
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUFG2xsqhP5be08Gq2aW2BhFo4pEMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMTk0RjZFRjY1OUYxMTE1QzA2OEFCNTkwNjVENTdGMTUw
RTIzRjVCNjAeFw0yMjEyMTkwMzM1NThaFw0yMzEyMTgwMzQwNThaMDMxMTAvBgNV
BAMTKDg2MzBENjMxOTc4NTAzODMzRTQ5MEExMThERUE3MEM1MUZCMENGMUQwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsqyRKWNErEe+FmMlAsEzKUMZr
b548xQsT97Ll0qulcGJYX8AOJ9YUUHgow6tr60WHXmVqVTmzOFZ7A9QpCezgkxB2
5KvyJ7zWErjqtJZT3iPSWdleUgdpVAMWfpOoAuu2/sq4SYSSZmmjqMgA9zaBIQCv
wXeWM58deNStK5jTF6caJ4nifjwwWvXdSjHfTvqQ8hIlDB/VHnAEkd/AJ3R2xJdQ
ZqyHU07aWnTre5+rgJ38JT82sTSKt/INS35+JPpb9vfgoT9k9+pFuf7hsPky4bQr
ywGKju6d2z/xKnnlJGKnc/ii5jf8asvBlsDE/osb1SOQYT+8wdxeZWB+w1qBAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQUhjDWMZeFA4M+SQoRjepwxR+wzx0wHwYDVR0j
BBgwFoAUGU9u9lnxEVwGirWQZdV/FQ4j9bYwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9j
ZmFiZWM3MS03ZWNiLTRkYmQtYTQyMS05OWI5Y2QyMDkwM2EvMC8xOTRGNkVGNjU5
RjExMTVDMDY4QUI1OTA2NUQ1N0YxNTBFMjNGNUI2LmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMTk0RjZFRjY1OUYxMTE1QzA2OEFCNTkwNjVENTdGMTUwRTIz
RjVCNi5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2NmYWJlYzcxLTdlY2ItNGRiZC1h
NDIxLTk5YjljZDIwOTAzYS8wLzM0MzMyZTMyMzQzMDJlMzIzMjM2MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzYzMzM0MzkzMy5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEACvw4jANBgkqhkiG
9w0BAQsFAAOCAQEAHQN/R8rWynDcSp3bxHSxeJ4uvkRs+kbBOflKmLc/isWxiCxK
OKg4yyCfmGyjlYpKQTOyvZiMlj/RFWoF6kxv+oapH3VROC6B219/JAPfM1SM2WkJ
JXckAG8IGdhULclozRmNms0L0sggUDibE7Uq77wHET0R/af2Ex9s0tEDVyg0yL0M
xBHz5QtOF33iJrruOdjOH7KO50sM9PSlMZKuV6ZG3K6Tv5istPDi+n56JOYoPZG6
jFbizvQ0ZELmgRMfkxBWvYBRy3NbWGwVOxvjzjox7XInxqZ+yXLeAAT8wwf92czr
GeHMNPO3jyXeToIFuJhdcb+VwACMdEi6YPOMbw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:16 2024 by rpki-client on console-fra.rpki-client.org