Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/3130332e3234372e34322e302f32342d3234203d3e203538343836.roa
File: 3130332e3234372e34322e302f32342d3234203d3e203538343836.roa (raw, json)
Hash identifier: IpSmP7GAB+fv9ltT9e2tAEkXP7c/Y2MveBFbLttZm+4=
Subject key identifier: E2:0F:EC:C9:6B:CB:C7:EC:31:FD:2D:DD:45:F1:BE:AA:84:51:37:59
Certificate issuer: /CN=85D232B96AB560AF91A1D8CFA996C519460662C6
Certificate serial: 7340B94E0134EDB0D7555F464A1BAE3C417D6C54
Authority key identifier: 85:D2:32:B9:6A:B5:60:AF:91:A1:D8:CF:A9:96:C5:19:46:06:62:C6
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85D232B96AB560AF91A1D8CFA996C519460662C6.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/3130332e3234372e34322e302f32342d3234203d3e203538343836.roa
Signing time: Fri 22 Apr 2022 09:39:33 +0000
ROA not before: Fri 22 Apr 2022 09:34:33 +0000
ROA not after: Fri 21 Apr 2023 09:39:33 +0000
asID: 58486
IP address blocks: 103.247.42.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
73:40:b9:4e:01:34:ed:b0:d7:55:5f:46:4a:1b:ae:3c:41:7d:6c:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=85D232B96AB560AF91A1D8CFA996C519460662C6
Validity
Not Before: Apr 22 09:34:33 2022 GMT
Not After : Apr 21 09:39:33 2023 GMT
Subject: CN=E20FECC96BCBC7EC31FD2DDD45F1BEAA84513759
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:2a:5b:bc:fe:5f:bc:7f:53:49:1e:5d:fe:69:
0f:6c:73:a2:8c:05:85:25:e9:c0:8f:aa:27:9d:50:
6f:32:2a:88:ee:59:df:7f:52:86:60:f2:1d:39:d3:
70:96:3f:cb:0d:9f:c6:e4:2f:60:3c:35:0a:b3:32:
1a:b9:8c:da:bf:c4:1e:54:2d:a4:2a:0d:8d:c4:2c:
44:0c:4d:e6:2a:55:fe:91:cc:9f:ad:9b:04:9c:81:
bf:bf:2f:0f:b4:05:69:9c:81:40:0e:2b:0e:a9:5f:
65:c2:ef:9f:84:9b:04:8b:76:57:97:70:c0:63:7f:
d2:09:ed:ab:82:72:c6:ea:2c:ae:fa:e5:f2:91:28:
16:b2:ce:1e:51:6d:10:60:c2:06:49:0b:a4:c0:50:
a1:c5:59:2f:bc:46:a1:30:98:5e:b8:d3:e8:95:cf:
1b:c6:dc:63:ce:e3:2d:70:66:a2:d3:3c:2c:b3:da:
47:8f:73:bf:fa:af:3e:b4:7c:91:e3:91:0c:fc:17:
78:d8:02:de:73:e8:c0:0b:ef:39:35:f9:95:45:39:
bc:98:eb:b0:b4:d9:7a:c8:5a:da:6c:ee:b6:94:52:
d9:d1:bb:8e:16:de:b3:70:5d:e1:89:43:fc:c9:98:
42:3d:2f:5d:07:28:b4:01:15:7c:7f:ec:38:e0:a1:
d9:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:0F:EC:C9:6B:CB:C7:EC:31:FD:2D:DD:45:F1:BE:AA:84:51:37:59
X509v3 Authority Key Identifier:
keyid:85:D2:32:B9:6A:B5:60:AF:91:A1:D8:CF:A9:96:C5:19:46:06:62:C6
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/85D232B96AB560AF91A1D8CFA996C519460662C6.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/85D232B96AB560AF91A1D8CFA996C519460662C6.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/49556a31-937e-4afe-b99a-274c9524f981/0/3130332e3234372e34322e302f32342d3234203d3e203538343836.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.247.42.0/24
Signature Algorithm: sha256WithRSAEncryption
15:0e:9c:78:c7:f4:24:0f:c7:1e:98:8c:46:54:16:8b:53:c6:
a4:a3:2d:d7:47:aa:0b:a4:09:e7:8d:35:72:a1:fa:6b:20:19:
21:61:7b:43:41:6d:4a:06:65:80:4c:a6:d4:c1:e0:ba:cc:78:
ff:6d:8a:07:6a:00:31:bf:45:31:7b:75:8e:fc:d2:a0:44:76:
8f:ed:f4:48:f2:ea:1d:64:78:6f:4c:a9:1c:aa:02:cf:59:31:
4a:54:cb:83:23:d7:06:69:e7:17:f4:63:27:d4:97:33:f5:41:
5b:c7:37:27:19:46:46:44:77:f3:df:4b:37:d8:92:04:d1:3b:
61:8a:8a:68:8a:73:c9:1e:3f:b5:55:a9:65:ea:ec:0e:ac:c3:
b2:61:52:ef:95:5d:25:51:b1:fe:7d:5a:ff:c0:1d:25:9f:a1:
c2:88:a5:b9:e0:99:d0:b5:8c:07:62:e1:50:eb:51:d6:3a:e6:
f2:0e:43:16:69:0f:13:19:e1:93:f4:10:c0:fe:60:bf:57:d4:
39:4f:ed:b0:6d:a4:42:cc:cc:68:95:95:55:45:da:bb:a2:54:
1b:6d:e8:a2:75:39:97:e6:3d:c6:27:ab:41:87:b8:e0:79:68:
67:6f:20:bd:47:2a:84:67:46:7b:f2:54:d2:1b:b3:30:a2:94:
be:14:d4:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:14:01 2023 by rpki-client on console-ams.rpki-client.org