Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/3130332e3234372e34312e302f32342d3234203d3e203538343836.roa
File: 3130332e3234372e34312e302f32342d3234203d3e203538343836.roa (raw, json)
Hash identifier: yK7AP3kX8m07Rb2qhLRd/WrCUQJaINEdQUZ8I4few3I=
Subject key identifier: EF:C6:1D:05:4D:B7:DF:9B:7A:DD:2A:30:51:96:BC:9B:A1:94:8A:D1
Certificate issuer: /CN=85D232B96AB560AF91A1D8CFA996C519460662C6
Certificate serial: 149C84D1D175115D1538FB859B203000A484DFE2
Authority key identifier: 85:D2:32:B9:6A:B5:60:AF:91:A1:D8:CF:A9:96:C5:19:46:06:62:C6
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85D232B96AB560AF91A1D8CFA996C519460662C6.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/3130332e3234372e34312e302f32342d3234203d3e203538343836.roa
Signing time: Fri 22 Apr 2022 09:39:07 +0000
ROA not before: Fri 22 Apr 2022 09:34:07 +0000
ROA not after: Fri 21 Apr 2023 09:39:07 +0000
asID: 58486
IP address blocks: 103.247.41.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
14:9c:84:d1:d1:75:11:5d:15:38:fb:85:9b:20:30:00:a4:84:df:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85D232B96AB560AF91A1D8CFA996C519460662C6
Validity
Not Before: Apr 22 09:34:07 2022 GMT
Not After : Apr 21 09:39:07 2023 GMT
Subject: CN=EFC61D054DB7DF9B7ADD2A305196BC9BA1948AD1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:52:64:b1:44:18:8a:3b:54:14:2e:bb:8c:33:
21:d8:33:2c:87:20:90:9c:a1:c7:33:e7:09:d2:65:
de:a9:f5:33:26:64:01:db:d3:ad:aa:86:b0:12:b7:
6c:85:38:b2:03:01:9d:e4:50:a3:15:92:cd:99:ac:
2c:ce:cc:b5:44:bf:cf:9d:15:5b:98:b7:fb:b7:81:
6a:ff:08:a4:ca:8b:d4:6f:2d:74:89:2e:71:d9:1f:
df:ff:89:2b:e8:c0:96:f4:a8:e4:c0:c1:28:3d:bd:
26:d8:64:c1:99:93:cb:0a:7d:4c:3e:1a:c9:40:03:
45:3d:d8:74:d9:1d:64:30:7e:29:a4:fa:bc:ed:a8:
3d:ca:b9:e0:c3:86:56:22:07:14:fd:84:74:26:29:
94:18:6b:61:bf:53:d7:ec:7a:bd:1e:1f:f9:05:93:
15:07:bb:40:44:b6:4d:23:24:3b:85:8c:e2:6a:4a:
1f:4b:4b:a7:bc:36:64:9b:3d:41:c2:11:cf:69:57:
64:6d:ce:ae:98:9e:9e:56:1f:73:13:ee:c7:64:30:
10:00:c0:f7:a7:2b:92:4d:b9:84:a5:28:51:a3:3a:
b4:a4:bc:4b:55:25:c3:64:ae:d1:cf:20:4b:c6:e3:
43:71:69:9b:ea:97:94:4b:9e:7a:47:e3:23:37:e6:
59:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:C6:1D:05:4D:B7:DF:9B:7A:DD:2A:30:51:96:BC:9B:A1:94:8A:D1
X509v3 Authority Key Identifier:
keyid:85:D2:32:B9:6A:B5:60:AF:91:A1:D8:CF:A9:96:C5:19:46:06:62:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/85D232B96AB560AF91A1D8CFA996C519460662C6.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85D232B96AB560AF91A1D8CFA996C519460662C6.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/3130332e3234372e34312e302f32342d3234203d3e203538343836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.247.41.0/24
Signature Algorithm: sha256WithRSAEncryption
41:a9:8c:d6:42:84:95:f4:0b:be:24:fb:81:f1:9c:30:fb:ed:
11:7c:7b:3d:3e:65:2d:f0:60:2f:eb:69:8a:d3:86:9e:9b:c7:
cc:84:f3:42:18:aa:fe:3d:d4:52:be:a0:26:be:6b:5c:4c:45:
c4:78:03:42:a3:c6:a8:03:e2:36:a4:93:e8:aa:13:6c:27:d2:
dc:89:bd:0e:d5:d4:d8:45:64:e9:1a:e7:07:7e:80:3a:96:6e:
96:19:85:2d:56:59:56:ee:67:d9:a5:d1:2a:14:09:3a:72:58:
f5:04:6c:b5:04:ed:6c:66:b1:c6:12:46:7b:91:be:9c:af:e7:
01:76:22:e9:55:e4:ba:f8:90:87:ae:a7:67:f9:da:3c:ad:1b:
78:c2:b0:7e:e4:81:ee:55:eb:95:0f:ee:f3:41:9d:05:c5:4d:
2d:97:bd:78:22:d7:b7:b4:fc:80:ea:66:4c:bd:fe:1b:c8:01:
3a:3d:7e:87:20:0c:b6:20:0e:26:d7:d6:cf:5a:5e:d0:d4:fb:
25:d3:10:b5:a3:86:af:d3:48:a2:89:bc:ce:79:06:28:17:e2:
52:39:f1:71:ec:ae:55:06:4e:5b:6f:a7:c6:9a:6f:43:98:79:
30:4f:18:b3:49:9d:2c:ae:63:70:6f:4e:fa:71:e5:53:0f:1e:
c2:e5:f6:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:01 2023 by rpki-client on console-ams.rpki-client.org