Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/3130332e3133362e3136332e302f32342d3234203d3e20313338383134.roa
File: 3130332e3133362e3136332e302f32342d3234203d3e20313338383134.roa (raw, json)
Hash identifier: tYR4f9wtcUq5aM/ItwcViS5PsSlhmDQgLnOHz/lTseM=
Subject key identifier: 23:0B:F5:83:52:5B:0F:38:E3:86:1A:40:64:F0:B3:47:3D:E5:95:C6
Certificate issuer: /CN=473748B8EB39BEE96F6462C3B53CEA392729DEEE
Certificate serial: 7C81A80DCFB507A8D5F02CDAA0DE861ACC00947E
Authority key identifier: 47:37:48:B8:EB:39:BE:E9:6F:64:62:C3:B5:3C:EA:39:27:29:DE:EE
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473748B8EB39BEE96F6462C3B53CEA392729DEEE.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/3130332e3133362e3136332e302f32342d3234203d3e20313338383134.roa
Signing time: Sun 15 Oct 2023 14:00:01 +0000
ROA not before: Sun 15 Oct 2023 13:55:01 +0000
ROA not after: Sun 13 Oct 2024 14:00:01 +0000
asID: 138814
IP address blocks: 103.136.163.0/24 maxlen: 24
Validation: Failed, certificate has expired
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7c:81:a8:0d:cf:b5:07:a8:d5:f0:2c:da:a0:de:86:1a:cc:00:94:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=473748B8EB39BEE96F6462C3B53CEA392729DEEE
Validity
Not Before: Oct 15 13:55:01 2023 GMT
Not After : Oct 13 14:00:01 2024 GMT
Subject: CN=230BF583525B0F38E3861A4064F0B3473DE595C6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:a9:87:a6:70:ef:6e:c4:35:7b:32:e2:45:82:
a1:f2:6a:ec:8a:54:87:27:aa:a5:15:b5:ad:49:4d:
e8:11:bf:21:81:a3:c6:f7:be:82:32:5f:78:5a:3a:
40:8d:c2:cd:1d:ae:59:b3:6c:0f:72:34:45:6a:80:
28:a0:25:c4:5c:de:e2:37:65:db:d7:f1:1f:cd:07:
42:ae:35:53:2a:a6:93:3d:ca:9f:57:6f:05:db:8f:
32:e4:d3:6c:3e:8d:ab:1b:74:15:f1:3d:95:70:23:
fe:9f:0b:5e:37:6b:3b:03:9d:ab:19:f4:ed:7a:7c:
a4:49:af:83:41:ab:24:b4:20:45:6e:8e:b0:c2:fa:
26:4e:35:9c:87:65:72:ab:5a:ae:8b:ec:59:6e:03:
2e:a5:47:9e:f0:bd:ac:4e:38:53:f8:3b:92:9c:a7:
9d:56:5e:87:e1:9b:2a:d1:41:79:72:c2:0f:b9:04:
c2:da:2e:45:a9:12:76:a0:6b:12:91:f9:6e:4d:0c:
a5:38:49:d1:a8:83:08:82:6c:f3:3f:a7:3d:18:ed:
3b:c8:0d:47:34:5e:22:be:64:4e:c5:32:7c:e0:d1:
c4:f2:91:44:61:19:13:34:ae:10:5a:4c:0c:17:3d:
75:ce:01:33:ae:c7:43:0b:a2:e9:79:65:57:6a:47:
eb:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:0B:F5:83:52:5B:0F:38:E3:86:1A:40:64:F0:B3:47:3D:E5:95:C6
X509v3 Authority Key Identifier:
keyid:47:37:48:B8:EB:39:BE:E9:6F:64:62:C3:B5:3C:EA:39:27:29:DE:EE
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/473748B8EB39BEE96F6462C3B53CEA392729DEEE.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/473748B8EB39BEE96F6462C3B53CEA392729DEEE.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/0654a8c3-30c8-4957-8291-a0c1f9b1839e/0/3130332e3133362e3136332e302f32342d3234203d3e20313338383134.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.136.163.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:a9:e7:43:c0:18:95:18:f8:b1:d8:6e:4c:07:5f:65:97:85:
c9:fd:2e:aa:ce:0b:7f:f1:74:14:5d:13:d8:01:08:44:3b:a6:
f0:37:8e:02:e5:a3:45:1b:40:e7:a3:69:1f:0e:0c:83:18:f8:
49:c8:89:b9:a5:b2:ad:a8:0f:8d:81:8e:70:79:4b:4a:8b:57:
bc:b1:95:2c:13:e7:db:2c:b1:f3:8f:74:ca:6f:30:13:0c:6e:
0f:a4:56:85:71:88:d9:f6:4d:e7:8d:97:95:d4:74:11:e5:bb:
ad:06:a1:19:eb:d6:97:50:08:bf:12:49:7c:17:f5:10:18:64:
c8:b1:97:53:c2:c4:fc:1a:fd:97:50:8d:55:6e:9c:00:2f:72:
b1:4f:9d:58:37:a2:72:5c:b4:7d:96:18:15:15:33:19:04:0f:
4e:1a:2a:78:f3:56:c3:23:00:97:76:d0:a6:42:13:2c:84:d7:
0d:ef:77:48:89:3a:ca:2b:06:5e:34:e4:14:9a:77:3a:b5:6c:
95:9f:c2:b8:87:e9:65:5b:31:16:71:3d:dd:be:61:26:6e:1a:
46:10:9b:49:8c:c5:45:f9:50:d4:be:2b:22:69:b9:24:4a:35:
cd:4a:72:a7:ad:07:99:7a:e9:fe:64:f2:f6:cc:73:c4:ee:0a:
77:cd:ec:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 21 02:51:31 2025 by rpki-client