Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/3130332e3138372e38382e302f32332d3234203d3e20313439393439.roa
File: 3130332e3138372e38382e302f32332d3234203d3e20313439393439.roa (raw, json)
Hash identifier: LMTohTP0I/bHK5OuDmrlJLgw3ulAI43gNX271s3v88s=
Subject key identifier: 02:B8:C6:E1:8D:95:17:01:34:82:0B:D6:44:43:7A:89:39:0C:B6:13
Certificate issuer: /CN=322B7BBC7BE2A84D8D644A6B68333963517CAFFA
Certificate serial: 7D380B37F1D405B65890FF5D9D68F4DC2BDE5BB7
Authority key identifier: 32:2B:7B:BC:7B:E2:A8:4D:8D:64:4A:6B:68:33:39:63:51:7C:AF:FA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/3130332e3138372e38382e302f32332d3234203d3e20313439393439.roa
Signing time: Wed 31 Aug 2022 10:04:37 +0000
ROA not before: Wed 31 Aug 2022 09:59:37 +0000
ROA not after: Wed 30 Aug 2023 10:04:37 +0000
asID: 149949
IP address blocks: 103.187.88.0/23 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7d:38:0b:37:f1:d4:05:b6:58:90:ff:5d:9d:68:f4:dc:2b:de:5b:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=322B7BBC7BE2A84D8D644A6B68333963517CAFFA
Validity
Not Before: Aug 31 09:59:37 2022 GMT
Not After : Aug 30 10:04:37 2023 GMT
Subject: CN=02B8C6E18D95170134820BD644437A89390CB613
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0b:2b:af:b1:d4:b7:a0:6f:3d:5b:69:28:a9:
51:ad:52:6e:60:76:4c:b5:6b:47:18:b4:e5:92:36:
4f:bd:16:39:83:7f:49:17:36:8c:76:27:1c:fe:b1:
8b:28:7a:ee:49:a9:80:05:9f:9b:c8:54:70:65:17:
91:78:86:db:5f:b9:a8:d7:2b:51:9c:d8:d8:bc:9b:
0d:4e:b1:48:46:c4:a7:56:cf:73:fc:5b:3e:17:6f:
bb:de:92:e3:b6:08:f3:37:05:44:07:a7:e4:2a:57:
33:90:87:52:b2:97:3e:12:69:6a:6b:31:74:9b:ca:
bf:f2:ec:35:eb:c7:9c:c1:55:43:d7:71:57:f4:1e:
bb:1a:3a:e0:cf:e3:19:92:6f:31:63:ba:db:f0:54:
db:26:7c:ad:63:89:f6:37:d4:0c:70:2e:53:23:a3:
c4:db:ea:27:ab:3e:fe:01:ac:b4:95:0e:d2:db:b3:
da:19:11:87:f8:6c:b1:b4:05:42:7b:3d:51:80:fb:
1a:fd:cb:f9:24:62:3b:50:75:7a:58:7f:af:81:d2:
77:04:86:31:12:e9:bb:7d:42:29:e8:63:df:33:21:
66:22:a9:88:af:7c:c5:04:43:a1:6d:35:fe:52:8f:
bd:ea:e4:52:44:bb:e3:33:68:a7:31:6b:90:e9:c5:
78:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:B8:C6:E1:8D:95:17:01:34:82:0B:D6:44:43:7A:89:39:0C:B6:13
X509v3 Authority Key Identifier:
keyid:32:2B:7B:BC:7B:E2:A8:4D:8D:64:4A:6B:68:33:39:63:51:7C:AF:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/3130332e3138372e38382e302f32332d3234203d3e20313439393439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.187.88.0/23
Signature Algorithm: sha256WithRSAEncryption
44:8c:ae:25:4f:fe:76:cc:b4:e1:dc:7d:fe:76:d3:26:46:2d:
80:4e:3b:cd:ea:a7:61:bf:ea:27:be:09:9a:af:2f:77:d9:f3:
ab:f2:1d:56:b2:1e:b0:c3:e2:ee:2e:48:f5:5d:e0:e0:1e:43:
ca:8d:22:8a:b4:dc:54:11:3d:54:18:16:c3:56:1c:5c:39:88:
5a:da:45:3e:ca:19:ab:c8:fb:e4:36:42:d2:5f:df:78:bf:33:
d4:cd:88:e2:9d:53:af:05:91:76:2e:71:55:38:4e:3e:e1:1d:
60:19:ab:95:6c:8f:68:c6:80:96:aa:f4:4b:ed:c9:f5:98:59:
cb:bf:b1:df:22:f1:26:dd:e3:b4:81:91:b2:d2:d2:31:08:ed:
1f:52:64:cd:9a:fb:1b:32:81:45:0c:17:e5:35:07:52:20:9e:
1e:e9:b9:9c:c9:1c:ba:47:92:26:6c:88:e8:d9:8f:03:e2:33:
b0:dd:4d:61:9d:58:cb:fc:45:e5:49:ee:c7:fe:91:60:ed:e4:
36:42:13:4d:20:22:1e:af:e2:29:4e:ef:51:59:5c:14:66:0e:
56:78:da:4c:0e:16:84:4e:e7:1e:b2:35:16:74:93:e3:29:73:
ba:93:3f:1e:9f:da:d9:06:c4:56:62:20:05:59:36:bd:27:6d:
0a:6d:62:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:01 2024 by rpki-client on console-fra.rpki-client.org