Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3230322e38372e3137372e302f32342d3234203d3e20313338313134.roa
File: 3230322e38372e3137372e302f32342d3234203d3e20313338313134.roa (raw, json)
Hash identifier: XaxRx1e1GP/ABJlWXsDkMdzVhXiMjLw3hpc4OD0ZHAc=
Subject key identifier: C6:2F:D7:3F:3D:AB:30:3B:BD:DE:C2:67:2C:0D:4A:4B:89:C6:BB:B0
Certificate issuer: /CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
Certificate serial: 44BBE2F3565E8CBE7D9FAB9FF5F328DB606B32C2
Authority key identifier: 6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3230322e38372e3137372e302f32342d3234203d3e20313338313134.roa
Signing time: Mon 06 Feb 2023 08:34:44 +0000
ROA not before: Mon 06 Feb 2023 08:29:44 +0000
ROA not after: Mon 05 Feb 2024 08:34:44 +0000
asID: 138114
IP address blocks: 202.87.177.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
44:bb:e2:f3:56:5e:8c:be:7d:9f:ab:9f:f5:f3:28:db:60:6b:32:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
Validity
Not Before: Feb 6 08:29:44 2023 GMT
Not After : Feb 5 08:34:44 2024 GMT
Subject: CN=C62FD73F3DAB303BBDDEC2672C0D4A4B89C6BBB0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:ce:b7:f4:5a:41:6b:92:bf:66:43:e1:9d:00:
6e:b6:5c:a3:7c:3f:5d:f5:14:f1:25:84:d3:37:5b:
ad:56:ed:f8:cd:e0:4d:05:89:1b:f1:30:43:94:e6:
cf:ef:f7:fc:fd:3f:39:c4:dd:9f:ff:dc:bd:e6:30:
05:ca:25:9c:5b:3d:3a:3b:e4:b3:9e:1c:40:55:2a:
4e:be:2c:eb:6e:e6:90:29:5b:98:a1:22:58:d0:23:
f8:33:88:32:3a:e7:55:eb:37:02:38:cb:64:b6:b6:
23:ba:6b:da:f4:31:bb:70:c8:0d:13:12:85:3f:21:
db:b2:2d:1d:54:5e:7d:7c:60:d0:de:65:e8:2d:2d:
cf:88:23:31:62:0d:ae:44:28:22:52:90:14:47:18:
3a:da:ef:2e:a7:08:a4:27:52:f6:3b:f4:d7:25:fb:
eb:9d:6e:82:49:e1:99:f2:66:3c:e7:93:0b:5f:db:
05:ff:64:bc:14:65:8c:68:a8:08:c6:c3:54:fb:9d:
41:2a:33:9f:06:bb:25:bb:3d:d7:da:08:54:d9:0b:
25:9d:58:a3:75:a4:1f:37:3d:f2:14:78:b8:ba:35:
2d:9a:d6:f3:72:8d:f3:88:9c:22:50:93:db:d7:b2:
a7:25:25:95:e5:ff:7a:3f:99:35:80:09:45:f6:c9:
bd:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:2F:D7:3F:3D:AB:30:3B:BD:DE:C2:67:2C:0D:4A:4B:89:C6:BB:B0
X509v3 Authority Key Identifier:
keyid:6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3230322e38372e3137372e302f32342d3234203d3e20313338313134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.87.177.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:aa:46:9c:3c:ff:0b:6e:09:c4:59:59:3e:45:a9:4e:b1:bf:
09:ac:2d:73:29:90:90:5c:6c:73:77:9e:57:86:38:e8:ed:a6:
bb:6e:7c:5a:32:31:49:9d:9e:55:e7:9f:55:86:66:9d:09:93:
aa:01:d0:98:c6:8d:0d:c3:67:64:fc:2b:55:56:df:1d:0e:88:
62:5b:60:05:cf:d3:51:6d:77:4a:7b:35:3d:5a:37:3f:91:e3:
3f:40:76:a4:1a:c2:41:c7:87:2b:ca:5a:dd:a5:87:3c:9f:cc:
a7:39:6d:9d:ca:31:b5:4f:c6:51:e0:c2:60:bf:1f:a9:42:4f:
e8:a0:21:51:a8:4e:f9:91:43:99:fd:48:84:7b:aa:1d:d7:b7:
15:22:dd:13:a2:cc:08:03:8d:b2:18:6c:11:63:01:ea:6b:d8:
da:61:6b:24:d6:69:41:95:23:7a:d2:e3:b3:8e:bc:07:84:51:
de:08:cd:5d:2a:f6:fc:8f:85:e7:11:10:90:3e:dc:9b:de:6a:
22:00:e4:47:eb:9e:96:6c:2e:13:c4:50:59:7f:0f:d7:b8:40:
0b:a0:a4:c1:55:50:6c:4c:93:48:9d:03:0c:59:47:26:a5:5f:
f2:cd:4b:93:49:a8:df:9f:e5:e8:dd:89:cf:16:5e:bf:a4:a0:
2f:0b:62:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:16 2024 by rpki-client on console-fra.rpki-client.org