Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/f0a929c6-1e25-494a-b0f9-55fc4fc94fbc/0/3131392e322e36342e302f31392d3234203d3e203234323031.roa
File: 3131392e322e36342e302f31392d3234203d3e203234323031.roa (raw, json)
Hash identifier: GEtyG4IQhrwrBiN8M4Z39JJkX+T/5BayRt02UF8W8vg=
Subject key identifier: 8C:42:93:5D:83:3F:36:3C:D4:D4:C8:1F:2F:33:55:1E:A5:D9:8E:C2
Certificate issuer: /CN=8A0F7659BE6C916702994F1B653CA6335CF48F9F
Certificate serial: 143C7AA9D18250EE5A9DE2C7C7638C2844C8DCA9
Authority key identifier: 8A:0F:76:59:BE:6C:91:67:02:99:4F:1B:65:3C:A6:33:5C:F4:8F:9F
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A0F7659BE6C916702994F1B653CA6335CF48F9F.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f0a929c6-1e25-494a-b0f9-55fc4fc94fbc/0/3131392e322e36342e302f31392d3234203d3e203234323031.roa
Signing time: Sat 18 Jun 2022 07:01:11 +0000
ROA not before: Sat 18 Jun 2022 06:56:11 +0000
ROA not after: Sat 17 Jun 2023 07:01:11 +0000
asID: 24201
IP address blocks: 119.2.64.0/19 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:3c:7a:a9:d1:82:50:ee:5a:9d:e2:c7:c7:63:8c:28:44:c8:dc:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8A0F7659BE6C916702994F1B653CA6335CF48F9F
Validity
Not Before: Jun 18 06:56:11 2022 GMT
Not After : Jun 17 07:01:11 2023 GMT
Subject: CN=8C42935D833F363CD4D4C81F2F33551EA5D98EC2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:58:13:3f:21:a0:45:09:fe:08:1e:16:63:68:
54:ea:3b:1f:e6:7b:f6:69:1e:83:d9:2a:11:f7:20:
4c:48:eb:f2:a7:c9:a1:cc:12:1b:c2:37:82:31:d1:
39:27:2b:f7:b4:c8:24:b8:90:62:21:60:4a:30:2e:
46:e5:d4:c3:c8:73:00:ab:53:08:d4:45:7d:ef:35:
40:77:6d:bb:d4:8b:b5:b0:84:8c:65:b6:c6:f0:c3:
6e:cd:7f:16:86:de:6e:f4:b8:2f:63:5c:73:4d:d2:
d4:29:a3:ca:9b:b3:6d:e8:c0:bc:4c:4a:bd:48:87:
bf:1a:d1:98:31:31:4f:0d:70:12:f3:b0:7f:a3:a4:
41:31:70:00:3e:17:83:d2:d1:71:61:0b:e1:4d:ec:
ef:01:84:a8:6c:31:66:72:c4:71:97:67:16:d8:96:
04:74:f0:d5:f4:08:38:7b:40:55:69:3b:8f:84:6d:
22:62:12:3d:74:23:7f:4d:76:00:ba:d9:5f:d0:6d:
f6:02:97:90:be:88:be:fd:06:89:92:f7:98:34:36:
d5:40:e7:b3:95:ff:dc:b9:4e:d9:33:c2:f2:91:03:
a7:69:eb:6b:a2:2e:9f:2a:19:5c:57:49:36:d4:da:
ba:90:3a:93:65:20:4b:61:dd:a8:84:56:97:c7:e4:
be:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8C:42:93:5D:83:3F:36:3C:D4:D4:C8:1F:2F:33:55:1E:A5:D9:8E:C2
X509v3 Authority Key Identifier:
keyid:8A:0F:76:59:BE:6C:91:67:02:99:4F:1B:65:3C:A6:33:5C:F4:8F:9F
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f0a929c6-1e25-494a-b0f9-55fc4fc94fbc/0/8A0F7659BE6C916702994F1B653CA6335CF48F9F.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/8A0F7659BE6C916702994F1B653CA6335CF48F9F.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f0a929c6-1e25-494a-b0f9-55fc4fc94fbc/0/3131392e322e36342e302f31392d3234203d3e203234323031.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
119.2.64.0/19
Signature Algorithm: sha256WithRSAEncryption
b9:86:7f:bb:cb:e9:17:db:c7:8e:c6:e8:fa:fc:31:05:29:fd:
ef:26:06:91:d4:c2:dd:fa:f9:ac:53:14:1f:3b:bc:62:73:e0:
d8:af:13:d2:9c:ca:b9:ef:1c:58:e7:d1:d0:f1:4d:b3:03:ad:
ab:2d:d6:66:1d:a2:32:41:16:2d:4c:c2:05:11:6f:7d:5d:07:
4d:75:05:d9:7e:50:9e:8f:41:7f:36:0c:26:dc:31:3c:fd:79:
a6:be:81:10:f7:5c:14:73:c4:53:34:27:d6:43:78:bc:30:06:
85:5c:49:8a:23:7b:97:68:1c:3c:52:6c:b8:26:5e:23:e4:6b:
d1:5d:3e:3f:e4:88:1e:9e:ab:74:16:66:d8:3c:d6:92:d1:43:
b0:d2:9e:51:70:4c:4c:33:a7:35:80:eb:f4:e5:0a:08:7c:39:
9d:85:20:4a:73:9a:a4:c6:f4:89:85:3b:3a:53:99:a4:e2:e6:
43:be:53:28:41:9d:2d:53:c6:bb:90:e1:40:b4:a9:a9:3b:8e:
42:c6:4c:84:ef:3a:4d:b1:8c:82:59:85:23:1f:c0:5e:81:0c:
6b:d7:1a:17:e9:d1:f2:e4:5d:e8:22:b0:08:17:e4:9d:d0:0d:
cf:e9:29:38:67:d7:7b:16:5b:4c:82:7a:6b:77:61:e6:ca:46:
42:af:8c:17
-----BEGIN CERTIFICATE-----
MIIFIzCCBAugAwIBAgIUFDx6qdGCUO5aneLHx2OMKETI3KkwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoOEEwRjc2NTlCRTZDOTE2NzAyOTk0RjFCNjUzQ0E2MzM1
Q0Y0OEY5RjAeFw0yMjA2MTgwNjU2MTFaFw0yMzA2MTcwNzAxMTFaMDMxMTAvBgNV
BAMTKDhDNDI5MzVEODMzRjM2M0NENEQ0QzgxRjJGMzM1NTFFQTVEOThFQzIwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDhWBM/IaBFCf4IHhZjaFTqOx/m
e/ZpHoPZKhH3IExI6/KnyaHMEhvCN4Ix0TknK/e0yCS4kGIhYEowLkbl1MPIcwCr
UwjURX3vNUB3bbvUi7WwhIxltsbww27NfxaG3m70uC9jXHNN0tQpo8qbs23owLxM
Sr1Ih78a0ZgxMU8NcBLzsH+jpEExcAA+F4PS0XFhC+FN7O8BhKhsMWZyxHGXZxbY
lgR08NX0CDh7QFVpO4+EbSJiEj10I39NdgC62V/QbfYCl5C+iL79BomS95g0NtVA
57OV/9y5TtkzwvKRA6dp62uiLp8qGVxXSTbU2rqQOpNlIEth3aiEVpfH5L5rAgMB
AAGjggItMIICKTAdBgNVHQ4EFgQUjEKTXYM/NjzU1MgfLzNVHqXZjsIwHwYDVR0j
BBgwFoAUig92Wb5skWcCmU8bZTymM1z0j58wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby9m
MGE5MjljNi0xZTI1LTQ5NGEtYjBmOS01NWZjNGZjOTRmYmMvMC84QTBGNzY1OUJF
NkM5MTY3MDI5OTRGMUI2NTNDQTYzMzVDRjQ4RjlGLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvOEEwRjc2NTlCRTZDOTE2NzAyOTk0RjFCNjUzQ0E2MzM1Q0Y0
OEY5Ri5jZXIwgZ0GCCsGAQUFBwELBIGQMIGNMIGKBggrBgEFBQcwC4Z+cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vZjBhOTI5YzYtMWUyNS00OTRhLWIw
ZjktNTVmYzRmYzk0ZmJjLzAvMzEzMTM5MmUzMjJlMzYzNDJlMzAyZjMxMzkyZDMy
MzQyMDNkM2UyMDMyMzQzMjMwMzEucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUH
DgIwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgABMAYDBAV3AkAwDQYJKoZIhvcNAQEL
BQADggEBALmGf7vL6Rfbx47G6Pr8MQUp/e8mBpHUwt36+axTFB87vGJz4NivE9Kc
yrnvHFjn0dDxTbMDrast1mYdojJBFi1MwgURb31dB011Bdl+UJ6PQX82DCbcMTz9
eaa+gRD3XBRzxFM0J9ZDeLwwBoVcSYoje5doHDxSbLgmXiPka9FdPj/kiB6eq3QW
Ztg81pLRQ7DSnlFwTEwzpzWA6/TlCgh8OZ2FIEpzmqTG9ImFOzpTmaTi5kO+UyhB
nS1TxruQ4UC0qak7jkLGTITvOk2xjIJZhSMfwF6BDGvXGhfp0fLkXegisAgX5J3Q
Dc/pKThn13sWW0yCemt3YebKRkKvjBc=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:16 2024 by rpki-client on console-fra.rpki-client.org