Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134392e3233342e302f32332d3234203d3e20313333383135.roa
File: 3130332e3134392e3233342e302f32332d3234203d3e20313333383135.roa (raw, json)
Hash identifier: +nzlKxIxV5XdMyVdXtzmXek+AR2fkb3BUa6BL5DeVBs=
Subject key identifier: 2D:BD:6E:FC:16:10:9D:7E:11:6B:FF:0C:FB:12:60:1B:6C:4B:B5:0B
Certificate issuer: /CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Certificate serial: 707266B1AC1B30A2D5981A422E582BF201458687
Authority key identifier: BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134392e3233342e302f32332d3234203d3e20313333383135.roa
Signing time: Fri 05 Nov 2021 17:00:03 +0000
ROA not before: Fri 05 Nov 2021 16:55:03 +0000
ROA not after: Sat 05 Nov 2022 17:00:03 +0000
asID: 133815
IP address blocks: 103.149.234.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
70:72:66:b1:ac:1b:30:a2:d5:98:1a:42:2e:58:2b:f2:01:45:86:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A91862140000/serialNumber=BA8F77D21E58FE9C939A6B70E2585617E183376B
Validity
Not Before: Nov 5 16:55:03 2021 GMT
Not After : Nov 5 17:00:03 2022 GMT
Subject: CN=3082010A0282010100BC9A029E4B5A703A00C21FF35238B5E0844BA6F0FFFCCA808F69EA9D425B9AF0C92D0954248494E4EF0EF3DF8076BC512D2633C882C1CC1773A6B9024BF6DC61D771022ECC4BEF6A2A12A652A45CE346DB97369C2397079733547AB14E834EEA240954181C45492CCF1C64CA3F996F0C2D766A6A739AC77DBDC8A9C1D8BE88929BCB106FEA96D59D2A9646DA28D7CEE926145649273C281E64A656A6986BAA33C177BACF29040FFB462716F7B4C85090F58AD18577DD15D7DC8628B4988DB8A00B2B6BC3271D6C9C810B8256A3B509E7420D7F22E612AC517B719CD95C33699A8159538C2B5B235FE0CCD661F7F4F7B319A81D461744C58D5F2E982BA4FD11EB0203010001
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9a:02:9e:4b:5a:70:3a:00:c2:1f:f3:52:38:
b5:e0:84:4b:a6:f0:ff:fc:ca:80:8f:69:ea:9d:42:
5b:9a:f0:c9:2d:09:54:24:84:94:e4:ef:0e:f3:df:
80:76:bc:51:2d:26:33:c8:82:c1:cc:17:73:a6:b9:
02:4b:f6:dc:61:d7:71:02:2e:cc:4b:ef:6a:2a:12:
a6:52:a4:5c:e3:46:db:97:36:9c:23:97:07:97:33:
54:7a:b1:4e:83:4e:ea:24:09:54:18:1c:45:49:2c:
cf:1c:64:ca:3f:99:6f:0c:2d:76:6a:6a:73:9a:c7:
7d:bd:c8:a9:c1:d8:be:88:92:9b:cb:10:6f:ea:96:
d5:9d:2a:96:46:da:28:d7:ce:e9:26:14:56:49:27:
3c:28:1e:64:a6:56:a6:98:6b:aa:33:c1:77:ba:cf:
29:04:0f:fb:46:27:16:f7:b4:c8:50:90:f5:8a:d1:
85:77:dd:15:d7:dc:86:28:b4:98:8d:b8:a0:0b:2b:
6b:c3:27:1d:6c:9c:81:0b:82:56:a3:b5:09:e7:42:
0d:7f:22:e6:12:ac:51:7b:71:9c:d9:5c:33:69:9a:
81:59:53:8c:2b:5b:23:5f:e0:cc:d6:61:f7:f4:f7:
b3:19:a8:1d:46:17:44:c5:8d:5f:2e:98:2b:a4:fd:
11:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:BD:6E:FC:16:10:9D:7E:11:6B:FF:0C:FB:12:60:1B:6C:4B:B5:0B
X509v3 Authority Key Identifier:
keyid:BA:8F:77:D2:1E:58:FE:9C:93:9A:6B:70:E2:58:56:17:E1:83:37:6B
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3130332e3134392e3233342e302f32332d3234203d3e20313333383135.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.149.234.0/23
Signature Algorithm: sha256WithRSAEncryption
03:9b:86:6e:23:ef:c5:55:eb:97:5e:90:5d:bf:e7:d8:91:a8:
f2:e3:c1:89:86:49:ec:0c:da:46:4e:cd:d4:9f:70:be:fa:5d:
2b:30:5e:30:06:ae:9e:a4:71:e8:14:5d:86:db:be:03:c3:3e:
3d:42:87:db:ae:f9:a0:11:c6:ee:2c:eb:ae:2b:3e:fa:06:95:
83:d9:ff:b8:bf:bd:6b:7a:9e:58:63:75:5d:13:47:9e:ab:7b:
da:3c:69:2c:fe:29:32:7b:e6:2a:2e:ec:71:5f:36:3d:b9:62:
26:a2:53:aa:ae:ad:9c:24:fa:44:9c:90:00:55:b0:f9:33:bc:
b5:c7:1a:53:25:f7:0a:0e:5f:5d:03:13:81:c3:34:2b:78:98:
f8:ac:ca:f1:ed:a8:70:f4:c2:e6:63:7c:41:c1:7d:85:ea:0c:
0c:d4:8e:f6:49:5b:e6:59:2a:9c:65:7f:6e:c6:06:82:eb:d2:
ff:74:5f:d9:9b:63:d5:99:42:98:87:5f:f8:40:b7:66:46:c5:
8a:11:b9:32:99:2b:9e:03:44:02:1a:13:00:93:22:e0:bd:3f:
bc:4b:cb:ac:de:8d:0e:21:ca:48:ca:f6:04:22:8d:2d:b6:a9:
6a:12:ae:b4:be:02:0b:a0:62:74:3f:ff:ef:a3:b8:c6:c6:2c:
90:8f:83:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 19 23:13:49 2023 by rpki-client on console-fra.rpki-client.org