Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/3230322e35312e33302e302f32342d3234203d3e20313338303930.roa
File: 3230322e35312e33302e302f32342d3234203d3e20313338303930.roa (raw, json)
Hash identifier: 5szw6WjH6ANLqOdzeQqw3g0lAe7WEv17whWYogEZAgM=
Subject key identifier: 2D:DE:4A:A5:47:4B:2F:A9:2E:FA:0F:B9:A0:A4:06:6E:7F:DB:07:CE
Certificate issuer: /CN=9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0
Certificate serial: 59EA9276BA0322275C57B7D3094A1A78A9D3B5EF
Authority key identifier: 9E:6A:67:D5:B9:D7:25:C1:F4:09:A9:FB:3B:F3:5A:07:1A:B4:20:A0
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/3230322e35312e33302e302f32342d3234203d3e20313338303930.roa
Signing time: Tue 17 May 2022 04:28:34 +0000
ROA not before: Tue 17 May 2022 04:23:34 +0000
ROA not after: Tue 16 May 2023 04:28:34 +0000
asID: 138090
IP address blocks: 202.51.30.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
59:ea:92:76:ba:03:22:27:5c:57:b7:d3:09:4a:1a:78:a9:d3:b5:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0
Validity
Not Before: May 17 04:23:34 2022 GMT
Not After : May 16 04:28:34 2023 GMT
Subject: CN=2DDE4AA5474B2FA92EFA0FB9A0A4066E7FDB07CE
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:57:6b:ef:f9:8e:a8:0a:85:a1:ba:84:a5:e4:
03:fa:d8:da:0e:b4:30:22:d3:81:1a:d0:35:48:13:
ff:bb:35:ad:73:c5:c4:2c:17:15:b4:d4:91:d1:71:
9e:ae:ed:74:b5:c1:21:9b:bb:df:76:ef:f3:5a:b6:
c9:26:f1:91:d0:a2:4a:b1:bb:7c:33:19:dd:11:ea:
39:b4:2c:22:31:72:a2:0e:03:eb:6e:ab:91:cb:67:
6d:0d:48:ae:91:56:e9:16:5d:51:4d:29:a4:4d:ae:
4a:8b:29:a0:52:db:bd:1c:e9:a5:ba:ed:77:a2:75:
53:c5:8e:92:1e:31:0e:eb:e6:fd:28:58:6d:6e:ac:
95:24:0b:f8:68:01:9a:15:ce:e2:87:41:da:49:ac:
28:8f:5a:77:0e:d8:7d:b7:74:e7:79:a1:ae:2e:00:
8f:84:4e:55:92:b7:f9:f8:c1:86:ae:ce:f1:d7:33:
81:d8:70:45:05:1b:5a:29:0e:a9:ad:a8:50:46:a5:
9b:8b:b2:76:0c:21:23:c6:21:4d:d7:c8:34:b0:de:
93:e8:c3:10:92:1b:8c:ef:c0:d1:80:40:67:c6:f0:
b8:e7:3c:44:86:ba:49:cc:de:70:03:ae:ee:3c:b0:
4e:18:14:f1:34:25:36:7f:3a:8d:15:8c:6e:9d:5e:
37:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:DE:4A:A5:47:4B:2F:A9:2E:FA:0F:B9:A0:A4:06:6E:7F:DB:07:CE
X509v3 Authority Key Identifier:
keyid:9E:6A:67:D5:B9:D7:25:C1:F4:09:A9:FB:3B:F3:5A:07:1A:B4:20:A0
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/9E6A67D5B9D725C1F409A9FB3BF35A071AB420A0.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/994e6b2d-3ddb-46eb-83ef-c99b2003783f/0/3230322e35312e33302e302f32342d3234203d3e20313338303930.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.51.30.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:ad:fd:1c:d7:ed:78:71:5d:95:fb:99:05:9b:19:2c:05:df:
5f:b6:82:08:58:df:91:55:3a:33:ca:93:8c:95:ae:6f:eb:8e:
10:f2:7d:a5:c2:dc:8d:b8:22:a5:5b:3f:79:72:94:90:f2:cf:
79:f9:5e:78:cc:d2:ff:b0:69:23:fa:df:87:e1:60:59:8a:eb:
a4:b8:f7:49:2e:25:dd:61:b7:c1:03:9e:92:dc:56:16:27:0b:
55:e8:e9:76:a7:ad:fa:61:b3:74:fb:75:13:d3:15:f8:40:ad:
9b:9a:e2:65:19:d8:2e:01:df:dc:41:42:96:ff:3a:e1:c7:64:
23:b3:36:c5:76:58:bb:02:55:6d:98:69:85:fa:a8:a8:7e:4e:
c3:ff:01:60:be:d3:4e:50:fe:aa:f7:d1:66:51:1b:b2:07:8e:
c3:f4:9f:b2:2f:d6:60:16:6e:ee:80:62:85:97:c2:9c:75:07:
f4:b0:51:95:eb:c1:49:31:83:22:af:c0:13:8e:1d:22:1d:0d:
f4:11:f4:62:7b:cc:73:be:2a:ae:fc:c0:06:3a:ff:c2:79:ea:
29:d0:b5:e2:e8:5d:39:69:79:16:2e:58:28:28:c5:fa:f6:cd:
f8:08:55:11:02:25:0b:82:78:c0:ec:d2:ad:48:24:5f:cf:82:
34:c7:5d:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 12 17:09:42 2025 by rpki-client