Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/3130332e3138372e38392e302f32342d3234203d3e20313439393439.roa
File: 3130332e3138372e38392e302f32342d3234203d3e20313439393439.roa (raw, json)
Hash identifier: QUfBxnfyQYJEoy0QbhzgqKQhkGpkfs5PFARiGMFQW/0=
Subject key identifier: A0:94:E9:63:DE:02:7C:29:38:90:92:A7:CF:DB:4A:84:C5:98:7E:D7
Certificate issuer: /CN=322B7BBC7BE2A84D8D644A6B68333963517CAFFA
Certificate serial: 2CF180D6A90CB463A9CD58A454B6DCD255A16C5A
Authority key identifier: 32:2B:7B:BC:7B:E2:A8:4D:8D:64:4A:6B:68:33:39:63:51:7C:AF:FA
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/3130332e3138372e38392e302f32342d3234203d3e20313439393439.roa
Signing time: Wed 31 Aug 2022 10:15:00 +0000
ROA not before: Wed 31 Aug 2022 10:10:00 +0000
ROA not after: Wed 30 Aug 2023 10:15:00 +0000
asID: 149949
IP address blocks: 103.187.89.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
2c:f1:80:d6:a9:0c:b4:63:a9:cd:58:a4:54:b6:dc:d2:55:a1:6c:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=322B7BBC7BE2A84D8D644A6B68333963517CAFFA
Validity
Not Before: Aug 31 10:10:00 2022 GMT
Not After : Aug 30 10:15:00 2023 GMT
Subject: CN=A094E963DE027C29389092A7CFDB4A84C5987ED7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:8e:36:e1:53:4d:c6:22:68:0a:ed:b3:1d:a2:
1d:fc:c0:d9:46:97:3b:3b:0b:7e:b0:2b:33:dc:c0:
a2:3d:0c:e4:2d:01:eb:94:7b:3d:6d:1e:13:d1:cb:
2e:b3:b1:8b:69:5c:4b:14:1d:63:b7:5b:0a:49:c8:
de:76:89:49:2e:5b:e8:f3:13:ac:37:9e:71:f2:ac:
7f:e2:52:27:25:0e:2b:76:75:9e:7f:5d:1c:a9:5c:
7f:c8:02:9f:bb:29:15:fc:29:12:75:8b:47:9e:f3:
1e:8e:45:43:9a:b3:7c:ed:0f:a8:e7:9d:5f:39:01:
e4:82:34:af:f7:e3:2c:68:a6:8d:73:c4:d2:45:d8:
be:8c:82:eb:1f:99:b2:d0:0a:7f:2e:1a:b5:17:7e:
ab:d0:5a:3c:bb:9d:b8:de:c4:9a:26:cc:35:59:62:
4b:a2:28:78:f1:0c:5d:d8:86:38:97:24:a4:5b:b1:
5b:63:d5:e5:de:81:16:2f:5d:92:4c:b4:78:05:61:
de:4e:4d:54:43:a5:05:97:19:49:9f:2c:cb:30:ac:
03:ec:b6:1e:57:b3:7b:32:07:ce:67:3e:d8:7e:ac:
eb:3d:6e:02:7c:fd:ea:18:88:70:fc:ff:9d:90:38:
3d:22:3b:19:ec:1a:11:1e:86:2f:51:38:6f:d1:0c:
cc:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:94:E9:63:DE:02:7C:29:38:90:92:A7:CF:DB:4A:84:C5:98:7E:D7
X509v3 Authority Key Identifier:
keyid:32:2B:7B:BC:7B:E2:A8:4D:8D:64:4A:6B:68:33:39:63:51:7C:AF:FA
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/322B7BBC7BE2A84D8D644A6B68333963517CAFFA.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0450f0f5-b883-4b24-9792-7e957af88bf8/0/3130332e3138372e38392e302f32342d3234203d3e20313439393439.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.187.89.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:02:c0:13:84:f4:c4:d7:ad:36:3e:2f:c8:0c:ff:ad:6d:07:
f6:20:c0:f1:31:ca:de:ff:fe:05:a5:fd:6c:52:4c:c8:ad:2a:
66:d4:94:81:df:be:8b:89:52:9b:1b:de:07:cd:e8:ae:9a:6d:
44:b5:20:83:71:a1:93:d4:9a:7f:c4:38:0b:fc:f6:03:36:a3:
28:2e:c0:9f:49:0b:28:28:f2:84:7e:45:25:75:15:c0:7b:69:
97:b2:14:9a:9e:40:07:00:db:cf:73:aa:af:9e:ea:da:3c:32:
28:8d:4e:94:71:f6:7d:bc:9c:bd:bd:16:e4:13:21:4e:19:45:
40:30:a3:fa:bd:31:5b:c7:7e:96:b9:e0:6c:3d:37:42:f7:d3:
07:ba:4e:9a:e2:f1:38:03:cb:23:5b:cb:4e:70:eb:4a:f1:51:
84:4c:c1:6f:1f:e9:04:47:96:2b:1a:7c:7c:78:d8:48:38:67:
2b:af:56:df:fa:e6:4e:14:d0:7d:dc:92:3a:28:15:f3:86:14:
c9:f1:58:ee:ed:57:ff:6c:a6:ac:5f:ad:1e:cb:c8:ce:e8:75:
9e:50:4a:57:df:64:f6:d3:5a:6b:88:3e:09:81:90:70:22:e2:
61:b6:4b:5f:e5:65:72:3a:80:c8:7e:7c:bb:ed:4b:38:16:b2:
4c:33:f5:9f
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgIULPGA1qkMtGOpzVikVLbc0lWhbFowDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoMzIyQjdCQkM3QkUyQTg0RDhENjQ0QTZCNjgzMzM5NjM1
MTdDQUZGQTAeFw0yMjA4MzExMDEwMDBaFw0yMzA4MzAxMDE1MDBaMDMxMTAvBgNV
BAMTKEEwOTRFOTYzREUwMjdDMjkzODkwOTJBN0NGREI0QTg0QzU5ODdFRDcwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDHjjbhU03GImgK7bMdoh38wNlG
lzs7C36wKzPcwKI9DOQtAeuUez1tHhPRyy6zsYtpXEsUHWO3WwpJyN52iUkuW+jz
E6w3nnHyrH/iUiclDit2dZ5/XRypXH/IAp+7KRX8KRJ1i0ee8x6ORUOas3ztD6jn
nV85AeSCNK/34yxopo1zxNJF2L6MgusfmbLQCn8uGrUXfqvQWjy7nbjexJomzDVZ
YkuiKHjxDF3YhjiXJKRbsVtj1eXegRYvXZJMtHgFYd5OTVRDpQWXGUmfLMswrAPs
th5Xs3syB85nPth+rOs9bgJ8/eoYiHD8/52QOD0iOxnsGhEehi9ROG/RDMwRAgMB
AAGjggI0MIICMDAdBgNVHQ4EFgQUoJTpY94CfCk4kJKnz9tKhMWYftcwHwYDVR0j
BBgwFoAUMit7vHviqE2NZEpraDM5Y1F8r/owDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby8w
NDUwZjBmNS1iODgzLTRiMjQtOTc5Mi03ZTk1N2FmODhiZjgvMC8zMjJCN0JCQzdC
RTJBODREOEQ2NDRBNkI2ODMzMzk2MzUxN0NBRkZBLmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvMzIyQjdCQkM3QkUyQTg0RDhENjQ0QTZCNjgzMzM5NjM1MTdD
QUZGQS5jZXIwgaQGCCsGAQUFBwELBIGXMIGUMIGRBggrBgEFBQcwC4aBhHJzeW5j
Oi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBvLzA0NTBmMGY1LWI4ODMtNGIyNC05
NzkyLTdlOTU3YWY4OGJmOC8wLzMxMzAzMzJlMzEzODM3MmUzODM5MmUzMDJmMzIz
NDJkMzIzNDIwM2QzZTIwMzEzNDM5MzkzNDM5LnJvYTAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAZ7tZMA0GCSqG
SIb3DQEBCwUAA4IBAQB/AsAThPTE1602Pi/IDP+tbQf2IMDxMcre//4Fpf1sUkzI
rSpm1JSB376LiVKbG94Hzeiumm1EtSCDcaGT1Jp/xDgL/PYDNqMoLsCfSQsoKPKE
fkUldRXAe2mXshSankAHANvPc6qvnuraPDIojU6UcfZ9vJy9vRbkEyFOGUVAMKP6
vTFbx36WueBsPTdC99MHuk6a4vE4A8sjW8tOcOtK8VGETMFvH+kER5YrGnx8eNhI
OGcrr1bf+uZOFNB93JI6KBXzhhTJ8Vju7Vf/bKasX60ey8jO6HWeUEpX32T201pr
iD4JgZBwIuJhtktf5WVyOoDIfny77Us4FrJMM/Wf
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:01 2024 by rpki-client on console-fra.rpki-client.org