Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/f38a2319-b4ff-4973-8da9-c41ad2f731f3/0/3230322e38302e3132372e302f32342d3234203d3e20313338383534.roa
File: 3230322e38302e3132372e302f32342d3234203d3e20313338383534.roa (raw, json)
Hash identifier: 49+9CaklNj7eUk0pdBb3FgNhe45FQBY9TyvJfmBJRss=
Subject key identifier: 9A:D7:D3:76:51:C6:43:DE:00:B7:47:4E:2A:D7:C1:4B:34:A6:0B:5F
Certificate issuer: /CN=BE69E9E299CE2DFF176C7EFAB145442D3C790DC8
Certificate serial: 4A56CB731A8CF7D0146C9F763CDADB77EC679A21
Authority key identifier: BE:69:E9:E2:99:CE:2D:FF:17:6C:7E:FA:B1:45:44:2D:3C:79:0D:C8
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE69E9E299CE2DFF176C7EFAB145442D3C790DC8.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/f38a2319-b4ff-4973-8da9-c41ad2f731f3/0/3230322e38302e3132372e302f32342d3234203d3e20313338383534.roa
Signing time: Sun 25 Dec 2022 07:59:58 +0000
ROA not before: Sun 25 Dec 2022 07:54:58 +0000
ROA not after: Sun 24 Dec 2023 07:59:58 +0000
asID: 138854
IP address blocks: 202.80.127.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
4a:56:cb:73:1a:8c:f7:d0:14:6c:9f:76:3c:da:db:77:ec:67:9a:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BE69E9E299CE2DFF176C7EFAB145442D3C790DC8
Validity
Not Before: Dec 25 07:54:58 2022 GMT
Not After : Dec 24 07:59:58 2023 GMT
Subject: CN=9AD7D37651C643DE00B7474E2AD7C14B34A60B5F
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:96:29:43:f8:cf:95:39:ad:00:78:13:b3:e3:
17:56:e7:8d:a8:3d:68:1f:50:93:2a:c4:64:a1:65:
c2:5a:9c:1e:95:e4:75:04:43:04:b4:0d:2a:8c:cb:
ae:a3:56:d0:7f:5f:39:b4:fd:54:71:08:63:f6:6c:
3e:65:62:bb:71:8f:20:4d:34:a1:61:07:7d:0f:87:
97:d6:49:f5:b9:1a:9d:e9:d7:5b:5a:38:3e:8d:34:
08:ae:9d:26:7b:1b:d9:8c:70:22:a3:1d:b5:b0:17:
e0:76:ad:cf:f3:39:83:1c:c0:32:b8:46:4c:34:70:
62:c3:81:15:08:1e:02:79:57:bc:94:77:f3:52:14:
04:7a:85:e6:20:d3:e5:50:45:75:96:38:bd:db:ff:
15:7e:c2:f0:06:37:38:ff:c6:7c:21:84:d1:7a:7a:
61:46:4e:5f:dd:2f:60:27:42:a6:6b:45:22:2f:30:
22:34:7a:03:52:e3:dc:c9:2b:b9:7d:de:dc:2e:c0:
15:4b:d8:7e:54:c2:92:8d:09:18:59:00:44:35:c2:
1e:23:4e:aa:39:30:68:31:cb:61:b7:d1:a3:bd:f7:
83:e0:0b:8f:09:23:2f:3e:9b:39:b1:38:b5:04:68:
a7:b6:74:f2:15:1d:f8:f2:68:f1:99:88:79:6a:69:
c9:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:D7:D3:76:51:C6:43:DE:00:B7:47:4E:2A:D7:C1:4B:34:A6:0B:5F
X509v3 Authority Key Identifier:
keyid:BE:69:E9:E2:99:CE:2D:FF:17:6C:7E:FA:B1:45:44:2D:3C:79:0D:C8
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/f38a2319-b4ff-4973-8da9-c41ad2f731f3/0/BE69E9E299CE2DFF176C7EFAB145442D3C790DC8.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BE69E9E299CE2DFF176C7EFAB145442D3C790DC8.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/f38a2319-b4ff-4973-8da9-c41ad2f731f3/0/3230322e38302e3132372e302f32342d3234203d3e20313338383534.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.80.127.0/24
Signature Algorithm: sha256WithRSAEncryption
39:d0:37:7b:82:20:78:d9:e3:cf:f6:b9:83:4c:63:6b:b9:c9:
72:9e:41:85:cd:bd:75:21:ab:f5:28:6c:1a:e4:d9:cd:07:4e:
e3:f8:01:e1:53:0d:36:c3:db:ab:f9:fc:c9:ea:90:98:93:54:
27:d0:c0:08:fa:e9:51:d6:5f:a2:51:2e:14:57:b7:87:6a:d0:
66:ac:0e:4a:f5:1b:5e:51:0f:87:b5:94:53:a3:26:e4:b7:64:
41:74:41:0d:a7:1b:f6:2d:6a:46:4e:34:63:16:76:f8:5a:ff:
db:87:31:7a:83:ee:26:61:51:18:0e:4a:f6:4b:4f:48:98:50:
ab:80:3b:e9:e6:91:46:c0:c4:8a:cd:b0:83:5d:52:9a:f2:e1:
ab:92:15:ce:c8:d2:7b:35:3b:5c:38:43:fa:20:c3:5d:7b:af:
ef:18:d0:e1:10:a9:fd:2e:c1:09:40:2e:6f:c8:db:81:0a:61:
ee:77:af:a9:dd:ae:21:9f:51:f0:48:97:e9:e5:21:42:d4:81:
b8:62:f0:0d:97:bb:11:dd:36:2a:2b:7c:47:b6:3f:6d:de:61:
c5:ca:cb:c0:8f:ea:a3:ce:4b:5a:3d:80:42:dc:d0:02:72:50:
32:38:d6:43:e6:ed:10:0a:f0:3e:78:df:fb:c4:e2:9b:24:ff:
ae:49:1f:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:36:52 2024 by rpki-client on console-ams.rpki-client.org