Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/fd1fc1a2-ee77-405f-9e31-adc6dfc9b74c/0/3135372e31352e3231322e302f32342d3234203d3e20313532343036.roa
File: 3135372e31352e3231322e302f32342d3234203d3e20313532343036.roa (raw, json)
Hash identifier: ILdIplNUn5zzvV+8+nEtx6VwnOOAN7tEdP7POnsDWcQ=
Subject key identifier: 54:FB:DA:EE:F8:87:0C:CA:93:BB:96:13:7C:53:83:ED:80:93:51:FD
Certificate issuer: /CN=F38B6752412BBA5BA6A00E0BD400D0920CA01E22
Certificate serial: 65CD20141BC82675DB5557F07EFA7955241BE702
Authority key identifier: F3:8B:67:52:41:2B:BA:5B:A6:A0:0E:0B:D4:00:D0:92:0C:A0:1E:22
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F38B6752412BBA5BA6A00E0BD400D0920CA01E22.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/fd1fc1a2-ee77-405f-9e31-adc6dfc9b74c/0/3135372e31352e3231322e302f32342d3234203d3e20313532343036.roa
Signing time: Tue 04 Mar 2025 13:02:13 +0000
ROA not before: Tue 04 Mar 2025 12:57:13 +0000
ROA not after: Tue 03 Mar 2026 13:02:13 +0000
asID: 152406
IP address blocks: 157.15.212.0/24 maxlen: 24
Validation: Failed, CRL has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
65:cd:20:14:1b:c8:26:75:db:55:57:f0:7e:fa:79:55:24:1b:e7:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=F38B6752412BBA5BA6A00E0BD400D0920CA01E22
Validity
Not Before: Mar 4 12:57:13 2025 GMT
Not After : Mar 3 13:02:13 2026 GMT
Subject: CN=54FBDAEEF8870CCA93BB96137C5383ED809351FD
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:08:eb:9d:4d:b6:80:5a:66:c0:ba:88:e5:a3:
d4:2c:e2:ca:fd:2e:fa:4e:2b:de:45:64:aa:15:f0:
8c:1e:65:9c:d4:53:76:30:cb:e1:51:2a:d1:52:f1:
38:c8:27:db:d5:78:27:6d:40:18:33:2a:e9:6a:4e:
b2:cc:9a:2c:aa:60:eb:4a:ed:a1:7a:de:52:9d:c6:
1e:22:e8:ce:53:ed:d7:eb:07:e7:d4:32:0e:95:b5:
0f:fd:a7:f4:c5:32:e9:87:36:7d:57:e0:52:65:bf:
6e:c9:92:fe:f6:e7:50:66:7b:4e:4c:8d:6e:0d:b7:
aa:e0:74:14:81:f8:5d:6d:4a:d7:b3:59:3d:29:ed:
dd:b4:2a:18:26:a6:04:1c:ab:c9:c8:ca:4f:5a:f3:
fe:3e:57:43:4f:49:65:d2:ec:a8:1b:f2:63:b8:9b:
ea:14:fe:cb:cd:3c:e6:5f:7f:42:dd:bd:86:68:39:
af:f4:8d:04:a9:70:1f:30:22:af:f7:b0:55:27:24:
30:57:47:33:11:67:9d:fe:7d:0d:31:94:9a:5b:4e:
79:5e:c1:a6:6c:e6:8c:a6:96:49:e9:84:44:70:3d:
1c:35:f3:9e:bf:d2:c6:9e:15:eb:5c:62:dc:f3:55:
cf:0a:1a:4c:03:4a:2e:99:6c:4c:27:72:42:c7:45:
3a:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
54:FB:DA:EE:F8:87:0C:CA:93:BB:96:13:7C:53:83:ED:80:93:51:FD
X509v3 Authority Key Identifier:
keyid:F3:8B:67:52:41:2B:BA:5B:A6:A0:0E:0B:D4:00:D0:92:0C:A0:1E:22
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/fd1fc1a2-ee77-405f-9e31-adc6dfc9b74c/0/F38B6752412BBA5BA6A00E0BD400D0920CA01E22.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/1/F38B6752412BBA5BA6A00E0BD400D0920CA01E22.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/fd1fc1a2-ee77-405f-9e31-adc6dfc9b74c/0/3135372e31352e3231322e302f32342d3234203d3e20313532343036.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.15.212.0/24
Signature Algorithm: sha256WithRSAEncryption
05:b0:2b:60:d4:9a:97:fa:21:41:7f:59:75:9d:80:ff:af:98:
2b:e8:0b:4f:a4:ab:4f:eb:32:29:06:b7:c4:22:dd:a8:e4:af:
61:ec:88:4d:0a:21:a8:8f:28:89:99:b5:ff:4d:57:dd:3d:0f:
f7:3d:e7:63:c6:12:3d:4b:cc:5a:bb:cb:39:51:ef:25:8f:83:
28:16:48:98:71:9c:93:8e:12:93:6a:f4:f6:0f:a8:a3:00:e2:
57:83:52:09:bb:9f:71:35:f1:90:26:5c:cd:b0:1b:48:1b:84:
14:c3:e0:87:f3:f5:71:b4:62:4b:d1:a0:e5:5f:2e:04:af:1c:
e1:36:a6:02:96:70:d0:16:d2:36:09:c9:bb:75:16:62:0b:6b:
d0:4e:72:26:e4:b7:41:41:6c:b6:fa:7b:94:39:6c:54:31:68:
fc:5f:02:78:a1:43:c7:0f:5f:7a:de:85:17:79:b7:7a:4b:f1:
ba:78:99:70:00:9d:ef:71:46:cf:2a:87:78:c8:98:68:af:d2:
7b:cd:70:ae:23:24:11:e2:7e:61:3e:9f:1d:eb:a7:ea:f7:6d:
f1:b1:93:d8:20:0c:6d:39:d4:ec:05:58:1f:cd:50:ca:78:8a:
90:83:2c:bf:5c:ae:0e:45:b4:05:77:7e:05:44:b9:c1:02:d4:
b3:d8:e6:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 7 18:14:25 2025 by rpki-client