Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/3130332e3138392e36322e302f32332d3233203d3e20313439373436.roa
File: 3130332e3138392e36322e302f32332d3233203d3e20313439373436.roa (raw, json)
Hash identifier: eBhl2zHdP8f6Mbldfof0AZpWKGE8fJeI5IL+C0aw9i8=
Subject key identifier: 3C:71:4B:07:85:C1:5C:43:B2:57:DB:70:9F:76:51:3A:1A:27:F5:9A
Certificate issuer: /CN=BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307
Certificate serial: 6E157F220CDF3102C3FAA6A3A95109D0F3585012
Authority key identifier: BF:38:DD:D5:DA:2A:BF:08:EB:1D:D8:D8:7B:56:6F:36:EE:73:F3:07
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/3130332e3138392e36322e302f32332d3233203d3e20313439373436.roa
Signing time: Wed 13 Jul 2022 09:00:54 +0000
ROA not before: Wed 13 Jul 2022 08:55:54 +0000
ROA not after: Wed 12 Jul 2023 09:00:54 +0000
asID: 149746
IP address blocks: 103.189.62.0/23 maxlen: 23
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
6e:15:7f:22:0c:df:31:02:c3:fa:a6:a3:a9:51:09:d0:f3:58:50:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307
Validity
Not Before: Jul 13 08:55:54 2022 GMT
Not After : Jul 12 09:00:54 2023 GMT
Subject: CN=3C714B0785C15C43B257DB709F76513A1A27F59A
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e6:f0:1d:92:78:3c:fc:23:47:20:8c:4f:92:
31:6e:5b:af:3b:41:2b:c5:93:a0:eb:dc:4c:d0:b5:
06:4a:15:47:9c:04:e5:53:69:2c:e5:67:7e:39:82:
75:cf:73:c5:9a:03:07:e7:5f:fb:ab:d9:dc:38:4e:
ce:08:f4:8a:1b:14:0d:28:bf:f8:62:04:ac:29:87:
fa:cd:52:b6:8e:89:e4:fa:65:c7:5e:93:70:6b:dd:
1b:56:5e:21:43:93:d6:2f:60:1c:89:91:87:28:bb:
d4:62:09:98:a6:9b:64:47:63:ca:a3:da:85:50:0f:
b7:9e:63:93:a0:a0:2b:3a:11:e8:cd:b1:fa:97:3b:
eb:71:15:5d:d5:6e:ed:49:bc:c8:71:d1:f3:ce:0b:
3e:af:0b:08:54:17:57:16:54:09:54:69:0a:19:d5:
e8:e2:7e:c6:95:5a:6b:62:84:55:fc:16:57:a8:41:
33:05:4e:4c:90:9e:5b:27:ca:44:bc:8e:4d:f4:9d:
c1:fe:1c:09:25:11:29:bb:c7:11:06:04:ba:e7:9d:
15:41:38:09:2d:24:5a:49:73:77:20:fd:6f:2d:8b:
f1:5a:31:46:cb:c8:ae:cf:af:c2:04:0e:16:68:91:
5c:83:ad:44:16:55:05:da:8a:da:95:97:2f:f2:e5:
ac:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:71:4B:07:85:C1:5C:43:B2:57:DB:70:9F:76:51:3A:1A:27:F5:9A
X509v3 Authority Key Identifier:
keyid:BF:38:DD:D5:DA:2A:BF:08:EB:1D:D8:D8:7B:56:6F:36:EE:73:F3:07
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BF38DDD5DA2ABF08EB1DD8D87B566F36EE73F307.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0234ef1d-734d-4c71-8ba7-d31e168b632c/0/3130332e3138392e36322e302f32332d3233203d3e20313439373436.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.189.62.0/23
Signature Algorithm: sha256WithRSAEncryption
62:60:b7:88:09:11:5f:c3:2f:97:51:d3:de:41:21:87:09:55:
92:97:0f:0f:65:b6:2f:07:d6:2b:83:47:72:b0:41:2e:12:4b:
53:4a:53:d0:a4:13:dd:0a:c1:c0:7b:8e:dd:e8:61:76:09:57:
2c:9e:53:7e:6a:e4:2b:e9:1a:7f:60:79:a2:95:29:dc:4a:c7:
12:fd:e1:d4:2c:9c:16:3b:3e:ea:17:1f:d8:fa:81:d8:f4:c7:
d1:e5:a0:05:54:50:64:61:db:40:6a:f3:8d:19:ae:23:96:1b:
cb:ba:06:77:8e:67:c8:a9:50:71:5b:7f:69:f4:9f:2f:03:79:
6d:93:a3:66:0d:a5:6e:04:fd:65:f3:dc:ec:02:67:7e:03:99:
84:ef:a8:61:50:57:f3:3e:bb:ce:d0:00:3f:e4:b7:0c:74:ff:
54:e0:77:18:3b:e5:64:6f:93:0f:13:d1:a0:ad:11:af:74:71:
92:c3:f2:dd:64:85:56:e1:9a:4b:54:b9:76:3a:8f:00:30:c9:
df:67:3d:29:a3:1a:36:fb:2a:a1:6e:ba:f5:64:a1:7c:4d:59:
28:53:71:68:e5:e9:cb:50:1f:7c:b3:e7:fd:52:01:31:f6:f8:
23:b4:c2:4a:c5:9f:48:96:b4:63:d7:64:d9:6e:2b:84:ad:43:
a5:74:2c:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:01 2024 by rpki-client on console-fra.rpki-client.org