Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/007d5bb6-9da0-4c3c-9395-064596a4f789/0/3130332e3138382e31322e302f32342d3234203d3e20313439373437.roa
File: 3130332e3138382e31322e302f32342d3234203d3e20313439373437.roa (raw, json)
Hash identifier: gE6qOiiHyEa/ojYwSAOxLbP5BaRxFAaNr8wQy9tOAAs=
Subject key identifier: 03:99:D8:61:59:4E:A1:A4:C7:65:79:55:FB:89:D2:79:DE:CC:25:E0
Certificate issuer: /CN=5561020450CCF35D395065D493AABB1C3F275482
Certificate serial: 43C989E6D2DFE8517385F516AB4C1ACA5669ECDF
Authority key identifier: 55:61:02:04:50:CC:F3:5D:39:50:65:D4:93:AA:BB:1C:3F:27:54:82
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5561020450CCF35D395065D493AABB1C3F275482.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/007d5bb6-9da0-4c3c-9395-064596a4f789/0/3130332e3138382e31322e302f32342d3234203d3e20313439373437.roa
Signing time: Wed 08 Jun 2022 09:40:53 +0000
ROA not before: Wed 08 Jun 2022 09:35:53 +0000
ROA not after: Wed 07 Jun 2023 09:40:53 +0000
asID: 149747
IP address blocks: 103.188.12.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:c9:89:e6:d2:df:e8:51:73:85:f5:16:ab:4c:1a:ca:56:69:ec:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5561020450CCF35D395065D493AABB1C3F275482
Validity
Not Before: Jun 8 09:35:53 2022 GMT
Not After : Jun 7 09:40:53 2023 GMT
Subject: CN=0399D861594EA1A4C7657955FB89D279DECC25E0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:8d:6a:0e:c6:1d:e5:fe:5d:c9:c6:fc:6c:7d:
1b:17:8f:88:bf:9f:dc:7c:46:40:26:dc:33:dd:b0:
38:4f:01:fc:f8:c3:3d:b4:dc:52:17:39:79:6f:ad:
e8:cb:4b:db:5e:62:89:fa:38:5c:4f:1a:0e:3f:d4:
b4:0a:8a:9a:da:fb:86:9a:a7:d6:3b:44:9e:ee:c6:
7c:f2:35:3a:33:72:62:6d:09:90:b8:cc:80:4f:fe:
27:dc:e5:06:7f:80:ad:d3:3b:7c:13:4a:40:a7:6b:
d8:7e:29:8b:8a:ea:ed:b5:79:ea:fc:f3:dd:74:14:
db:2a:44:eb:88:96:3d:95:59:25:99:63:59:80:36:
de:3b:06:37:3a:25:93:e2:cb:58:09:31:07:6d:6c:
b4:1b:b6:15:a9:6a:fa:c2:12:d8:c8:11:89:c6:92:
7d:e7:75:13:d3:7f:92:21:53:34:56:b3:f1:43:e9:
ee:fa:02:92:ac:d3:fe:82:91:b2:bb:08:d3:01:a4:
2f:b6:a5:e6:a6:45:b4:53:f4:a6:ec:2f:4b:8b:f9:
49:ed:23:49:bb:57:b2:9b:dd:d5:b2:b5:41:2b:3a:
9e:2d:60:00:68:fa:92:9c:36:13:7a:1d:fe:bd:17:
02:b8:be:d0:20:37:33:aa:6a:e8:be:47:fa:fe:6f:
06:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:99:D8:61:59:4E:A1:A4:C7:65:79:55:FB:89:D2:79:DE:CC:25:E0
X509v3 Authority Key Identifier:
keyid:55:61:02:04:50:CC:F3:5D:39:50:65:D4:93:AA:BB:1C:3F:27:54:82
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/007d5bb6-9da0-4c3c-9395-064596a4f789/0/5561020450CCF35D395065D493AABB1C3F275482.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/5561020450CCF35D395065D493AABB1C3F275482.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/007d5bb6-9da0-4c3c-9395-064596a4f789/0/3130332e3138382e31322e302f32342d3234203d3e20313439373437.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.188.12.0/24
Signature Algorithm: sha256WithRSAEncryption
5b:76:84:fa:65:0b:ca:58:4d:f2:3d:26:89:d6:08:30:7a:a4:
97:69:27:cc:5a:23:d9:a0:14:e0:3c:06:46:0e:bb:19:8b:2e:
50:54:6a:93:dc:3d:69:df:1e:dc:f0:96:bc:29:4c:3a:93:cc:
a1:69:fd:ec:47:f3:f9:18:e2:02:ca:4b:d4:a2:08:ae:67:6a:
b1:79:1f:bd:4f:74:93:15:0a:16:6d:71:be:c9:09:1a:fc:56:
44:73:5a:10:5f:84:4b:a9:21:2e:46:b9:02:39:ee:6f:c8:6f:
a2:d1:5f:01:7e:82:dc:60:54:ac:85:c5:dd:fb:b1:dc:70:92:
10:69:36:cd:38:89:37:2a:61:dc:87:4a:b3:4e:a9:3f:7e:d5:
a8:5a:91:5f:ba:67:1d:a7:ea:c4:ee:d8:22:1c:30:17:4a:0e:
93:71:5e:82:79:52:ff:69:4c:31:8f:c4:ba:9d:39:a9:d4:c5:
e4:a2:d0:e5:84:dc:90:43:88:16:c7:27:19:d0:78:7e:b2:08:
d4:3b:d1:ba:d5:d9:88:e8:ed:48:fb:2f:ea:22:06:54:dc:e3:
bf:3c:ed:c0:6d:65:0c:b0:62:87:26:76:31:11:1c:e3:cc:01:
c0:28:c8:ea:22:e7:9b:d9:db:50:64:9f:7d:99:4a:b5:dd:60:
29:b3:65:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:01 2024 by rpki-client on console-fra.rpki-client.org