Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3230322e38372e3138392e302f32342d3234203d3e203338343936.roa
File: 3230322e38372e3138392e302f32342d3234203d3e203338343936.roa (raw, json)
Hash identifier: antvDDuPqY2dSTxytO5gqlDkFCnW0evkATK2eLcJkl0=
Subject key identifier: F6:B9:96:94:40:BB:37:10:A1:74:DC:7D:4A:24:E7:EB:1B:C5:01:D2
Certificate issuer: /CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
Certificate serial: 326BD951F461D07BDE2F5F3D699BA65DB3ACBE05
Authority key identifier: 6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3230322e38372e3138392e302f32342d3234203d3e203338343936.roa
Signing time: Sat 06 May 2023 04:00:01 +0000
ROA not before: Sat 06 May 2023 03:55:01 +0000
ROA not after: Sat 04 May 2024 04:00:01 +0000
asID: 38496
IP address blocks: 202.87.189.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
32:6b:d9:51:f4:61:d0:7b:de:2f:5f:3d:69:9b:a6:5d:b3:ac:be:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC
Validity
Not Before: May 6 03:55:01 2023 GMT
Not After : May 4 04:00:01 2024 GMT
Subject: CN=F6B9969440BB3710A174DC7D4A24E7EB1BC501D2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:c8:20:ab:3b:76:9d:81:5a:45:09:53:57:ae:
b9:65:15:f8:42:71:be:a8:f4:0d:58:e9:0f:33:fc:
21:2c:43:af:50:08:f3:d5:e6:18:25:3e:2f:48:3d:
d5:e7:8f:f8:4c:52:8b:c9:78:9d:0f:c9:23:ed:c7:
6b:c8:b1:df:00:b6:b8:77:c0:0b:a4:40:07:50:1a:
e5:f7:85:68:ad:40:cb:6f:26:96:36:68:a5:a3:03:
89:d1:bd:2d:48:27:fb:b4:51:8a:46:c8:96:96:13:
8d:35:58:79:4d:bf:f4:39:13:b6:40:4f:a7:ef:fb:
02:f5:ac:f4:3f:1a:3d:f9:b4:96:76:c1:d2:f3:83:
ed:21:4b:89:07:91:5a:1d:69:74:a9:a3:77:1e:8a:
81:a9:d5:35:50:93:4f:0a:81:1e:e8:c3:c7:84:6b:
39:39:e0:3b:6e:2c:63:44:b0:68:29:3d:75:7a:d3:
cd:1f:ec:02:6a:f4:be:c3:e3:f6:50:c5:dc:0f:21:
67:22:35:3f:25:16:9e:13:fb:cf:58:84:b2:54:6f:
57:65:a5:de:69:ca:30:67:e9:8b:2c:44:b2:62:45:
34:d3:f3:48:1e:e8:a1:eb:75:2b:ec:2f:aa:a6:88:
28:5a:0b:72:46:b3:3a:c0:6e:13:39:ad:53:22:1e:
1f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:B9:96:94:40:BB:37:10:A1:74:DC:7D:4A:24:E7:EB:1B:C5:01:D2
X509v3 Authority Key Identifier:
keyid:6A:D9:56:36:B6:B3:E0:D5:F9:0E:E4:1F:3C:3D:6D:51:F8:FC:06:EC
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/6AD95636B6B3E0D5F90EE41F3C3D6D51F8FC06EC.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/e87349fb-465e-4e8b-a974-90e939bcb0fb/0/3230322e38372e3138392e302f32342d3234203d3e203338343936.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.87.189.0/24
Signature Algorithm: sha256WithRSAEncryption
16:ae:a4:e3:92:9c:3d:bd:5b:9f:fd:76:9c:38:d5:0c:45:c4:
40:6c:a4:84:5e:97:86:08:04:af:b1:19:02:0f:ff:eb:77:08:
34:91:6b:57:ff:a4:9c:02:4e:a7:b6:36:00:60:89:af:52:dd:
60:b0:7f:30:2a:e2:9c:9a:8a:6e:52:20:56:c3:54:ce:e2:35:
d8:7a:aa:2e:a7:d3:24:5c:21:3d:ee:00:f1:2a:b4:90:a8:76:
54:02:23:e1:86:b6:d8:c1:59:80:d4:19:c2:f0:a2:79:bf:64:
1b:6b:6a:18:c9:50:71:69:62:27:11:23:a3:66:60:15:2c:f2:
1b:53:44:97:e1:d7:f9:07:0b:73:ef:de:56:7d:8d:71:56:55:
b7:0f:f5:3f:c7:5e:81:a0:b0:2f:16:55:0c:f2:11:d6:a5:f6:
bb:bc:28:9d:18:3e:64:93:13:e8:61:69:bf:e7:f2:fc:5f:34:
78:f6:34:84:ea:40:69:21:35:6e:19:a1:c1:3d:92:4e:7c:cf:
8d:ef:a0:7b:04:3d:ab:bb:05:a4:0c:31:f5:f7:e4:ac:cd:9d:
b2:35:90:72:96:b0:9b:83:e2:87:db:bf:b3:15:4f:f4:cf:73:
aa:0f:af:9c:62:7b:d6:d4:d8:51:b7:21:5d:dc:00:f2:06:cd:
8d:fb:28:cc
-----BEGIN CERTIFICATE-----
MIIFKDCCBBCgAwIBAgIUMmvZUfRh0HveL189aZumXbOsvgUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNkFEOTU2MzZCNkIzRTBENUY5MEVFNDFGM0MzRDZENTFG
OEZDMDZFQzAeFw0yMzA1MDYwMzU1MDFaFw0yNDA1MDQwNDAwMDFaMDMxMTAvBgNV
BAMTKEY2Qjk5Njk0NDBCQjM3MTBBMTc0REM3RDRBMjRFN0VCMUJDNTAxRDIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlyCCrO3adgVpFCVNXrrllFfhC
cb6o9A1Y6Q8z/CEsQ69QCPPV5hglPi9IPdXnj/hMUovJeJ0PySPtx2vIsd8Atrh3
wAukQAdQGuX3hWitQMtvJpY2aKWjA4nRvS1IJ/u0UYpGyJaWE401WHlNv/Q5E7ZA
T6fv+wL1rPQ/Gj35tJZ2wdLzg+0hS4kHkVodaXSpo3ceioGp1TVQk08KgR7ow8eE
azk54DtuLGNEsGgpPXV6080f7AJq9L7D4/ZQxdwPIWciNT8lFp4T+89YhLJUb1dl
pd5pyjBn6YssRLJiRTTT80ge6KHrdSvsL6qmiChaC3JGszrAbhM5rVMiHh/JAgMB
AAGjggIyMIICLjAdBgNVHQ4EFgQU9rmWlEC7NxChdNx9SiTn6xvFAdIwHwYDVR0j
BBgwFoAUatlWNraz4NX5DuQfPD1tUfj8BuwwDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9l
ODczNDlmYi00NjVlLTRlOGItYTk3NC05MGU5MzliY2IwZmIvMC82QUQ5NTYzNkI2
QjNFMEQ1RjkwRUU0MUYzQzNENkQ1MUY4RkMwNkVDLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNkFEOTU2MzZCNkIzRTBENUY5MEVFNDFGM0MzRDZENTFGOEZD
MDZFQy5jZXIwgaIGCCsGAQUFBwELBIGVMIGSMIGPBggrBgEFBQcwC4aBgnJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvL2U4NzM0OWZiLTQ2NWUtNGU4Yi1h
OTc0LTkwZTkzOWJjYjBmYi8wLzMyMzAzMjJlMzgzNzJlMzEzODM5MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzMzODM0MzkzNi5yb2EwGAYDVR0gAQH/BA4wDDAKBggr
BgEFBQcOAjAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMpXvTANBgkqhkiG
9w0BAQsFAAOCAQEAFq6k45KcPb1bn/12nDjVDEXEQGykhF6XhggEr7EZAg//63cI
NJFrV/+knAJOp7Y2AGCJr1LdYLB/MCrinJqKblIgVsNUzuI12HqqLqfTJFwhPe4A
8Sq0kKh2VAIj4Ya22MFZgNQZwvCieb9kG2tqGMlQcWliJxEjo2ZgFSzyG1NEl+HX
+QcLc+/eVn2NcVZVtw/1P8degaCwLxZVDPIR1qX2u7wonRg+ZJMT6GFpv+fy/F80
ePY0hOpAaSE1bhmhwT2STnzPje+gewQ9q7sFpAwx9ffkrM2dsjWQcpawm4Pih9u/
sxVP9M9zqg+vnGJ71tTYUbchXdwA8gbNjfsozA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:16 2024 by rpki-client on console-fra.rpki-client.org