Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3131352e3137382e3134382e302f32322d3234203d3e20313331373336.roa
File: 3131352e3137382e3134382e302f32322d3234203d3e20313331373336.roa (raw, json)
Hash identifier: c6Z1fa3Zaz8vVTzGfAl8d2OzUTgsmRYlTDozXfV2AlA=
Subject key identifier: 8F:ED:38:67:C4:2D:C6:12:35:D5:03:E9:65:65:29:3E:31:96:70:C4
Certificate issuer: /CN=09A6F1FA4FC532D6B4E13462FC234C9C763CF361
Certificate serial: 0EB02EB1BD43243351F0755AFB29C66310138FB7
Authority key identifier: 09:A6:F1:FA:4F:C5:32:D6:B4:E1:34:62:FC:23:4C:9C:76:3C:F3:61
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3131352e3137382e3134382e302f32322d3234203d3e20313331373336.roa
Signing time: Wed 16 Mar 2022 07:37:26 +0000
ROA not before: Wed 16 Mar 2022 07:32:26 +0000
ROA not after: Wed 15 Mar 2023 07:37:26 +0000
asID: 131736
IP address blocks: 115.178.148.0/22 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
0e:b0:2e:b1:bd:43:24:33:51:f0:75:5a:fb:29:c6:63:10:13:8f:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09A6F1FA4FC532D6B4E13462FC234C9C763CF361
Validity
Not Before: Mar 16 07:32:26 2022 GMT
Not After : Mar 15 07:37:26 2023 GMT
Subject: CN=8FED3867C42DC61235D503E96565293E319670C4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:87:5e:01:96:be:eb:5d:45:eb:29:ad:7f:fb:
44:de:c8:8f:04:df:ab:b1:3a:60:68:64:25:38:ee:
6a:d2:45:ac:b4:c5:1e:15:cf:73:67:a6:5e:0e:3c:
0e:32:0b:39:e4:8d:bf:4e:f1:24:51:80:39:bd:15:
0e:11:e6:62:80:bb:68:c8:11:64:ce:b5:e4:8f:15:
a7:6d:71:da:0d:9b:59:f3:e9:bc:1c:cd:98:2b:af:
1e:e1:f8:1f:a4:64:c0:92:5b:2a:bf:31:a9:f4:1c:
fa:cf:b0:1e:f4:b2:ad:65:99:02:a3:63:d2:d0:f5:
35:d8:4e:df:c6:25:09:88:3e:99:3d:34:88:44:82:
ed:48:13:5b:37:f2:65:f2:45:72:71:4f:ad:d3:04:
92:8c:67:0c:0a:04:f1:fc:59:3a:05:90:22:99:61:
e0:df:9f:9e:68:d0:eb:d4:d9:2a:80:c0:ee:e0:2d:
7b:2a:b2:1c:b3:a6:28:d8:bc:85:7f:1f:bb:87:58:
c5:24:3a:d2:3c:8a:b6:34:33:89:41:61:6d:61:53:
15:f1:54:37:3d:d3:de:29:ec:6b:0b:88:68:1d:f6:
08:84:a1:8e:79:e1:f5:e7:1c:5f:83:2d:9e:6c:47:
74:01:a2:df:39:6f:cf:db:1a:3a:98:1d:bd:62:de:
94:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:ED:38:67:C4:2D:C6:12:35:D5:03:E9:65:65:29:3E:31:96:70:C4
X509v3 Authority Key Identifier:
keyid:09:A6:F1:FA:4F:C5:32:D6:B4:E1:34:62:FC:23:4C:9C:76:3C:F3:61
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/09A6F1FA4FC532D6B4E13462FC234C9C763CF361.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f34ecc40-6b84-49e8-b60b-6e9904128ca8/0/3131352e3137382e3134382e302f32322d3234203d3e20313331373336.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
115.178.148.0/22
Signature Algorithm: sha256WithRSAEncryption
7a:6a:d2:8a:96:f3:ba:54:e4:d0:44:7e:fc:4f:bf:19:4a:f2:
b1:84:26:f3:ca:ab:f5:fe:94:a5:8a:7f:4e:85:a4:d6:ff:0a:
aa:ab:92:41:54:f3:1d:24:67:1e:fb:39:3f:3e:05:dc:ed:bd:
3e:a2:5d:a0:42:1c:cd:b7:80:9f:8c:b3:64:6b:51:6f:bb:57:
6d:14:5c:f8:e9:41:0c:19:ce:7f:6e:99:75:fd:db:a5:48:bb:
ed:ea:80:9e:b0:17:4c:79:4e:3b:44:2d:7a:ce:b1:a3:79:18:
a8:c0:21:35:8f:ee:93:56:96:18:3a:ef:0e:b9:6e:d0:ff:62:
37:07:16:21:90:c6:b6:e0:86:00:b5:3d:78:61:fc:b7:e1:26:
d0:10:21:3f:c7:7f:79:8b:b8:93:05:e8:bf:94:bf:94:ad:13:
0f:c5:d8:60:25:ac:62:86:1c:e4:be:5f:94:df:d6:e5:ff:0c:
60:ca:63:97:99:56:90:69:48:99:6b:5c:87:ad:34:c6:3f:2f:
52:c9:4e:36:c3:82:52:69:d2:36:7b:4f:62:24:c6:c7:4d:13:
f9:ca:d3:71:ab:71:5e:87:2d:95:43:ea:a0:6c:6e:58:5f:0e:
b2:8e:30:0e:43:a7:a0:3e:f3:4c:a4:73:8b:8a:58:3d:0d:09:
21:ea:b8:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:07 2023 by rpki-client on console-fra.rpki-client.org