Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3230322e38372e3138372e302f32342d3234203d3e203338343936.roa
File: 3230322e38372e3138372e302f32342d3234203d3e203338343936.roa (raw, json)
Hash identifier: IsKE4Du4ufHUYy2e5cgQJnTp7SNQPRoOuppjqi/pMyk=
Subject key identifier: C1:F1:E5:56:DB:42:E2:40:28:8F:53:B1:47:BA:19:98:39:4E:D0:1E
Certificate issuer: /CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
Certificate serial: 07F6F0159E093119C0E863F71A6CB7C878FAD1FA
Authority key identifier: 6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3230322e38372e3138372e302f32342d3234203d3e203338343936.roa
Signing time: Sat 04 Jun 2022 04:00:02 +0000
ROA not before: Sat 04 Jun 2022 03:55:02 +0000
ROA not after: Sat 03 Jun 2023 04:00:02 +0000
asID: 38496
IP address blocks: 202.87.187.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
07:f6:f0:15:9e:09:31:19:c0:e8:63:f7:1a:6c:b7:c8:78:fa:d1:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
Validity
Not Before: Jun 4 03:55:02 2022 GMT
Not After : Jun 3 04:00:02 2023 GMT
Subject: CN=C1F1E556DB42E240288F53B147BA1998394ED01E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3f:39:70:4c:25:e0:c2:2c:98:1c:b0:62:90:
57:a3:72:92:28:b1:1c:2e:0d:e8:e5:8c:e0:4e:2f:
d0:f1:e6:3f:15:60:e6:3a:26:c8:d4:52:4c:db:13:
6d:7f:97:2a:e3:6c:94:e2:66:16:09:0c:5b:02:5a:
57:b5:d6:8d:ff:4f:84:48:9f:69:fd:b6:47:4b:81:
af:1c:1d:c2:82:b3:17:32:1c:5a:b9:c5:15:c0:2f:
1b:22:19:79:22:60:36:f3:6b:49:c6:31:b0:95:d8:
0e:91:0a:ec:b0:13:98:70:e3:dc:36:97:fd:87:db:
31:58:bb:e1:4a:ac:4c:64:45:70:af:39:9a:fe:37:
4d:bd:7a:f5:d6:10:3b:d2:f0:7d:17:85:72:0f:28:
49:fe:8a:7f:26:6e:59:a9:45:3f:00:e7:2a:3c:8f:
66:32:93:93:75:02:b8:3a:69:eb:50:83:43:e9:6a:
f7:39:9b:18:ab:20:c1:b7:56:2a:c8:d6:a8:d1:37:
2e:d8:3e:64:59:25:33:5f:93:cd:82:13:35:c3:51:
20:ce:78:24:e9:cc:b2:77:84:cf:8f:e9:cc:29:d1:
62:e1:d9:d9:3e:26:27:55:fb:46:7e:b8:f8:6f:0c:
3b:73:70:43:b4:89:df:0a:0b:04:9f:37:18:74:30:
5e:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:F1:E5:56:DB:42:E2:40:28:8F:53:B1:47:BA:19:98:39:4E:D0:1E
X509v3 Authority Key Identifier:
keyid:6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3230322e38372e3138372e302f32342d3234203d3e203338343936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.87.187.0/24
Signature Algorithm: sha256WithRSAEncryption
53:47:d5:7b:f3:8f:44:8e:d3:da:3d:40:4e:06:70:8e:62:d8:
1d:ad:19:c6:90:80:82:23:69:30:f0:3b:ff:ec:76:2a:fd:34:
e4:17:ea:08:f9:2f:4b:4a:d2:da:22:15:ff:9a:d1:b0:2d:c1:
97:58:f0:36:69:fd:7e:72:58:d1:df:65:98:44:28:65:26:2f:
c3:27:e1:20:61:f5:71:ff:2d:23:18:30:6c:62:6d:be:94:c0:
0f:1e:37:d6:e7:78:8f:6b:df:2b:cc:3a:21:f6:95:3c:bc:17:
9f:68:6c:ae:69:12:e9:f0:12:8d:32:3d:91:d6:b4:02:63:9a:
02:3c:35:77:65:45:ae:ab:a8:4c:99:70:98:93:a8:ca:38:27:
92:ce:3f:ea:46:c9:72:bc:9d:1d:1a:d2:ef:18:0a:c1:29:0f:
4a:d3:48:6f:df:70:f4:db:49:f3:b1:98:3a:cc:c4:7b:f2:43:
a9:e6:6e:5a:b8:b1:bb:e8:ec:2d:2f:e9:9c:c1:20:a3:40:a0:
2c:5d:d9:1b:34:d3:5b:0e:e6:da:43:f0:d4:2f:8b:ac:f3:80:
5d:1c:f7:14:83:44:45:45:94:c0:cd:8c:b2:f2:1c:55:61:4f:
92:26:c4:e7:cf:73:c9:a0:40:fd:dd:69:38:31:b0:9f:80:48:
df:2d:88:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:52 2024 by rpki-client on console-ams.rpki-client.org